Privacy Policy

Last updated: 19.11.25

Welcome to Village Manor Bakery. Your privacy is important to us. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our website.

1. Who We Are

  • Controller: Village Manor Bakery

  • Website: villagemanorbakery.co.uk

  • Contact: villagemanorbakery04@hotmail.com

  • Address: 499-501 Huddersfield Rd, Oldham OL4 2JG

If you have any questions about how we handle your data, please contact us at the address above.

2. What Data We Collect

We may collect the following types of personal data from you, depending on how you use our website:

  1. Information you provide directly:

    • Name

    • Email address

    • Postal address (e.g., for delivery or order)

    • Telephone number

    • Order details (what you have purchased)

    • Any messages or correspondence (if you contact us)

  2. Automatically collected information:

    • IP address

    • Browser type and version

    • Device type

    • Pages you visit on our site, and how you use them (analytics data)

    • Cookies and similar technologies (see “Cookies” below)

  3. Third-party sources:

    • We may use third-party services (e.g., analytics, payment processors) which may collect data about you.

3. Why We Collect Your Data (Purposes) & Legal Basis

We process your personal data for the following purposes:

  • Order Processing: to manage and fulfil your bakery orders (lawful basis: contract)

  • Communication: to reply to your enquiries or send you transactional emails (contract / legitimate interest)

  • Marketing (optional): if you opt in, to send you newsletters, promotions, or special offers (lawful basis: consent)

  • Analytics & Website Improvement: to understand how people use our website and to improve it (lawful basis: legitimate interests)

  • Legal & Accounting: to comply with legal obligations (e.g. financial records, tax) (lawful basis: legal obligation)

4. Cookies and Tracking Technologies

We use cookies and similar technologies to provide, protect, and improve our services, and to understand how you use our website.

  • Some cookies are strictly necessary (e.g., for order functionality).

  • Others are non-essential (for analytics, marketing, etc.), and we will ask for your consent before placing them, as required under UK regulations. ICO+1

  • You can manage or withdraw your cookie preferences via your browser settings or our cookie banner.

For more details about the specific cookies we use, their purposes, and how long they last, please see our Cookie Policy [link to your Cookie Policy].

5. How Long We Keep Your Data (Retention)

  • Order data: We keep these records for as long as is necessary to fulfil the order, plus any additional period required for legal or accounting purposes (e.g., 6 years for tax, but adapt to your situation). Sprintlaw UK+1

  • Marketing data (if opted in): we may retain your details until you unsubscribe, unless otherwise required by law.

  • Analytics data: we retain aggregated or anonymised data, and personal data only for as long as needed for analysis and improvement.

6. Data Security

We take reasonable technical and organisational measures to keep your personal data safe. These may include:

  • Encryption of sensitive data (e.g., during transmission)

  • Secure servers and backups

  • Access controls so only authorised staff can access your data

  • Regular reviews of our data protection practices

7. Sharing Your Data / Third Parties

We may share your personal data with:

  • Payment processors (to process your orders)

  • Delivery partners (if you request delivery)

  • Analytics providers (for website usage analysis)

  • Marketing platforms (if you opt in to marketing)

  • Professional advisors (e.g., accountants) where required

  • Legal / regulatory authorities if required by law

We will only share the data necessary for the relevant purpose and will use appropriate data protection agreements (data processing agreements) with third parties. Sprintlaw UK

8. International Transfers

If we transfer your data outside the UK (for example, to third-party service providers), we will ensure that appropriate safeguards are in place (e.g., standard contractual clauses) to protect your data in line with UK GDPR requirements. ICO+1

9. Your Rights

Under UK GDPR, you have a number of rights in relation to your personal data:

  • The right to access your data

  • The right to correct any inaccurate or incomplete data

  • The right to erase your data (in some circumstances)

  • The right to restrict processing

  • The right to object to certain types of processing (e.g., marketing)

  • The right to data portability (where applicable)

  • The right to withdraw consent (if we are relying on consent)

If you wish to exercise any of these rights, please contact us at [your privacy contact email].

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) if you believe your data protection rights have been violated. ICO

10. Children’s Data

Our site is not intended for children under 16. We do not knowingly collect personal data from children under this age. If you believe we might have collected data from a child, please contact us so we can delete it.

11. Changes to This Privacy Policy

We may update this policy from time to time (for example, when our practices change or if laws are updated). When we make changes, we will:

  • Update the “Last updated” date at the top

  • Notify users, if appropriate (e.g., via email or website notice)

Please check this page periodically to stay informed about how we protect your data.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we process your data, please contact:

Village Manor Bakery
499-501 Huddersfield Rd, Oldham OL4 2JG
Email: villagemanorbakery04@hotmail.com
Phone: 0161 624 3174