Privacy policy

Last updated: 29 October 2026

Reet Petite Bakery Co is responsible for the personal information described in this notice. If you have a question about your information or would like to exercise your privacy rights, email reetpetitebakeryco@gmail.com.

Information you share with me

When you enquire about personalised sugar cookies, corporate orders or a partnership, I collect the details you provide. These may include your name, email address, phone number, company, preferred date, quantity, delivery postcode or collection preference, design brief, reference images and our correspondence. If you book an order, I also keep the information needed to agree, fulfil and administer that order.

The website currently takes enquiries rather than online checkout orders. Please do not send payment card details through a form or email. Only upload images you have permission to share, and avoid including unnecessary personal or sensitive information about yourself or others. If you need to discuss an allergy or another sensitive matter, contact me first so we can agree what information is necessary.

Why I use your information

  • Enquiries, quotes and orders: to respond to your request, discuss designs and availability, and arrange an order. Where this involves steps you ask me to take before entering a contract, or fulfilling our contract, that is the legal basis.
  • General correspondence and running the business: to answer questions, manage supplier and partnership discussions, keep appropriate business records and protect the website from misuse. My legitimate interests are running a small bakery, providing customer service and keeping the website secure.
  • Legal requirements: to keep records or share information where required by law.
  • Optional marketing: to send newsletters if you choose to subscribe. This relies on your consent. Sending an enquiry does not subscribe you to marketing, and you can unsubscribe at any time.
  • Optional analytics: to understand how visitors use the website using Google Analytics, with your consent through the cookie controls.

Details marked as required on a form are needed to deal with that request. Without them, I may be unable to reply or prepare a quote. Sending an enquiry does not confirm a booking.

Website information and cookies

Shopify and the services supporting this website may process technical information such as your IP address, browser, device, security logs and cookie choices to operate and protect the site. Necessary cookies support those functions. Optional analytics and advertising cookies should only operate after you give consent. You can change your optional cookie choices using the website's cookie preferences. Read the cookie policy for more information.

Optional Google Analytics

With your consent through the cookie controls, Google Analytics collects page visits, interactions, browser and device information, and online identifiers to help me understand and improve the website. Google advertising signals and advertising personalisation are disabled in this installation. You can decline analytics cookies or withdraw consent using Cookie preferences in the footer.

Optional Meta advertising measurement

With your consent through the cookie controls, I use the Meta pixel through Shopify’s Facebook & Instagram app to understand visits to this website and measure advertising. It may share page visits, page addresses, IP address, browser and device information, and cookie identifiers with Meta. Meta may associate this activity with your Facebook or Instagram account and use it for advertising measurement and personalisation, as explained in Meta’s Privacy Policy.

The store uses Conservative sharing. I have not enabled advanced matching or the Conversions API through this setting. You can decline optional advertising cookies or withdraw your consent using Cookie preferences in the website footer. You can also manage activity shared with Meta in your Meta account settings. Declining optional cookies does not prevent you from making an enquiry.

Who helps process your information

I use service providers where needed to operate the website and handle your request:

  • Shopify hosts the website and supports native contact and subscription features.
  • Hulk Form Builder, provided by Shop Circle, processes bespoke and corporate enquiry forms, including reference uploads and email notifications.
  • Google provides Gmail for correspondence and Google Analytics with your consent.

If an order requires delivery, I share the details necessary to deliver it with the delivery service used. Professional advisers or public authorities may receive information where necessary for their work or a legal requirement. I do not sell your personal information.

Processing outside the UK

Some service providers operate internationally, so information may be processed outside the UK. Where UK data protection law requires it, transfers must use an appropriate safeguard, such as an adequacy decision or approved contractual protection. The providers' privacy notices explain their international processing arrangements.

How long information is kept

I keep enquiry information while dealing with your request and for a reasonable follow-up period. For confirmed orders, I retain the records needed to fulfil the order, handle any questions or disputes, and meet accounting or other legal requirements. The period depends on the purpose, the nature of the records and any applicable legal obligations. Information that is no longer needed is deleted or anonymised. You can contact me to ask about the retention of a particular record.

Your privacy rights

Depending on the circumstances and legal basis, you may ask to access, correct or erase your information, restrict its use, or receive a portable copy. You can object to processing based on legitimate interests, and you can object to direct marketing at any time. Where processing relies on consent, you can withdraw it at any time without affecting earlier lawful processing.

Email reetpetitebakeryco@gmail.com to make a request. I may need to confirm your identity before sharing information. Some records may need to be retained to meet legal obligations.

You can also raise a concern with the Information Commissioner's Office (ICO), the UK data protection regulator.

Changes to this notice

I will update this notice if the way I handle information changes. The date above shows when it was last revised.