Privacy & Cookies Policy
Last updated: 18 October 2026
This policy explains how Baked by Sydney ("we", "us", "our") collects and uses your personal information when you visit bakedbysydney.com, place an order or get in touch. Baked by Sydney is a home bakery in Marylebone, London, and is the controller of your personal data. If you have any questions, email bakedbysyd@gmail.com.
What we collect
Contact details: your name, email address and phone number.
Order details: the cakes you choose, sizes, flavours, fillings, inscriptions, design notes, inspiration photos you upload, dietary requests, and your chosen pickup date and time.
Billing details: your billing address. Card payments are handled by our payment processor; we never see or store your full card number.
Messages: anything you send us through our contact form, by email or on social media.
Website usage: information collected through cookies and similar technologies, such as pages viewed, device and browser type, and how you arrived at our site (see Cookies below).
How we use your information
We use your information to take, prepare and confirm your order, arrange your pickup, contact you about your order, answer your questions, keep business and tax records, and, if you opt in, send you marketing emails. With your consent, we also use cookies to understand how our website is used and to measure and improve our advertising.
Our legal bases
We process your information because it is necessary to fulfil your order (contract), to run and improve our business (legitimate interests), to meet our legal obligations such as tax record-keeping (legal obligation), and, for marketing emails and non-essential cookies, because you have given your consent. Any dietary information you share is used only to prepare your order safely.
Who we share it with
We do not sell your personal information. We share it only with trusted providers who help us run the business, including:
Squarespace, which hosts our website, online store, checkout, forms and email.
Our payment processor, which securely handles card payments.
Google, which provides our email and the system that manages pickup bookings.
Meta (Facebook and Instagram), which, if you accept marketing cookies, receives information through the Meta Pixel so we can measure and improve our ads.
Some of these providers may process data outside the UK. Where they do, they use appropriate safeguards, such as UK-approved data transfer agreements.
How long we keep it
We keep order and payment records for six years to meet UK tax requirements. We keep other enquiries for up to two years, and marketing preferences until you unsubscribe.
Cookies
Cookies are small files stored on your device. We use:
Essential cookies, needed for the website, shopping cart and checkout to work. These are always on.
Analytics cookies, which help us understand how visitors use our site.
Marketing cookies, including the Meta Pixel, which help us measure the performance of our ads.
We only use analytics and marketing cookies if you accept them in our cookie banner. You can change your choice at any time using the cookie settings link on our website, or by clearing cookies in your browser.
Your rights
Under UK data protection law, you have the right to access the personal information we hold about you, to have it corrected or deleted, to restrict or object to how we use it, to request a copy to transfer elsewhere, and to withdraw your consent at any time. To make a request, email bakedbysyd@gmail.com. We will respond within one month.
Complaints
If you are unhappy with how we have handled your information, please contact us first. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.
Changes to this policy
We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated.