ENQUIRE

Privacy Policy

Mistry Cakes Couture (“we”, “us”, “our”) is committed to protecting your privacy. This notice explains what personal data we collect when you visit https://mistrycakescouture.co.uk/ or get in touch about our work, why we collect it, how long we keep it and the rights you have. It is written to meet the UK General Data Protection Regulation and Data Protection Act 2018 and, for visitors in the European Economic Area, the EU General Data Protection Regulation.

This website is a portfolio and enquiry site. We do not sell products or take payments online.

Last updated: 25 August 2026.

Who is responsible for your data

Mistry Cakes Couture, a bespoke cake studio based in England, is the data controller. You can reach us about anything in this notice at mistrycakescouture@hotmail.com.

The data we collect

  • Enquiry data — the name, telephone number, email address and message you choose to send us through the contact form, by email or through a social-media profile.
  • Consultation data — if an enquiry goes further: your event date, venue, guest numbers, design preferences, dietary and allergen needs, and our correspondence with you.
  • Technical data — IP address, browser type, device type, approximate location and pages viewed. This is collected automatically by the technology that hosts and secures the website.
  • Images — photographs of cakes we have created. Where a photograph could identify a person or a private venue we only publish it with consent.

Why we use it (lawful bases)

  • Responding to your enquiry and preparing a quotation — steps taken at your request before a contract.
  • Planning, creating and delivering a commissioned cake — performance of a contract.
  • Recording allergen and dietary information — legal obligation under food information law.
  • Keeping business and accounting records — legal obligation.
  • Protecting the website and contact form from spam, bots and abuse — legitimate interests.
  • Publishing photographs that identify you, and any future marketing — consent, which you can withdraw at any time.

Who we share it with

We do not sell, rent or trade personal data. We share it only with the following categories of recipient, and only as far as needed:

  • Technology providers that host the website, deliver our email, protect the contact form from spam and display the map on our Contact page. They act on our instructions under data-processing terms.
  • Event partners — venues, planners and delivery or set-up partners for a commissioned cake, who receive only the details needed to deliver it safely.
  • Professional advisers and authorities — our accountant, and HM Revenue & Customs, regulators or courts where the law requires.

Some technology providers process data outside the UK or EEA. Where this happens we rely on recognised safeguards such as adequacy decisions, the UK International Data Transfer Agreement or EU Standard Contractual Clauses. Details of the specific providers we use at any time are available on request.

How long we keep it

  • Enquiries that do not lead to a booking — up to 12 months, then deleted.
  • Records of commissioned cakes, correspondence and invoices — 6 years after the event, as required for tax purposes.
  • Contact-form submissions stored on the website — routinely deleted within 12 months.
  • Technical logs — normally no longer than 30 days.

Your rights

You may ask us to: give you a copy of your personal data; correct it; delete it; restrict or object to our use of it; or transfer it to another provider. Where we rely on consent you may withdraw it at any time. Contact mistrycakescouture@hotmail.com and we will respond within one month.

You also have the right to complain to a supervisory authority. In the UK this is the Information Commissioner’s Office (ico.org.uk). If you are in the EEA you may complain to the data-protection authority in your own country.

Marketing

We do not send marketing communications. If we introduce a newsletter in future it will be opt-in only, and every message will include an unsubscribe link.

Cookies and similar technologies

The website uses a small number of cookies. Essential cookies are always on; any non-essential cookies are set only with your consent. Our Cookie Policy explains each type and how to manage them.

Security

The website is served over an encrypted connection (HTTPS), the contact form is protected against automated abuse, and access to our systems is limited to the people who need it and protected by passwords. No transmission over the internet is completely secure, so please do not send sensitive information through the contact form.

Children

This website is intended for adults. We do not knowingly collect personal data from anyone under 16; if you believe a child has sent us data, contact us and we will delete it.

Changes to this notice

We will post updates on this page and change the date at the top. Material changes will be signposted on the website.