Effective Date

Effective Date: 01/02/2026

1. Who We Are

Sweet Story is a sole trader business operating in the United Kingdom.

Our trading address is 37-39 Knutsford Road, Alderley Edge SK9 7SH.

For the purposes of data protection law, Sweet Story is the data controller of your personal information.

If you have any questions about this policy or your personal data, please email info@sweetstorycakes.co.uk.

2. Information We Collect

We may collect and process the following categories of personal data:

Personal Information

• Name
• Email address
• Phone number
• Billing and collection address

Order Information

• Details of products purchased
• Collection date and time
• Order history

Payment Information

Payments are processed securely via Stripe. We do not store full card details on our website.

Technical Information

• IP address
• Browser type and version
• Device information
• Usage data relating to how you interact with our website

Marketing Preferences

Your preferences for receiving marketing communications, if you opt in.

3. How We Use Your Information

We use your information for the following purposes:

To fulfil your order

To process payments, prepare your cake and arrange collection.

To communicate with you

To confirm orders, respond to enquiries and provide customer support.

To comply with legal obligations

To maintain financial records for tax and accounting purposes.

To improve our website and services

To monitor performance, improve user experience and maintain security.

For marketing, where you have consented

To send occasional updates or promotions if you have opted in to receive them.

4. Lawful Basis for Processing

Under UK GDPR, we rely on the following lawful bases:

• Contract – where processing is necessary to fulfil your order.
• Legal obligation – where we must comply with tax or accounting requirements.
• Legitimate interests – to operate, improve and secure our website.
• Consent – where you have agreed to receive marketing communications.

5. Sharing Your Information

We do not sell or trade your personal information.

We may share your data with trusted third parties who help us operate our business, including:

• Payment processors, such as Stripe
• Website hosting providers
• Accounting providers
• Website analytics providers, if applicable

All third parties are required to handle your data securely and in accordance with data protection law.

6. Data Retention

We retain personal data only for as long as necessary to:

• Fulfil your order
• Meet legal and tax obligations
• Resolve disputes

Financial records are typically retained for a minimum of six years in accordance with UK tax law.

7. Your Data Protection Rights

Under UK data protection law, you have rights including:

• The right to access your personal data
• The right to correct inaccurate data
• The right to request erasure in certain circumstances
• The right to restrict processing
• The right to object to processing
• The right to data portability

If you wish to exercise any of these rights, please contact us at info@sweetstorycakes.co.uk.

You also have the right to lodge a complaint with the Information Commissioner’s Office.

8. Cookies

Our website may use cookies and similar technologies to:

• Ensure website functionality
• Improve user experience
• Analyse website traffic

You can control cookies through your browser settings.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Any updates will be posted on this page and take effect immediately.

10. Google reCAPTCHA

This website uses Google reCAPTCHA to help prevent spam and abuse on our enquiry forms. reCAPTCHA analyses interactions with the website to determine whether a visitor is human. This process may involve the collection of information such as IP address, browser type and user behaviour on the site.

The use of reCAPTCHA is subject to Google’s Privacy Policy and Terms of Service:

• Google Privacy Policy
• Google Terms of Service

11. Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please email info@sweetstorycakes.co.uk.