Privacy Policy
Bombshell Bakes Ltd | Cake Atelier
Art you can eat ♡
At Bombshell Bakes, we believe in making beautiful things — and treating your personal information with care.
This Privacy Policy explains how Bombshell Bakes Ltd collects, uses, stores and protects personal information when you visit our website, make an enquiry, book a commission or communicate with us.
We are committed to handling personal information responsibly and in accordance with applicable UK data protection legislation, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who We Are
Bombshell Bakes Ltd is an independent cake atelier specialising in bespoke cakes, desserts and event commissions.
For the purposes of UK data protection law, Bombshell Bakes Ltd is the data controller for personal information collected and used in connection with our business.
Business name: Bombshell Bakes Ltd
Company number: 11468534
Registered in: England and Wales
Website: www.bombshellbakes.com
Privacy contact: Claire-@bombshellbakes.com
Registered office: 3 Gateway House, 57 St Anns, Barking, Essex, England, IG11 7AH
2. Information We Collect
Depending on how you interact with us, we may collect:
Your name and contact details, including your email address and telephone number where provided.
Details of your enquiry, occasion, event date, venue and delivery location.
Information about your requested products, design preferences and commission requirements.
Dietary requirements or allergy information that you choose to share.
Booking, quotation, invoice and payment records.
Correspondence and communications relating to your enquiry or commission.
Website usage and technical information, where collected through Wix or enabled website features.
We only seek information that is relevant to responding to enquiries, providing our services or meeting our legal obligations.
3. How We Use Your Information
We use personal information to:
Respond to enquiries and discuss potential commissions.
Prepare quotations and confirm bookings.
Plan, create, deliver and, where agreed, install products or event displays.
Communicate with customers about their orders.
Issue invoices, record payments and maintain business records.
Manage dietary requirements and relevant product safety information.
Resolve questions, complaints or other service issues.
Maintain website functionality and security.
Meet applicable legal, accounting and regulatory obligations.
We do not currently operate a general marketing mailing list or automatically subscribe customers to promotional emails.
If we introduce a newsletter or other optional marketing communications in the future, we will explain how those services use personal information and provide appropriate choices.
4. Our Legal Bases for Processing Information
Under UK data protection law, we must have a lawful basis for using personal information.
Depending on the circumstances, we rely on:
Contract: Where processing is necessary to provide a quotation at your request, confirm a booking or fulfil an agreed commission.
Legal obligation: Where we must retain or disclose information to comply with applicable tax, accounting, food safety or other legal requirements.
Legitimate interests: Where processing is reasonably necessary for operating and protecting our business, responding to general enquiries, maintaining appropriate records, managing disputes or ensuring website security, provided those interests are not overridden by your rights.
Consent: Where consent is required for a particular activity, such as certain optional website cookies or future marketing communications.
Some allergy or dietary information may reveal health-related information. Where this constitutes special-category personal data, we will identify an appropriate additional legal condition before processing it, such as your explicit consent where suitable.
5. Website Enquiries and Contact Forms
When you contact us through our website, the information you provide is used to respond to your enquiry and, where relevant, discuss or arrange a commission.
Our website is built using Wix, which may process information submitted through website forms and provide services relating to hosting, website operation and security.
The specific information collected and the services involved will depend on the website features and settings enabled.
We do not sell customer enquiry information to third parties.
6. Payments and Financial Information
Payments for bespoke commissions are normally made by bank transfer using the details provided on our invoices.
We maintain records of invoices, payments and transactions for business administration and accounting purposes.
Alternative payment methods may occasionally be arranged. Where a third-party payment provider is used, that provider may process information necessary to complete the transaction under its own applicable privacy arrangements.
We do not need customers to provide their online banking passwords or full card details directly to us.
7. Sharing Information With Others
We do not sell personal information.
We may share relevant information with trusted service providers or other parties where reasonably necessary, including:
Website hosting and technical service providers, including Wix.
Accounting, bookkeeping or other professional advisers.
Payment service providers, where applicable.
Venues, event organisers or authorised representatives involved in arranging delivery or setup.
Delivery or specialist service providers, where used for an agreed commission.
Regulators, public authorities or other parties where disclosure is legally required.
We aim to share only the information necessary for the relevant purpose.
8. How Long We Keep Information
We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, including applicable legal, accounting and regulatory requirements.
For example:
General enquiries: Retained for a reasonable period to manage correspondence and potential follow-up, then deleted or securely disposed of when no longer required.
Confirmed bookings and financial records: Retained for the periods required by applicable tax, accounting and other legal obligations.
Allergy and dietary information: Retained only where needed for safe fulfilment, relevant record-keeping or the management of a legitimate issue or claim.
Website technical records: Retained according to the purposes and settings of the relevant website services.
We will review retention practices and establish appropriate retention periods for the systems we use.
9. Keeping Your Information Secure
We take reasonable steps to protect personal information against unauthorised access, loss, misuse or disclosure.
These include using appropriate account security measures, limiting access to information where practicable and relying on reputable service providers for website and business functions.
No electronic system can guarantee absolute security, but we aim to handle information responsibly and respond appropriately to any security concerns.
10. Cookies and Website Technology
Our website is built using Wix.
Like many websites, it may use cookies or similar technologies for essential functions, security, performance or optional analytics.
The cookies actually used will depend on the website configuration and any additional features enabled.
Where legally required, we will provide information about non-essential cookies and obtain consent before using them.
Visitors will be able to access relevant cookie information and available choices through the website's cookie controls, where implemented.
11. International Processing
Some of the technology providers used to operate our website or business may process personal information outside the United Kingdom.
Where international transfers take place, we will take account of the safeguards required by applicable UK data protection law, including relevant adequacy arrangements or approved contractual protections where appropriate.
Further details may be available in the privacy information provided by the relevant service providers.
12. Your Data Protection Rights
Depending on the circumstances, you may have the right to:
Request access to personal information we hold about you.
Ask us to correct inaccurate or incomplete information.
Request deletion of information where the law allows.
Ask us to restrict certain processing.
Object to processing based on legitimate interests.
Request transfer of eligible information to another provider.
Withdraw consent where processing is based on consent.
These rights are subject to applicable legal conditions and exemptions.
To exercise your rights, please contact us using the details provided in this policy.
We will respond within the timeframes required by law.
13. Complaints and the Information Commissioner's Office
If you have concerns about how we handle personal information, please contact us so we can investigate and respond.
You also have the right to complain to the Information Commissioner's Office (ICO), the UK's independent data protection regulator.
ICO website: www.ico.org.uk
ICO telephone: 0303 123 1113
14. Photographs and Portfolio Content
We may photograph our own finished cakes, desserts and event installations for business records, portfolio use, our website and social media.
Where images include identifiable people, we will consider the appropriate lawful basis and any relevant permissions before publishing them.
If you have confidentiality requirements relating to your event or commission, please discuss these with us in advance.
15. Changes to This Privacy Policy
We may update this Privacy Policy when our services, website features, legal requirements or information-handling practices change.
Any revised version will be published on our website with an updated review date.
Where a change requires additional notification or consent, we will take appropriate steps.
16. Contact Us
For questions about this Privacy Policy or how we handle personal information, please contact:
Bombshell Bakes Ltd
Email: Claire-@bombshellbakes.com
Website: www.bombshellbakes.com
Company number: 11468534
Registered in England and Wales
Registered office:3 Gateway House, 57 St Anns, Barking, Essex, England, IG11 7AH
Art you can eat ♡