Privacy
Short version: the only personal data this site collects is what you type into an enquiry form, and it exists so a baker can answer you. We do not sell it, we do not build advertising profiles from it, and there is no newsletter signup hidden in the form.
Who is responsible
OmniLearnConsultingCommerce LLC, 447 Broadway, 2nd Floor, Suite 3259, New York, NY 10013, United States, is the data controller for this site. Contact for anything on this page: hello@cakecollection.co.uk.
Because we are established outside the United Kingdom and the European Economic Area but offer this service to people in the UK, your data is processed outside the UK. Transfers rely on the UK International Data Transfer Addendum and on our own security measures set out below.
What the enquiry form collects
When you send an enquiry to a bakery through this site, we record:
- your name;
- your email address;
- your phone number, if you give one;
- the date you need the cake for, if you give one;
- your message;
- which listing you were on and the page you sent it from;
- your IP address, shortened before it is stored, so the last block of an IPv4 address is replaced by zero and only the first half of an IPv6 address is kept.
The shortened IP is kept for one reason: to spot a machine sending hundreds of fake enquiries. It cannot identify a household on its own.
Where it goes
The enquiry is stored in this site’s database and emailed to us at hello@cakecollection.co.uk. If the bakery you wrote to has claimed its listing, the same email also goes to that bakery, so it can reply to you directly. A copy is emailed back to you as confirmation of what was sent.
Once a bakery has your enquiry, what it does with your details is its own business as data controller. We have no visibility of the conversation you have with them afterwards.
Why we are allowed to do this
Sending the enquiry on is the performance of what you asked us to do when you pressed the button. Keeping a shortened IP and screening for spam is our legitimate interest in a service that is not drowned in junk. There is no legal basis in here for marketing, because we do not do any.
How long we keep it
Enquiries are deleted after 24 months. If you ask us to delete yours sooner, we do it and confirm by email.
Who else touches the data
The site is hosted by Hostinger International Ltd in the European Union, which necessarily processes what passes through the server. Email is sent through Google Workspace. Neither is allowed to use your data for its own purposes. We do not use advertising trackers, and we do not share enquiry data with any third party beyond the bakery you wrote to.
Cookies
This site sets no advertising or analytics cookies. WordPress may set a technical cookie if you log in to an account here, which only applies to listed bakeries managing their own page. Browsing and sending an enquiry require no cookie consent because no non-essential cookie is set.
Your rights
You can ask for a copy of what we hold on you, ask us to correct it, ask us to delete it, ask us to restrict what we do with it, or object to it. Write to hello@cakecollection.co.uk and we answer within 30 days, usually the same week. If you are unhappy with how we handle it, you can complain to the Information Commissioner’s Office at ico.org.uk.
Security
The site runs over HTTPS. Access to the enquiry database is limited to the people who run the directory. We do not store card details, because payments for bakery subscriptions never pass through this site.
Changes
If this page changes in a way that affects what we do with your data, the new version is published here before the change takes effect.