Bakes By Holly Back to website

Privacy Policy

Last updated: October 2026

This policy explains what personal information Bakes By Holly collects when you use this website or order from me, what I do with it, and your rights. I keep it to what I genuinely need.

Who I am

Bakes By Holly is a home bakery run by Holly Rippin in Hawkshead, Lake District (LA22). I am the person responsible for your information. You can contact me at bakesbyholly@outlook.com or on 07734 174435.

What I collect and why

When you send an enquiry through the website form, or contact me by email, phone or social media, I receive:

  • your name and email address, and your phone number if you give it
  • the details of your enquiry or order, such as the occasion, date, number to serve, design ideas and any allergies or dietary needs
  • your delivery address, if I am posting an order to you

I use this only to reply to you, give you a quote, bake and deliver your order, and keep the records I need for my business (for example for accounts). I do not use your details for marketing unless you ask me to, and I never sell them.

Allergy and dietary information is used only to make your order safely.

Why I am allowed to use it

Under UK data protection law, I use your information because it is needed to respond to your request and carry out your order (a contract), because I have a legitimate interest in running my bakery, and because I have to keep certain records by law.

Who else handles it

  • Website form: enquiries sent through the form pass through a form delivery service called FormSubmit, which forwards them to my email inbox. It may process your message outside the UK.
  • Email: my email is provided by Microsoft (Outlook).
  • Website hosting: this site is hosted by Cloudflare, which processes basic technical data such as your IP address in order to deliver the pages and keep them secure.
  • Fonts: the site loads its fonts from Google Fonts, so your browser connects to Google when a page loads, and Google receives your IP address.
  • Delivery: if I post an order, your name and address are shared with Royal Mail.
  • Social media: if you message me on Facebook or Instagram, those platforms handle your messages under their own policies.

I do not share your information with anyone else unless I am required to by law.

Cookies and tracking

This website does not set cookies and has no analytics or advertising trackers.

How long I keep it

Enquiries that do not lead to an order are deleted within 12 months. Order records are kept for up to 6 years, because I need them for accounting and tax purposes.

Your rights

You can ask me at any time to:

  • see the information I hold about you
  • correct anything that is wrong
  • delete your information (unless I need to keep it by law)
  • stop using it for a particular purpose

Just email me and I will reply within a month. If you are unhappy with how I have handled your information, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. I would always appreciate the chance to put things right first.

Changes to this policy

If I change how I use your information, I will update this page and the date at the top.