Privacy Policy
Last updated: [01/03/2026]

1. WHO WE ARE

Josephine’s Homemade Cakes is a sole trader business owned and operated by Iosifina Bonitsi (“we”, “us”, “our”).

Business address:
726A Wilmslow Road
Manchester
M20 2DW
United Kingdom

Email: hello@josiescakes.co.uk
Telephone: 07908780286

For the purposes of data protection law, we are the Data Controller of your personal data.

2. WHAT PERSONAL DATA WE COLLECT

We may collect and process the following categories of personal data:

a) Identity Data

Name

b) Contact Data

Billing address
Delivery address
Email address
Telephone number

c) Transaction Data

Order details
Payment confirmations
Purchase history

d) Technical Data

IP address
Browser type
Device information
Time zone
Cookies and usage data

e) Marketing Data

Your preferences in receiving marketing communications (if applicable)

We do not store full credit or debit card details. Payments are processed securely via third-party payment providers.

3. HOW WE COLLECT YOUR DATA

We collect data:

  • When you place an order

  • When you contact us

  • When you browse our website

  • Through cookies and analytics tools

  • Through secure payment processors

4. LAWFUL BASIS FOR PROCESSING

Under UK GDPR, we rely on the following lawful bases:

Contract

To process and fulfil your order.

Legal Obligation

To comply with tax and accounting requirements (e.g. HMRC obligations).

Legitimate Interests

To prevent fraud and improve our website and services.

Consent

For marketing communications and non-essential cookies.

You may withdraw consent at any time.

5. HOW WE USE YOUR DATA

We use your personal data to:

  • Process and deliver orders

  • Communicate with you

  • Respond to enquiries

  • Prevent fraud

  • Comply with legal obligations

  • Improve our website

  • Send marketing communications (if you have opted in)

6. SHARING YOUR DATA

We may share your personal data with:

  • Website hosting providers

  • E-commerce platform providers (e.g. WooCommerce)

  • Payment processors

  • Delivery providers

  • Accountants or professional advisers

  • Government authorities where legally required

All third parties are required to respect the security of your data and process it in accordance with the law.

Some providers may be located outside the UK. Where this occurs, appropriate safeguards (such as UK-approved transfer mechanisms) are used.

7. DATA RETENTION

We retain personal data only for as long as necessary.

Order and transaction records are retained for 6 years to comply with UK tax and accounting laws.

Marketing data is retained until you withdraw consent.

Technical data is retained in accordance with analytics provider settings.

8. YOUR RIGHTS

Under UK GDPR, you have the right to:

  • Access your personal data

  • Request correction

  • Request erasure (where legally permitted)

  • Request restriction of processing

  • Request data portability

  • Object to processing

  • Withdraw consent at any time

To exercise your rights, please contact us using the details above.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO):

Website: https://www.ico.org.uk

9. COOKIES

Our website uses cookies to:

  • Enable essential website functionality

  • Analyse website traffic

  • Improve user experience

Non-essential cookies (such as analytics or marketing cookies) are used only with your consent.

You may control cookies through your browser settings or through our cookie consent tool.

For more details, please see our Cookie Policy.

10. DATA SECURITY

We implement appropriate technical and organisational measures to protect personal data, including:

  • Secure hosting

  • SSL encryption

  • Restricted access to data

  • Secure third-party payment processing

However, no online transmission can be guaranteed to be 100% secure.

11. CHILDREN

Our website and services are not intended for individuals under the age of 18.

12. INTERNATIONAL TRANSFERS

Where personal data is transferred outside the UK, we ensure appropriate safeguards are in place in accordance with UK GDPR.

13. CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time.

The latest version will always be published on our website.

14. CONTACT US

If you have questions about this Privacy Policy or wish to exercise your rights, please contact:

Josephine’s Homemade Cakes
726A Wilmslow Road
Manchester
M20 2DW
United Kingdom

Email: hello@josiescakes.co.uk