Privacy
Last updated 9 October 2026. This page covers four things you can do here: send an enquiry to a bakery, open an account, leave a review, and, if you run a bakery, pay for a Pro listing. Each collects something different, so each has its own section. We do not sell any of it and we do not build advertising profiles.
Who is responsible
OmniLearnConsultingCommerce LLC, 447 Broadway, 2nd Floor, Suite 3259, New York, NY 10013, United States, is the data controller for this site. Contact for anything on this page: hello@cakecollection.co.uk.
We are established outside the United Kingdom and the European Economic Area but offer this service to people in the UK, so your data is processed outside the UK. Transfers rely on the UK International Data Transfer Addendum and on the security measures set out below.
Enquiries to a bakery
When you send an enquiry through a listing, we record your name, your email address, your phone number and the date you need the cake for if you give them, your message, the listing and page you sent it from, and your IP address shortened before storage (last block of an IPv4 address set to zero, only the first half of an IPv6 address kept). The shortened IP is there to spot a machine sending hundreds of fake enquiries.
The enquiry is stored in the site’s database and emailed to us. If the bakery has claimed its listing, it goes to the bakery too, so it can answer you directly, and a copy comes back to you. From that point the bakery handles your details as its own controller; we do not see the rest of the conversation.
Legal basis: doing what you asked when you pressed send, and our legitimate interest in keeping spam out. Kept for 24 months, or deleted sooner on request.
Accounts
Anyone can open an account, as a cake buyer to leave reviews or as a baker to manage a listing. We store your name, your email address, a password hashed by WordPress (we never see it in clear), whether you confirmed your email, the date you signed up and the IP address used at sign-up. A baker’s account is also linked to the listings it manages, with a log of the changes made to them.
Legal basis: the contract you enter by opening the account. The account stays until you delete it, which you can do yourself under “Delete my account” in your account. That removes the account and your reviews at once. Listings you managed stay in the directory, no longer linked to you.
Reviews
A review shows your display name, your star rating, your text, the date and, if the bakery answers, its reply. Your email address and IP address are never shown to the bakery or to visitors. Reviews are read before they go live; we refuse or remove abusive content, personal details about other people and reviews from anyone connected to the business. A review stays published until you delete it or your account, or until we remove it under those rules.
Pro listings and payments
Payments are handled by Stripe. When a baker subscribes, the card details go straight to Stripe and never reach this site. Stripe sends us back the payer’s name, email address and phone number, the bakery name and town typed at checkout, the subscription status and its renewal date. We use them to switch the listing to Pro and to check that the payer runs the bakery, which can mean calling the number shown on the listing. Stripe handles card data under its own privacy policy.
Legal basis: performing the subscription contract, and our legal duty to keep accounting records. Billing records are kept for six years after the end of the financial year they belong to.
Cookies and audience measurement
We use Google Analytics 4 to count visits and see which pages people use. It stays off until you accept it in the banner at the bottom of the page: before that, no analytics cookie is set, and advertising storage stays refused whatever you choose. If you accept, Google sets its _ga cookies, which last up to two years. You can change your mind with the “Manage audience measurement” button at the foot of every page. Your choice is kept in your own browser, not on our server.
Logging in sets WordPress session cookies. The account cannot work without them, so they do not need consent.
Who else handles the data
- Hostinger International Ltd, Cyprus: hosting of the site and its database.
- Google: sending our emails through Google Workspace, and audience measurement if you accept it.
- Stripe: payments for Pro listings.
- The bakery you write to: your enquiry, and nothing else.
None of them may use your data for its own purposes beyond what is described here and in its own policy.
Your rights
You can ask for a copy of what we hold on you, have it corrected or deleted, restrict what we do with it, object to it, or receive your account data in a portable format. Write to hello@cakecollection.co.uk; we answer within one month. If you are unhappy with the answer, you can complain to the Information Commissioner’s Office at ico.org.uk.
Security
The site runs over HTTPS only. Passwords are hashed, links in our emails expire, and access to the database is limited to the people who run the directory. We hold no card numbers.
Changes
If this page changes in a way that affects what we do with your data, the new version is published here before the change takes effect, with the date at the top updated.