Home / Privacy policy
Privacy policy
What we collect, why we need it, how long we keep it, and how to use your rights.
1. Who we are
This website is run by [full legal name of the business, e.g. “Le Délice Hither Green Ltd”], trading as Le Délice (“we”, “us”). [If a limited company: registered in England and Wales, company number 00000000, registered office: full address].
Shop address: 232 Hither Green Lane, London SE13 6RT. Email: bonjour@ledelice.co.uk. Phone: 020 8852 5847. [VAT number, if VAT registered: GB 000 0000 00]
We are the “controller” of the personal information described in this policy, which means we decide how it is used. We are registered with the Information Commissioner’s Office (ICO), registration number [ICO registration number]. You can contact us about anything in this policy using the details above.
2. The short version
- We only ask for what we need to answer you, take your cake order or hold your table.
- We do not use analytics, advertising or tracking tools on this website, and we never sell your information.
- We only send you our monthly email if you tick the box to ask for it, and you can stop it at any time.
- Allergy information is only used to keep you safe, only with your agreement, and is deleted soon after.
- You can ask to see, correct or delete what we hold about you.
3. What we collect, why, and for how long
| What you do | What we collect | Why, and our legal basis | How long we keep it |
|---|---|---|---|
| Send a cake enquiry or order a cake | Name, phone number, email (optional), the cake, size, collection date, message for the cake and any notes | To reply, confirm and make your cake. Basis: taking steps at your request before a contract, and then performing the contract (UK GDPR Article 6(1)(b)). | 12 months after the collection date, so we can deal with any questions or complaints. Records of payments are kept for 6 years because the law requires it. |
| Request a table | Name, phone number, email (optional), date, time, group size and any requests you tick or write | To manage your request and get the table ready. Basis: taking steps at your request (Article 6(1)(b)). | 3 months after the date of your visit. |
| Send us a message | Name, email, subject and your message | To reply to you. Basis: our legitimate interest in answering people who contact us (Article 6(1)(f)). | 12 months after our last reply. |
| Ask about working with us | Name, email and what you tell us about yourself | To consider your enquiry and reply. Basis: taking steps at your request before a possible contract (Article 6(1)(b)). | 6 months after we reply, unless you ask us to keep it longer for future jobs. |
| Tell us about allergies on a form | The allergy information you give us | Only to prepare your order or visit safely. Basis: your explicit consent (Article 6(1)(a) and Article 9(2)(a)). See section 4. | Deleted within 30 days of your collection or visit. |
| Sign up to our monthly email | Email address, and the date and time you agreed | To send you the email you asked for. Basis: your consent (Article 6(1)(a) and the Privacy and Electronic Communications Regulations). | Until you unsubscribe. After that we keep only your email address on a “do not email” list, so we never contact you by mistake. |
| Visit this website | Technical information such as your IP address, browser type and the pages requested | Recorded automatically in our hosting provider’s server logs to deliver the website and keep it secure. Basis: legitimate interests in running a safe website (Article 6(1)(f)). | Kept by our hosting provider under its own retention policy. We do not use it to identify you. |
Fields marked * on our forms are required because we cannot deal with your request without them. Everything else is optional. If you would rather not use a form, you can always phone or come into the shop.
4. Allergy information
Information about allergies or intolerances can reveal something about your health, which the law treats as especially sensitive. So we only use it if you tick the box on the form to say we may, and only to prepare your cake or your visit safely. We do not use it for anything else and we do not share it outside our team.
You can withdraw your agreement at any time by contacting us. If you would rather not put allergy information in a form, please phone us or tell a member of staff in person instead. Please also tell your server about any allergies every time you order.
5. Our monthly email
If you sign up, we will email you about once a month with specials, seasonal cakes and holiday opening times. Every email has an unsubscribe link, or you can email bonjour@ledelice.co.uk and we will take you off the list. We send the emails using [name of email service, e.g. Mailchimp], which processes your email address on our behalf.
6. When you visit the website
This website does not use analytics, advertising or social media tracking, and does not set cookies of its own. It remembers your text-size choice on your own device if you use that button. The map on our pages only loads from Google if you choose to load it. Our cookie policy explains this in full.
When you follow a link to Google, Instagram or Facebook, you leave our website and those companies’ own privacy policies apply.
7. Who we share it with
We never sell your personal information. We only share it with companies that help us run the business, under contracts that require them to keep it safe and only use it on our instructions:
- IONOS (IONOS Cloud Ltd) hosts this website. When you send a form, it passes through IONOS’s servers and is emailed to us; the website itself does not store it.
- Our email provider, which stores the emails we send and receive, including the form messages you send us. [name of email provider, if not IONOS]
- [Newsletter service], only if you sign up to our monthly email.
If you choose to load the Google map, Google receives information directly from your browser and uses it under Google’s privacy policy. We may also share information if the law requires it, for example with the police or HMRC.
8. Where your data is stored
Our website is hosted by IONOS in data centres in the UK or the European Union. The UK recognises the EU as giving personal information the same level of protection as UK law.
If any provider we use, such as our email or newsletter service, stores personal information in another country, we make sure it is protected to UK standards. Either the country is recognised by the UK as adequate (for US companies, that means being certified under the UK Extension to the EU–US Data Privacy Framework), or we have the UK’s approved International Data Transfer Agreement or Addendum in place. You can ask us for details.
9. Your rights
You have the right to:
- ask for a copy of the personal information we hold about you;
- ask us to correct anything that is wrong or incomplete;
- ask us to delete your information;
- ask us to stop or limit using it, or object to us using it;
- ask for information you gave us in a format you can take elsewhere;
- withdraw your consent at any time, where we rely on consent (for example our monthly email or allergy information). This does not affect anything we did before you withdrew it.
To use any of these rights, email bonjour@ledelice.co.uk, phone us or ask in the shop. There is no charge. We will reply within one month, and tell you if we need longer because the request is complex. We may need to check who you are before we share anything.
10. Complaints
If you are unhappy with how we have used your personal information, please tell us first so we can put it right. Email bonjour@ledelice.co.uk with “Data protection complaint” in the subject, or use the message form. We will acknowledge your complaint within 30 days, look into it, and tell you the outcome without undue delay.
You also have the right to complain to the Information Commissioner’s Office, the UK’s data protection regulator: ico.org.uk/make-a-complaint, telephone 0303 123 1113.
11. Other things you should know
Keeping it secure
Our website is served over an encrypted connection, access to messages and orders is limited to the staff who need it, and we delete information when we no longer need it.
Automated decisions
We do not make any decisions about you by automated means or build profiles of you.
Children
Our forms and monthly email are for adults. If you are under 18, please ask a parent or carer to contact us for you.
Changes to this policy
If we change how we use personal information, we will update this page and the date at the top.