Privacy Policy for First Light Patisserie

At First Light Patisserie, we are committed to protecting your privacy. This Privacy Policy details how we collect, use, and protect your personal information when you interact with our online platform and services. We adhere to the General Data Protection Regulation (GDPR) and other applicable data protection laws.

1. Information We Collect

We collect various types of information to provide and improve our bespoke cake design, artisanal chocolate, fresh pastries, custom dessert tables, corporate gift hampers, and confectionery workshop services.

• Personal Identification Information: This includes your name, email address, postal address for deliveries (e.g., 72 Willow Creek Lane, Richmond, Greater London, TW9 1HR, UK), and telephone number (e.g., 020 7946 0884) when you place an order, enquire about our services, register for a workshop, or subscribe to our newsletter.
• Order and Transaction Details: Information related to your purchases, including product specifications for bespoke orders, payment methods (though we do not store full payment card details ourselves), and delivery instructions.
• Communication Data: Records of your correspondence with us, including emails and messages sent via our online platform.
• Technical Data: Information about your device and how you interact with our site, such as IP address, browser type, operating system, and browsing activity. This is primarily collected through cookies and similar technologies.

2. How We Use Your Information

We use the collected information for the following purposes:

• To Provide Services: Fulfilling your orders for cakes, chocolates, pastries, dessert tables, gift hampers, and workshop bookings. This includes processing payments, arranging delivery, and communicating order updates.
• Customer Support: Responding to your enquiries, providing assistance, and resolving any issues you may encounter.
• Marketing and Communication: With your consent, sending you newsletters, promotional offers, and updates about our new products and workshops. You can opt-out at any time.
• Website Improvement: Analysing how our online platform is used to enhance user experience, improve our product offerings, and troubleshoot technical issues.
• Legal Compliance: Meeting our legal obligations, such as accounting and tax requirements, and responding to lawful requests from public authorities.

3. Legal Basis for Processing

We process your personal information based on the following legal grounds:

• Performance of a Contract: When processing is necessary to fulfil an order or service you have requested from us.
• Legitimate Interests: To operate and improve our business, provided your rights are not overridden. This includes improving our website, preventing fraud, and conducting analytics.
• Consent: Where you have given clear consent for us to process your personal data for a specific purpose, such as sending marketing communications.
• Legal Obligation: When processing is necessary to comply with a legal or regulatory obligation.

4. Sharing Your Information

We do not sell your personal data to third parties. We may share your information with:

• Service Providers: Trusted third parties who assist us in operating our business, such as payment processors, delivery services, and IT support, under strict confidentiality agreements.
• Legal and Regulatory Authorities: When required by law or to protect our rights, property, or safety.

5. Data Retention

We retain your personal information only for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements.

6. Your Data Protection Rights

Under GDPR, you have the following rights regarding your personal data:

• The right to access: You can request copies of your personal data.
• The right to rectification: You can request that we correct any information you believe is inaccurate or complete information you believe is incomplete.
• The right to erasure: You can request that we erase your personal data, under certain conditions.
• The right to restrict processing: You can request that we restrict the processing of your personal data, under certain conditions.
• The right to object to processing: You can object to our processing of your personal data, under certain conditions.
• The right to data portability: You can request that we transfer the data that we have collected to another organisation, or directly to you, under certain conditions.

To exercise any of these rights, please contact us using the details provided below.

7. Security Measures

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction.

8. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us:

First Light Patisserie

72 Willow Creek Lane,

Richmond,

Greater London,

TW9 1HR,

UK

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this Policy periodically to stay informed about how we are protecting your information.