Legal information

Privacy Policy

How Dreamy Cake Bakery collects, uses and protects your information.

Last updated: 28 October 2026

Last Updated: 28 October 2026

Welcome to DREAMY CAKE STUDIO LTD. This Privacy Policy outlines how we collect, use, store, and protect your personal information in compliance with the General Data Protection Regulation (GDPR) and other applicable UK data protection laws.

1. Information We Collect

1.1 Personal Data

When you place an order or contact us, we may collect the following personal data:

  • Full name
  • Email address
  • Phone number
  • Event date, delivery or collection details, postcode/address and recipient details where you provide them
  • Dietary or allergen notes, reference links, inspiration images/files and any other details you choose to include in your message or order request

1.2 Usage Data

If you accept Analytics, Google Analytics processes technical and usage information about your interaction with our Site, such as:

  • Your IP address
  • Browser type and version
  • Pages visited
  • Time spent on each page
  • Referring URLs

1.3 Cookies & similar technologies

We use essential cookies and similar technologies (such as localStorage) to make the Site work and to remember your preferences (for example, your cookie choice). We also store a non-personal preference flag to limit how often we show on-site announcements or special offers (typically for up to 24 hours). You can clear this information at any time via your browser settings.

Your cookie choices

Select Accept all to allow both optional purposes, or open More details to review the switches and select Save choices. For a new choice, switches are initially on as a draft; optional measurement stays off until you save or accept. To decline optional measurement, switch Analytics off and save; Advertising measurement is also switched off. Previously saved choices are shown as saved. Closing preferences does not save changes. Essential storage remembers your choice and protects enquiry forms. Analytics measures pages, product choices and enquiry steps. Advertising measurement allows Google to connect advertising clicks with accepted enquiries through our Google Analytics conversion. For this integration, Advertising measurement requires Analytics; switching Analytics off also switches Advertising measurement off. We do not enable personalised advertising or remarketing through this choice.

Optional purposes are off until you choose them. An older Analytics-only choice does not enable advertising measurement. We remember your choices for up to 180 days, after which we ask again. Use the Cookies button on any page to change or withdraw your choices. Declining optional purposes does not prevent you from browsing or sending an enquiry. Our analytics event parameters exclude your typed messages, contact details and uploaded filenames. Google also receives technical network information when its services load. Your preference is stored locally in this browser; it is not an account-wide setting.

When Advertising measurement is declined, ad_storage and ad_user_data remain denied. ad_personalization remains denied for every choice. Google processes permitted measurement data under its own privacy policy.

2. How We Use Your Information

2.1 Personal Data

The personal data collected is used to:

  • Process and fulfil your orders
  • Respond to your inquiries
  • Coordinate delivery or pick-up details
  • Improve our products and services
  • Ensure compliance with legal obligations

2.2 Usage Data

We use usage data to:

  • Analyse and improve the functionality of the Site
  • Enhance user experience
  • Monitor and prevent potential technical issues

3. Legal Basis for Processing

We process your data under the following legal bases:

  • Consent: You provide consent when submitting your personal data for specified purposes.
  • Contractual Necessity: To fulfil your orders and provide requested services.
  • Legitimate Interests: For the enhancement of our services and Site functionality.
  • Legal Obligation: To comply with UK laws and regulations.

4. Data Sharing

We do not share your personal data with third parties except in the following circumstances:

  • To comply with legal obligations
  • To prevent or investigate potential fraud or security issues
  • With third-party delivery services, if required for order fulfilment
  • With trusted service providers that help us receive enquiries, understand website performance or communicate with you, where needed for the purposes described in this Policy

4.1 Service providers

Our website forms are processed through Formly.email, FormSubmit.co or Formspark before they reach our inbox. Only one form provider is active at a time. When Formspark is active, Cloudflare checks security verification and processes the enquiry, and optional attachments are uploaded to Cloudinary. A download link is included with the enquiry instead of an email attachment; anyone who has this link can open the file. Formspark stores the enquiry and Cloudinary stores uploaded enquiry attachments for six calendar months before scheduled deletion. Please upload only material you are comfortable sharing for your enquiry. FormSubmit may retain submitted form data for up to 30 days; uploaded files are not available through its submission archive. If you choose to contact us through WhatsApp, Instagram, Facebook, Google Maps or similar links, those services process your interaction under their own privacy terms. Google Analytics is used only according to your cookie choice.

5. Data Retention

We retain your personal data only for as long as necessary to:

  • Fulfil the purposes for which it was collected
  • Comply with legal and regulatory requirements
  • Keep order, payment and customer-service records for a reasonable period where needed for accounting, legal, safety or dispute-resolution purposes

Files uploaded with website enquiries are scheduled for deletion from Cloudinary after six calendar months from upload, regardless of file size. Expired files are removed during daily cleanup. This also applies to existing enquiry attachments. Download links then stop working once deletion and cache invalidation have taken effect. This file cleanup does not delete enquiry records, emails, files shared through external links, or copies already downloaded.

6. Your Rights

Under the GDPR and UK law, you have the right to:

  • Access your personal data
  • Correct inaccurate or incomplete data
  • Request deletion of your personal data ("right to be forgotten")
  • Restrict or object to the processing of your data
  • Withdraw your consent at any time
  • Data portability: Request a copy of your data in a structured, machine-readable format

To exercise these rights, please contact us at contact@dreamycake.co.uk.

7. Security

We implement industry-standard security measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction.

8. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page, and significant updates will be communicated via email or a prominent notice on our Site.

9. Contact Us

If you have any questions or concerns regarding this Privacy Policy or wish to exercise your rights, you can contact us at:

DREAMY CAKE STUDIO LTD
Email: contact@dreamycake.co.uk