Privacy Policy

Last updated: 20 October 2025

Who we are: Pinders Patisserie (“we”, “us”, “our”)
Contact: Midhurst, West Sussex, GU29, UK

Phone: 07598 449312

We respect your privacy. This notice explains what personal data we collect on this website and why, how we use it, and your rights under the UK GDPR and the Data Protection Act 2018.

1) Data controller

Pinders Patisserie is the data controller for the personal data described below. You can contact us using the details above.

2) What we collect on this site

Contact form: first name, last name, email, and your message (which may include order ideas, dates, locations, guest numbers, design references and other information you choose to share).
Newsletter sign-up (optional): email address for email marketing.
Order / event discussions by email/phone: any additional details needed to provide a quote and fulfil your order (e.g., flavours, serving numbers, delivery/collection details, invoicing details, dates).
Allergy/dietary information (if you choose to share it): e.g., nut allergies. This may be special category data(health). We only keep and use this with your explicit consent and to ensure safe preparation of your order.
Website usage and cookies: our Wix-hosted site uses essential cookies, and may use analytics or similar technologies. Non-essential cookies require consent under UK PECR; you can manage them via our cookie banner or your browser settings.

3) Why we use your data (lawful bases)

To respond to enquiries, provide quotes and fulfil orders (performance of a contract or steps prior to a contract).
To manage our business, improve our services and website (legitimate interests, balanced against your rights).
Email marketing/newsletters (consent; you can withdraw any time via unsubscribe).
Allergy/dietary notes (explicit consent; you can withdraw, but we may not be able to safely provide products).
Legal/financial records (legal obligation; we may keep order records for tax purposes for up to 6 years).

4) Who we share data with

Service providers / processors: We use Wix.com to host and operate our website, contact forms and email marketing. This means Wix may process your data on our behalf.
Delivery partners or venues (if applicable): basic contact/delivery details to deliver your order or service.
We do not sell your personal data.

5) International transfers

Wix may store data on servers outside the UK (e.g., the EU/US/Israel). Where this happens, appropriate safeguards (such as Standard Contractual Clauses) are applied by Wix to protect your data. (See Wix’s privacy information.)

6) How long we keep your data

General enquiries: up to 12 months after our last communication if no order is placed.
Orders / invoices: normally 6 years for tax/accounting (plus the current year) from the end of the financial year.
Marketing emails: until you unsubscribe or your email bounces.
We keep allergy notes only as long as needed for your order and any follow-up.

7) Your rights

You have rights to: access, rectification, erasure, restriction, objection (to certain processing), data portability, and the right to withdraw consent at any time. You also have the right to complain to the Information Commissioner’s Office (ICO). See the ICO’s guidance on individual rights.

8) Cookies & similar technologies

We only set non-essential cookies with your consent. Essential cookies (needed to operate the site) do not require consent. You can review or change your choices via our cookie banner or your browser. For more about cookies and consent under PECR, see ICO guidance. ICO

9) Children

Our services are intended for adults. We do not knowingly collect children’s data via the website.

10) Security

We use reasonable technical and organisational measures with our providers (including Wix) to protect your personal data.

11) Updates to this notice

We may update this notice from time to time; significant changes will be highlighted on this page with a new “Last updated” date.