Privacy Policy

Last updated February 23, 2024.

Who we are

This privacy notice for For The Love of Cake (‘we’,’us’, or ‘our’), describes how and why we might collect, store, use and/or share (‘process’) your information when you use our services, such as when you:

Visit our website, or any website of ours that links to this privacy notice. 

Engage with us in other related ways, including any sales, marketing, or events. 

Questions or concerns? Reading this privacy notice will help you understand your privacy rights and choice. If you do not agree with our policies and practices, please do not use our Services. if you still have any questions or concerns, please contact us at 

What personal data we collect and why we collect it 

Personal information you disclose to us

In Short: We collect personal information that you provide to us. 

We collect personal information that you voluntarily provide to use when you express an interest in obtaining information about us, or our products and Services, when you participate in activities on the Services, or otherwise when you contact us. 

The personal information provided by you that we collect depends on the contact of your interactions with us and the Services, the choices you make, and the products and features you use.

The personal information we collect may include the following: 

  • names
  • email addresses
  • phone numbers
  • mailing addresses
  • contact preferences
  • contact or authentication data 
  • billing addresses.

We do not process sensitive information. 

All personal information that you provide to us must be true, complete, and accurate, and you must notify us of any changes to such personal information.


When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.

An anonymised string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service Privacy Policy is available here: After approval of your comment, your profile picture is visible to the public in the context of your comment.


If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.

Contact forms

All information you choose to disclose when a contact form has been completed is subject to this privacy policy, and you have rights to access, delete or withdraw this information (see below section “What rights you have over your data”).
We will only contact you via the email address provided on the contact form, for the purposes to answer your enquiry and/or to book in your order. 


In short: We may use cookies and other tracking technologies to collect and store your information. You can refuse certain cookies and how to do so is set out in our Cookie Notice.

If you leave a comment on our site you may opt in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.

If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.

When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.

If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.

Embedded content from other websites

Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.


Who we share your data with

In Short: We may share information in specific situations described in this section and/or with the following third parties.

We may need to share your personal information in the following situations:

When we use Google Maps Platform APIs. We may share your information with certain Good Maps Platform APIs (e.g Google Maps API, Place API) We obtain and store on your device (‘cache’) your location. You may revoke your consent at any time by contacting us at 

How long we retain your data

In Short: We keep your information for as long as necessary to fulfil the purposes outlined in this privacy policy unless otherwise required by law. 

We will only keep your personal information for as long as it is necessary for the purposes set out in this privacy notice, unless a longer retention period is required or permitted by law (such as tax, accounting, or other legal requirements).

If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognise and approve any follow-up comments automatically instead of holding them in a moderation queue.

For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.

When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymise such information, or, if this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until deletion is possible.

What rights you have over your data

In Short: In some regions such as the European Economic Area (EEA), United Kingdom (UK), Switzerland, and Canada, you have rights that allow you greater access to and control over your personal information. you may review, change or terminate your account at any time. 

You have the right to request access to the personal information we collect from you, change that information or delete it. 

If you have an account on this site, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.

You have certain rights under applicable data protection laws. These may include the right (1) to request access and obtain a copy of your personal information, (2) to request rectification or erasure; (3) to restrict the processing of your personal information; (4) if applicable, to data portability; and (5) not to be subject to automated decision making. 

In certain circumstances, you may also have the right to object to the processing of your personal information. 

To request to review, update or delete your personal information, please contact us by email

If you are located in the EEA or UK and you believe we are unlawfully processing your personal information, you also have the right to complain to your Member State Data Protection Authority or UK Data Protection Authority. If you are located in Switzerland, you may contact the Federal Data Protection and Information Commissioner. 


Where we send your data

Visitor comments may be checked through an automated spam detection service.

Subscribers to our mailing list consent to us adding your email address and name to our mailing list provider. 

We do not sell or share any personal data to any third parties. 

Your contact information

Additional information

We may use your personal information for our own business purposes, such as for undertaking internal research for technological development and demonstration. This is not considered to be ‘selling’ of your personal information. 

How we protect your data

In short: We aim to protect your personal information through a system of organisational and technical security measures.

We have implemented appropriate and reasonable technical and organisational security measures designed to protect the security of any personal information we process. However, despite our safeguards and efforts to secure your information, no electronic transmission over the internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise or guarantee that hackers, cybercriminals, or other unauthorised third parties will not be able to defeat our security and improperly collect, access, steal or modify your information. Although we will do out best to protect your personal information, transmission of personal information to and from our services is at your own risk. You should only access the services within a secure environment.

What data breach procedures we have in place 

In the event of a personal data breach, it is our primary obligation to notify, without delay (and within 72 hours of) the supervisory authority competent in accordance with Article 55, unless the personal data breach is unlikely to result in a risk to the rights and freedoms of natural persons. In circumstances where report of a personal data breach is necessary, we will also be obliged to contact the individuals who’s personal data information has been breached and comply with any recommendations or orders by the relevant authorities. 
UK GDPR guidance is followed in all circumstances. 
Visitor comments may be checked through an automated spam detection service. 

What automated decision making and/or profiling we do with user data

Visitor comments may be checked through an automated spam detection service. We carry out regular checks to make sure that our systems are working as intended, and additional checks to protect vulnerable groups (such as children) from unsuitable user generated content. 

We only collect the minimum amount of data needed and have a clear retention policy for the profiles we create. 

Industry regulatory disclosure requirements

If you have questions or comments about this notice, you may contact our Data Protection Officer Sarah Allen, by email at, or contact us by Post at 

For the love of cake 

Sarah Allen 

49 Ayres Drive, Peterborough, PE2 8JS, United Kingdom,