Privacy Policy

Last Updated: 16.02.26
Business Name: Shadz Cakes
Owner & Data Controller: Shadé McGeady
Website: https://www.shadzcakes.com
Email: hello@shadzcakes.com
Business Address:139 Cunningham Drive, Giffnock, G466EW

1. Introduction

Hi — I’m the owner of Shadz Cakes.
I respect your privacy and am committed to protecting your personal data. This Privacy
Policy explains how I collect, use, store, and protect your information when you:
● Visit my website
● Place an order
● Book a cake consultation
● Register for a class
● Subscribe to my newsletter
● Submit a booking or contact form
I process your data in accordance with the UK General Data Protection Regulation (UK
GDPR) and the Data Protection Act 2018.

2. The Information I Collect

A. Information You Provide
When you place an order, book a class, or complete a form, I may collect:

● Full name
● Email address
● Phone number
● Billing address
● Delivery/postal address
● Event details (date, occasion, cake preferences)
● Messages submitted through contact forms
● Payment confirmation details
● Newsletter subscription details

B. Payment Information
Payments made through my website are processed securely via third-party payment
providers (such as Stripe, PayPal, Wix Pay, Square or similar).
I do not store full credit or debit card details on my website.

C. Automatically Collected Information

When you visit my website, I may collect:

● IP address
● Browser type
● Device information
● Pages visited
● Time spent on pages
● Referring website
● Cookies and analytics data

3. How I Use Your Information

I use your information to:

● Process and fulfil cake orders
● Deliver postal orders
● Confirm and manage bookings
● Process payments for classes
● Communicate about your order or booking
● Send invoices and receipts
● Respond to enquiries
● Improve my website and services
● Send marketing emails (only if you have subscribed)
● Comply with legal and tax obligations

4. Legal Basis for Processing (UK GDPR)

Under UK data protection law, I rely on the following lawful bases:

● Contract – to fulfil orders, bookings, and class registrations
● Legal obligation – for tax and accounting records
● Legitimate interests – to improve services and website performance
● Consent – for sending marketing emails and newsletter communications
You may withdraw consent at any time.

5. Newsletter & Marketing Communications

If you subscribe to my newsletter, I will use your email address to send:

● Promotions
● New product updates
● Class announcements
● Special offers

You can unsubscribe at any time by clicking the “unsubscribe” link in any email or by
contacting me directly.

I do not send marketing emails without your consent.

6. Cookies & Google Analytics

My website uses cookies to improve functionality and analyse traffic.
I use Google Analytics to understand how visitors use my website. Google Analytics may
collect:

● IP address (anonymised where applicable)
● Pages visited
● Time spent on site
● Device and browser type

This helps me improve my website and services.
You can manage or disable cookies in your browser settings.

7. Sharing Your Information

I do not sell your personal data.

I may share your information with:

● Payment processors
● Website hosting providers
● Email marketing providers
● Delivery or postal services (to fulfil orders)
● Accountants or legal advisors where necessary
● Authorities if required by law

All third parties are required to handle your data securely and lawfully.

8. Data Retention

I retain your information only as long as necessary to:

● Fulfil your order or booking
● Meet legal and tax obligations
● Resolve disputes
Financial records may be retained for up to 6 years in accordance with UK tax law.

9. Your Data Protection Rights

Under UK GDPR, you have the right to:

● Request access to your personal data
● Request correction of inaccurate information
● Request deletion of your data
● Restrict or object to processing
● Withdraw consent (for marketing)
● Lodge a complaint with the UK supervisory authority

If you have concerns about how your data is handled, you can contact the UK regulator:
Information Commissioner's Office (ICO)
Website: https://ico.org.uk

10. Data Security

I take appropriate technical and organisational measures to protect your personal data.
However, no online transmission can be guaranteed 100% secure.

11. Third-Party Links

My website may contain links to third-party websites (such as social media platforms). I am
not responsible for their privacy policies or practices.

12. Children’s Privacy

My services are not directed at children under 13, and I do not knowingly collect personal
data from children.

13. Changes to This Policy

I may update this Privacy Policy from time to time. Updates will be posted on this page with
a revised “Last Updated” date.

14. Contact

If you have any questions about this Privacy Policy or how I handle your data, please
contact:

Shadz Cakes
139 Cunningham Drive, Giffnock, G466EW
Email: hello@shadzcakes.com