Privacy policy.

Last Updated: 10th June 2026

  1. WHO WE ARE

Rhi's Cakes ("we", "our", "us") is a sole trader business selling baked goods online.

Business Address:
21 The Tyleshades, Romsey, Hampshire, SO51 5RJ

Email:
rhis.cakes@gmail.com

Website:
https://rhiscakes.co.uk

We are committed to protecting your privacy and handling your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

  1. INFORMATION WE COLLECT

We may collect the following information:

  • Name

  • Billing address

  • Delivery address

  • Email address

  • Telephone number

  • Account login information

  • Order history

  • Payment information (processed securely through Squarespace and payment providers)

  • Marketing preferences

  • IP address

  • Browser and device information

  • Website usage data through cookies and analytics

  1. HOW WE COLLECT YOUR INFORMATION

We collect information when you:

  • Create an account on our website

  • Place an order

  • Contact us through our website or email

  • Sign up to our newsletter

  • Leave reviews

  • Interact with our website through cookies and analytics tools

  1. HOW WE USE YOUR INFORMATION

We use your personal data to:

  • Process and fulfil orders

  • Deliver products to you

  • Manage your account

  • Communicate regarding your orders

  • Respond to enquiries

  • Send marketing communications where you have consented

  • Improve our products and website

  • Prevent fraud and misuse

  • Comply with legal obligations

  1. LEGAL BASIS FOR PROCESSING

We process your data under the following legal bases:

  • Performance of a contract

  • Compliance with legal obligations

  • Legitimate business interests

  • Consent (for marketing communications)

  1. PAYMENT PROCESSING

Payments are processed through Squarespace and its payment processing partners. We do not store full payment card details on our systems.

  1. MARKETING COMMUNICATIONS

If you subscribe to our newsletter, we may send you information about products, offers and updates.

You can unsubscribe at any time by:

  1. USER GENERATED CONTENT

If you tag us on social media, submit reviews, photographs or other content featuring our products, you grant us permission to repost, share and use such content for promotional and marketing purposes unless you request otherwise.

  1. SHARING YOUR INFORMATION

We may share your information with:

  • Squarespace

  • Payment processors

  • Royal Mail

  • Website hosting providers

  • Analytics providers

  • Professional advisers where required

  • Government authorities where legally required

We do not sell your personal information.

  1. DATA RETENTION

We retain personal data only for as long as necessary.

Order records may be retained for up to 6 years for tax and accounting purposes.

Marketing data will be retained until you withdraw consent.

  1. YOUR RIGHTS

You have the right to:

  • Access your personal data

  • Correct inaccurate data

  • Request deletion of your data

  • Restrict processing

  • Object to processing

  • Data portability

  • Withdraw consent

To exercise any of these rights, contact us at rhis.cakes@gmail.com.

  1. COOKIES

Our website uses cookies to:

  • Enable website functionality

  • Remember user preferences

  • Analyse website traffic

  • Improve customer experience

You may control cookies through your browser settings.

  1. SECURITY

We take reasonable measures to protect your personal information from unauthorised access, loss, misuse or disclosure.

  1. COMPLAINTS

If you are unhappy with how we process your personal data, please contact us first.

You also have the right to complain to the Information Commissioner's Office (ICO):

https://www.ico.org.uk

  1. CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time. Any changes will be published on this page.