Privacy policy
Last updated: 25 September 2026
1. Who is responsible for your information?
I am William Richard Bodzinski, a sole trader trading as The Cake Next Door in Glasgow, and the controller of the personal information described in this notice. To contact me about your information or exercise your rights, email william@localcake.co.uk.
This notice covers localcake.co.uk and my handling of enquiries and orders. It is intended to explain processing under the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications (EC Directive) Regulations 2003, as amended.
2. Information I use
You may give me your name, email address, phone number or social media profile, messages, design preferences and inspiration photographs. For orders, I may also need the delivery address, recipient details, celebration date, order details and payment records. Please provide only what is needed and do not send payment card details.
If someone orders a gift for you, I may receive your contact and delivery details from them. I use these to arrange delivery and provide this notice when I first contact you, or otherwise within the applicable UK GDPR time limit.
The hosting service may process technical information such as IP addresses, request times, requested pages and browser details to deliver and secure the website.
3. Why I use your information
| Purpose | Lawful basis |
|---|---|
| Preparing a quote at your request and fulfilling your order | UK GDPR Article 6(1)(b): steps before entering into a contract and performance of a contract |
| Keeping records required for tax and accounting | Article 6(1)(c): legal obligation |
| Responding to other enquiries, arranging delivery to a gift recipient, protecting the website and handling legal claims | Article 6(1)(f): legitimate interests in communicating with customers, delivering orders, protecting systems and establishing or defending legal rights |
You do not have to provide personal information, but without essential contact or order details I may be unable to respond or fulfil your order. This website does not subscribe you to a mailing list or use profiling or solely automated decisions with legal or similarly significant effects.
4. Allergies and dietary requirements
Please discuss ingredient and allergen requirements before ordering. You can describe ingredients to avoid without identifying a person’s medical condition. If it becomes necessary to record an identifiable person’s allergy or other health information, I will first ask for explicit consent for that purpose under Articles 6(1)(a) and 9(2)(a) UK GDPR. Simply sending a message does not replace explicit consent. Please do not send medical records or another person’s health information without prior arrangement.
You may withdraw consent by email at any time. This does not affect the lawfulness of earlier processing, but may mean I cannot meet a particular order requirement. This notice does not promise allergen-free products.
5. Who receives information?
I do not sell customer information or give it to other businesses for their own marketing. Information may be disclosed to public authorities where legally required, limited to what is necessary.
I use Hostinger for website hosting and email services. Hostinger and its authorised service providers may process technical information and correspondence to operate these services on my behalf. Their processing is governed by contractual obligations, including Hostinger’s Data Processing Addendum.
If you contact me through Facebook or Messenger, Meta also processes information under its own privacy terms. The website provides ordinary links to these services; it does not embed a Meta chat or advertising pixel.
6. International processing
Hostinger and its service providers may process information outside the United Kingdom. Hostinger’s Data Processing Addendum provides for the UK International Data Transfer Addendum to the EU Standard Contractual Clauses for relevant restricted transfers from the UK. Other transfers may be covered by UK adequacy regulations. The applicable contractual provisions and service-provider information are available in Hostinger’s Data Processing Addendum, including section 9 and its appendices. You can also email me to request information about the safeguards relevant to your data or a copy of those safeguards.
When you use Facebook or Messenger, Meta’s own terms explain its international processing.
7. How long information is kept
I keep personal information only for as long as needed for the purpose for which it was collected. The following criteria determine that period:
- Enquiries: the time needed to answer, complete any follow-up you request and resolve outstanding issues. Information is deleted when no longer needed for these purposes.
- Orders and delivery: the time needed to fulfil the order and deal with related questions or complaints. Only information needed for accounting, legal obligations or a specific claim is retained afterwards.
- Tax records: for the period required by applicable tax law, including any extension needed for an enquiry or investigation.
- Identifiable allergy information: only while needed to agree and fulfil the relevant requirement or resolve a related issue, subject to any separate lawful reason to preserve it. It is not automatically reused for later orders.
- Claims: for as long as necessary to handle the particular matter, taking account of applicable limitation periods and any legal hold.
- Technical logs and backups: for the period required for security, troubleshooting and service recovery under the hosting and email service settings. Retention depends on the relevant service and backup cycle; copies may remain until that cycle expires.
You may contact me for details about retention of your particular information.
8. Your rights
Depending on the circumstances, you can request access to your information, correction, erasure, restriction of processing and portability. You can withdraw consent at any time where processing relies on consent.
You can object to processing based on legitimate interests for reasons relating to your particular situation. If information is ever used for direct marketing, you have an unconditional right to object to that use.
Email william@localcake.co.uk to exercise your rights or raise a privacy concern. I normally respond within one month. If the law permits an extension, or further information is needed to verify identity, I will explain this.
You can complain to the Information Commissioner’s Office at ico.org.uk/make-a-complaint/. You do not have to exhaust contact with me before doing so.
9. Cookies and external links
The website code does not set cookies or use browser storage, analytics or advertising pixels. Images are hosted with the website and fonts are supplied by your device. There is no online order form, embedded social media content or online payment facility.
Hosting and security services may process technical requests to deliver and protect the site. If additional technologies requiring consent are introduced, they will be used only after the required consent, with a way to decline and withdraw it. This notice will be updated accordingly.
External services linked from this website have their own privacy and cookie terms.
10. Changes to this notice
The latest version will appear on this page with its update date. Where required, I will also notify you of significant changes affecting information already collected.