Privacy Policy

How I collect, use and look after your personal information.

Last updated: 5 November 2026

1. Who I am

Dia's Cakes is a small, registered home bakery in Eastbourne, East Sussex, run by Diana ("Dia"). In this policy, "I", "me" and "Dia's Cakes" mean the business. I am the data controller for the personal information described here.

If you have any questions about this policy or your information, email diascakes20@gmail.com.

2. What information I collect

I only collect what I need to take and deliver your order. That may include:

  • Contact details: your name, email address and phone number.
  • Order and event details: the date you need your order, the type of cake or desserts, size, flavours, design ideas, guest numbers, your venue, and whether you'd like collection, delivery or postage.
  • Delivery details: your delivery or postal address, if your order is delivered or posted.
  • Dietary and allergy information: anything you tell me about allergies or dietary needs. This counts as health information, so I only use it to make your order safely, with your consent.
  • Payment details: card payments are handled securely by Stripe. I never see or store your full card number.
  • Messages: anything you send me by email, Instagram or the forms on this website.
  • Newsletter: your email address, if you sign up for updates.

3. How I use your information

  • To reply to your enquiry and send you a quote.
  • To make, collect, deliver or post your order, and to take payment.
  • To keep you safe if you have an allergy or dietary need.
  • To keep the records I must keep for tax and accounting.
  • To send you the seasonal newsletter, only if you have signed up.

I will never sell your information, and I don't use it for any other kind of marketing.

4. My legal reasons for using it

  • Contract: to quote for, make and deliver your order.
  • Legal obligation: to keep financial records for HMRC.
  • Consent: for the newsletter and for any allergy or health information you share. You can withdraw consent at any time.
  • Legitimate interests: to answer general questions and run my business sensibly, in ways you'd reasonably expect.

5. Who I share it with

I only share your information with trusted services that help me run the business, and only as much as they need:

  • Stripe: to process card payments.
  • Hostinger: hosts this website and processes the forms you send.
  • Google (Gmail): where enquiries and emails are received and stored.
  • Couriers such as Royal Mail: your name and address, if your order is posted.

Some of these companies may store information outside the UK. Where they do, they use legal safeguards approved under UK data protection law.

I may also share information if the law requires it.

6. How long I keep it

  • Enquiries that don't become orders: up to 12 months, then deleted.
  • Orders and payment records: 6 years, as HMRC requires.
  • Allergy information: only for as long as I need it for your order.
  • Newsletter: until you unsubscribe.

7. Cookies and this website

This website does not use advertising or tracking cookies, and I don't run analytics on it.

The fonts on this site load from Google Fonts, which means your browser connects to Google, and Google receives your IP address. When you pay, Stripe's checkout pages may use their own cookies to keep the payment secure. Links to Instagram take you to Instagram, which has its own privacy policy.

8. Your rights

Under UK data protection law you have the right to:

  • ask for a copy of the information I hold about you;
  • ask me to correct anything that's wrong;
  • ask me to delete your information, where I don't need to keep it;
  • object to, or ask me to limit, how I use it;
  • withdraw your consent at any time (for example, unsubscribe from the newsletter);
  • ask for your information in a format you can take elsewhere.

To use any of these rights, email diascakes20@gmail.com. I'll reply within one month.

9. Keeping it safe

I keep your information in password-protected accounts, only share it with the services listed above, and never ask for card details by email or message.

10. Complaints

If you're unhappy with how I've handled your information, please tell me first and I'll do my best to put it right. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.

11. Changes to this policy

I may update this policy from time to time. The latest version will always be on this page, with the date it was last updated at the top.