Your Privacy Matters

Privacy Policy

At Nino & Boo’s Bakes, we are committed to protecting your personal information and respecting your privacy. This Privacy Policy explains what information we collect, how we use it, and the rights you have under UK data protection law when you visit our website or contact us regarding our products and services.

1. Introduction

This Privacy Policy explains how Nino & Boo’s Bakes (“we”, “our”, or “us”) collects, uses, stores and protects your personal information when you visit our website, submit an enquiry or place an order.

We are committed to safeguarding your privacy and handling your personal data responsibly in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and other applicable privacy legislation.

By using our website, you acknowledge that you have read and understood this Privacy Policy.


2. About Us

Nino & Boo’s Bakes is a sole trader business based in Plymouth, Devon, specialising in bespoke cakes, cupcakes, sweet treats and more.


3. Information We Collect

Depending on how you interact with us, we may collect the following personal information:

 

3.1 Information you provide
  • Full name
  • Email address
  • Telephone number
  • Collection preferences
  • Details of your cake enquiry or order
  • Messages submitted through our contact forms or social media
  • Any dietary or allergen information you voluntarily provide
3.2 Information collected automatically

When you visit our website we may automatically collect:

  • IP address
  • Browser type
  • Device information
  • Pages visited
  • Date and time of your visit
  • Website usage statistics through analytics services

4. How We Use Your Information

We use your personal information to:

  • Respond to enquiries
  • Provide quotations
  • Manage cake orders
  • Communicate regarding your order
  • Arrange collection
  • Improve our website and services
  • Meet our legal obligations
  • Prevent fraudulent activity where necessary

We do not sell your personal information to third parties.


5. Lawful Basis for Processing

Under UK GDPR we rely on one or more of the following lawful bases:

 

5.1 Contract

To communicate with you regarding an enquiry or fulfil an order you have requested.

 

5.2 Legitimate Interests

To improve our services, operate our business efficiently and respond to customer enquiries.

 

5.3 Legal Obligation

Where we are required to process or retain information by law.

 

5.4 Consent

Where you have expressly agreed, such as accepting optional cookies or requesting marketing communications.

You may withdraw your consent at any time where consent is the lawful basis.


6. Cookies

Our website uses cookies to improve your browsing experience and understand how visitors use our website.

Cookies may include:

  • Essential website functionality
  • Website performance and analytics
  • User preferences

Further information is available in our Cookie Policy.


7. Sharing Your Information

We only share your information where necessary.

This may include trusted third-party providers who assist us with:

  • Website hosting
  • Email services
  • Website analytics
  • Technical maintenance

These providers only process information on our behalf and are required to keep your information secure.

We may also disclose information where required by law or to protect our legal rights.


8. Data Retention

We retain personal information only for as long as necessary.

Generally:

  • Enquiries are retained for up to 12 months.
  • Order information may be retained for up to 6 years where required for accounting, taxation or legal purposes.
  • Website analytics data is retained in accordance with the settings of the analytics platform used.

Once information is no longer required it will be securely deleted or anonymised.


9. Data Security

We take appropriate technical and organisational measures to protect your personal information from:

  • Unauthorised access
  • Loss
  • Misuse
  • Alteration
  • Disclosure

While every reasonable effort is made to protect your information, no internet transmission can ever be guaranteed to be completely secure.


10. Your Rights

Under UK data protection legislation you have the right to:

  • Request access to your personal information.
  • Request correction of inaccurate information.
  • Request deletion of your information where applicable.
  • Restrict how your information is processed.
  • Object to certain types of processing.
  • Request transfer of your data where appropriate.
  • Withdraw consent where consent is relied upon.

To exercise any of these rights, please contact us using the details provided below.


11. Third-Party Websites

Our website may contain links to external websites or social media platforms.

We are not responsible for the privacy practices or content of third-party websites. We encourage you to read their privacy policies before providing any personal information.


12. Children's Privacy

Our website is not intended for children under the age of 13.

We do not knowingly collect personal information from children.


13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in legislation, business practices or our website.

The latest version will always be published on this page with the revised “Last Updated” date.


14. Complaints

If you are unhappy with how we handle your personal information, we would appreciate the opportunity to resolve your concerns first.

If you remain dissatisfied, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK’s independent authority for data protection matters.


15. Last Updated

3rd July 2026