Privacy Policy for Oceanic Bakes

At Oceanic Bakes, we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our site, engage with our services, or interact with us. Please read this policy carefully.

1. Information We Collect

We collect various types of information in connection with the services we provide, which include bespoke cake design, artisanal chocolate production, custom dessert tables, corporate gift baskets, confectionery workshops, and wholesale supply.

• Personal Identifiable Information (PII): This includes information you voluntarily provide to us when you make an inquiry, place an order, register for a workshop, or subscribe to our newsletter. This may include your name, contact details (such as address, phone number), and any specific dietary requirements or preferences related to your order.
• Order and Transaction Details: When you purchase our products or services, we collect information related to your order, including product selections, customization details, delivery instructions, and payment method details (though credit card numbers are processed by secure third-party payment gateways and not stored on our servers).
• Communication Data: Records of your communications with us, including emails, online chat messages, and phone calls.
• Website Usage Data: Information about how you access and use our online platform, such as your IP address, browser type, referring/exit pages, and the dates and times of your visits. This helps us to improve our site’s functionality and your browsing experience.

2. How We Use Your Information

The information we collect is used for various purposes to provide and improve our services to you:

• To process and fulfil your orders for cakes, chocolates, dessert tables, and other confectionery items.
• To manage your workshop registrations and provide necessary information.
• To communicate with you regarding your inquiries, orders, and service updates.
• To personalize your experience on our site and offer products and services tailored to your preferences, such as bespoke design suggestions.
• To improve our website, products, and services, including analysing trends and customer behaviour.
• For marketing and promotional purposes, such as sending newsletters about new products or special offers, with your consent where required.
• To comply with legal obligations and protect our legitimate business interests.

3. Legal Basis for Processing (GDPR)

Our legal basis for collecting and using your personal information depends on the specific context in which we collect it:

• Performance of a Contract: When we need to process your data to fulfil our contractual obligations, such as processing your order.
• Consent: Where you have given us clear consent to process your personal data for a specific purpose, such as signing up for our newsletter.
• Legitimate Interests: Where processing is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests, such as improving our services.
• Legal Obligation: When we need to process your personal data to comply with a legal or regulatory obligation.

4. Sharing Your Information

We do not sell, trade, or otherwise transfer your personally identifiable information to outside parties except in the following circumstances:

• Service Providers: We may share your data with trusted third-party service providers who assist us in operating our business, conducting our services (e.g., payment processing, delivery partners), or serving you, provided those parties agree to keep this information confidential.
• Legal Requirements: We may disclose your information when we believe release is appropriate to comply with the law, enforce our site policies, or protect ours or others' rights, property, or safety.
• Business Transfers: In the event of a merger, acquisition, or asset sale, your personal information may be transferred as part of the transaction.

5. Data Security

We implement a variety of security measures to maintain the safety of your personal information when you place an order or access your personal information. These include secure servers, encryption, and restricted access to data for authorized personnel only.

6. Data Retention

We will retain your personal information only for as long as is necessary for the purposes set out in this Privacy Policy, typically for the duration of our relationship with you and for a reasonable period thereafter to address any questions or issues, or to comply with legal requirements.

7. Your Data Protection Rights

Under GDPR, you have the following rights regarding your personal data:

• The right to access: You have the right to request copies of your personal data.
• The right to rectification: You have the right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete.
• The right to erasure: You have the right to request that we erase your personal data, under certain conditions.
• The right to restrict processing: You have the right to request that we restrict the processing of your personal data, under certain conditions.
• The right to object to processing: You have the right to object to our processing of your personal data, under certain conditions.
• The right to data portability: You have the right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.

If you make a request, we have one month to respond to you. To exercise any of these rights, please contact us using the details below.

8. Third-Party Links

Our site may contain links to third-party websites. We are not responsible for the privacy practices or the content of such websites. We encourage you to review the privacy policies of any third-party sites you visit.

9. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated date. We encourage you to review this Privacy Policy periodically for any changes.

10. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us: