Privacy Policy for Epoch Eats
Welcome to Epoch Eats. We are an artisanal bakery and patisserie located at 17 Hawthorn Lane, Unit 3A, Stratford-upon-Avon, Warwickshire, CV37 6HA, UK. This privacy policy explains how we collect, use, disclose, and safeguard your information when you visit our website, which showcases our seasonal baked goods and custom cake portfolio, or engage with our services, including bespoke celebration cakes, seasonal pastries, afternoon tea sets, custom dessert catering, and baking workshops. We are committed to protecting your personal data and your right to privacy. If you have any questions or concerns about this privacy policy, or our practices with regard to your personal information, please contact us.
1. Information We Collect
We may collect personal information that you voluntarily provide to us when you express an interest in obtaining information about us or our products and services, when you participate in activities on our online platform, or otherwise when you contact us.
- Personal Data You Provide: This may include your name, address, email address, phone number, and any other contact details necessary for order fulfillment, workshop enrolment, catering inquiries, or bespoke cake consultations.
- Payment Data: We do not store sensitive payment information on our servers. All payment transactions are processed by secure third-party payment processors. We may collect information related to a transaction, such as the date and time of the transaction, and the amount charged.
- Data from Interactions: Information you provide when interacting with our online forms for inquiries, custom orders (e.g., specific cake design preferences, dietary requirements for gluten-free or vegan options), or workshop registrations.
- Technical Data: Information our servers automatically collect when you access our site, such as your IP address, browser type, operating system, access times, and the pages you have viewed directly before and after accessing our website. This data is primarily needed to maintain the security and operation of our website, and for our internal analytics and reporting purposes.
2. How We Use Your Information
We use individual information collected via our website for various business purposes, including:
- To provide and manage your orders and services, such as fulfilling bespoke celebration cake orders, arranging afternoon tea set deliveries, or confirming workshop enrolments.
- To respond to your inquiries and offer customer support.
- To send administrative information, such as changes to our terms, conditions, and policies.
- To process payments for our artisanal bakery products and services.
- To send you marketing and promotional communications, if you have opted in to receive them, regarding our seasonal baked goods, new offerings, or special events.
- To improve our website and services through data analytics.
- To comply with legal obligations and protect our legal rights.
3. Legal Basis for Processing Personal Data (GDPR)
Under the General Data Protection Regulation (GDPR), we process your personal data on the following legal bases:
- Consent: Where you have given clear consent for us to process your personal data for a specific purpose (e.g., signing up for our newsletter).
- Contract: Where processing is necessary for the performance of a contract with you, or to take steps at your request before entering into a contract (e.g., fulfilling a custom dessert catering order).
- Legal Obligation: Where processing is necessary for compliance with a legal obligation to which we are subject.
- Legitimate Interests: Where processing is necessary for our legitimate interests or those of a third party, and your fundamental rights do not override those interests (e.g., improving our services, preventing fraud, direct marketing where legally permitted).
4. Sharing Your Information
We may share your information with trusted third parties only when necessary and under strict conditions:
- Service Providers: We may share your data with third-party vendors, service providers, contractors, or agents who perform services for us or on our behalf and require access to such information to do that work (e.g., payment processors, website hosting providers, delivery services for our afternoon tea sets).
- Legal and Regulatory Requirements: We may disclose your information where we are legally required to do so in order to comply with applicable law, governmental requests, a judicial proceeding, court order, or legal process.
- Business Transfers: We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.
We do not sell, rent, or trade your personal information with third parties for their independent marketing purposes.
5. Data Retention
We will only retain your personal information for as long as it is necessary for the purposes set out in this privacy policy, unless a longer retention period is required or permitted by law (such as tax, accounting, or other legal requirements). When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize it, or, if this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until deletion is possible.
6. Security of Your Information
We use administrative, technical, and physical security measures to help protect your personal information. While we have taken reasonable steps to secure the personal information you provide to us, please be aware that despite our efforts, no security measures are perfect or impenetrable, and no method of data transmission can be guaranteed against any interception or other type of misuse.
7. Your Data Protection Rights (GDPR)
In some regions (like the European Economic Area), you have certain rights under applicable data protection laws. These may include the right to:
- Request Access: To your personal data.
- Request Rectification: Of inaccurate or incomplete personal data.
- Request Erasure: Of your personal data (the "right to be forgotten").
- Request Restriction of Processing: Of your personal data.
- Object to Processing: Of your personal data.
- Request Data Portability: To receive your personal data in a structured, commonly used, and machine-readable format.
- Withdraw Consent: At any time where we are relying on consent to process your personal information.
- Complain: To a supervisory authority.
To exercise any of these rights, please contact us using the contact details provided below. We will respond to your request in accordance with applicable data protection laws.
8. Cookies and Other Tracking Technologies
Our website may use cookies and similar tracking technologies to collect and store information. Specific information about how we use such technologies and how you can refuse certain cookies is detailed in our Cookie Policy.
9. Updates to This Policy
We may update this privacy policy from time to time. The updated version will be indicated by a revised "effective date" and the updated version will be effective as soon as it is accessible. We encourage you to review this privacy policy frequently to be informed of how we are protecting your information.
10. Contact Us
If you have questions or comments about this privacy policy, please contact us at:
Epoch Eats
17 Hawthorn Lane, Unit 3A
Stratford-upon-Avon, Warwickshire, CV37 6HA
United Kingdom