This privacy notice explains how Sweet Haven processes personal data for its website and bakery services in Hull. It follows the data lifecycle from collection through use, disclosure, retention, and deletion.
This section outlines how information handling, individual rights, and support channels are addressed within this notice.
We may process name, email address, phone number if provided, inquiry message, order specifications, event date or collection preferences, and allergen information voluntarily supplied. We also process technical data such as server request metadata and browser and device information when the website is used.
Data is received through the contact form, email, phone, bakery counter interactions, and order or subscription communications. Technical information is collected automatically from the website and server environment when pages are accessed or forms are submitted.
The site uses essential cookies needed for basic operation and cookies that store privacy preferences. We do not state that analytics or marketing cookies are active on the basis of the current site configuration.
We use essential cookies for site operation and cookies that remember privacy preferences. Where browser controls allow, users may block or delete cookies, but some site functions may not work as intended if essential cookies are disabled.
We use personal data to respond to contact requests, manage orders and subscription enquiries, confirm collection or delivery preferences, handle allergen information that a customer chooses to provide, maintain website security, and support technical delivery of the site. We may also use data to keep records needed for administration and compliance.
We may share personal data with service providers that support website delivery, message handling, technical maintenance, or similar operational functions. Any such sharing is limited to what is needed for the service being provided and is used under appropriate confidentiality and security arrangements.
We may disclose personal data where required to comply with law, a court order, or a lawful request from a public authority. We may also share information where disclosure is necessary to establish, exercise, or defend legal claims.
Subject to applicable law, individuals may ask for access to their data, correction of inaccurate information, deletion where it is no longer needed, restriction of certain processing, or an objection to processing based on legitimate interests. Some requests may be limited where we must keep information for legal, security, or record-keeping reasons.
To protect privacy, we may ask for enough information to verify identity and understand the request. We then review the request, confirm whether any legal or operational limits apply, and respond through the same service channels used for the enquiry where appropriate.
We retain personal data for the period needed to handle enquiries, manage orders or subscriptions, maintain records connected with the service, and meet legal or accounting obligations where applicable. When the relevant purpose ends, data is deleted or anonymised unless a lawful reason requires continued retention.
When we make material changes, we will update the notice on the website and, where appropriate, draw attention to the revised version through the usual service channels. The updated notice applies from the time it is published unless a later effective date is stated.
