Privacy Policy

Gifree Bakery ('we', 'us', 'our') is committed to protecting your personal data. This Privacy Policy explains how we collect, use, and protect your information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Our website is: https://gifreebakeryuk.com

Data We Collect

When you place an order or contact us, we may collect the following information:

●      Name and contact details (email address, phone number)

●      Delivery and billing address

●      Payment information (processed securely by Shopify Payments — we do not store card details)

●      Order history and preferences

●      Communications you send us

●      Website usage data via cookies (see Cookies section below)

How We Use Your Data

We use your personal data to:

●      Process and fulfil your orders

●      Send order confirmations and delivery updates

●      Respond to your enquiries

●      Send marketing emails (only if you have opted in — you can unsubscribe at any time)

●      Improve our website and services

●      Comply with our legal obligations

Legal Basis for Processing

We process your data under the following lawful bases: contract performance (to fulfil your order), legitimate interests (to improve our services), legal obligation (where required by law), and consent (for marketing communications).

Data Sharing

We do not sell your personal data. We may share your data with trusted third parties only where necessary:

●      Shopify Inc. — our e-commerce platform and payment processor

●      Klaviyo — our email marketing provider

●      Royal Mail or courier services — for order delivery

●      Legal authorities — where required by law

Data Retention

We retain your personal data for as long as necessary to fulfil the purposes described in this policy, or as required by law. Order data is typically retained for 7 years for tax and accounting purposes.

Your Rights

Under UK GDPR, you have the right to:

●      Access the personal data we hold about you

●      Request correction of inaccurate data

●      Request deletion of your data ('right to be forgotten')

●      Object to or restrict processing of your data

●      Data portability

●      Withdraw consent at any time for marketing communications

To exercise any of these rights, please contact us at geral@gifreebakeryuk.com.

Cookies

Our website uses cookies to improve your browsing experience and to help us understand how the site is used. You can manage cookie preferences via the cookie banner on our website or through your browser settings.

Security

We take reasonable steps to protect your personal data from unauthorised access, loss, or misuse. All payment transactions are encrypted and handled securely by Shopify.

Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date.

Contact & Complaints

If you have any questions about this Privacy Policy or wish to make a complaint, please contact us at geral@gifreebakeryuk.com. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at www.ico.org.uk.