Privacy Policy

Last updated: 15-12-2025

Victoria Confectionery Limited (“we”, “us”, or “our”) is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal data when you interact with our website, place orders, register for programmes, or contact us.

This policy applies to all visitors, customers, parents, and programme participants using our website and services.


1. Who We Are

Business name: Victoria Confectionery Limited
Country of operation: United Kingdom
Business activity:

  • Sale of cakes, pastries, and confectionery products online
  • Delivery of baking programmes and workshops (including confidence-building programmes)

Contact email: info@victoriaconfectionery.co.uk
Registered address: 3 Quedgeley, Yate, Bristol, BS37 4JH


2. What Personal Data We Collect

We may collect and process the following types of personal data:

a) Information You Provide Directly

  • Name
  • Email address
  • Phone number
  • Billing and delivery address
  • Order details (cakes, pastries, programmes)
  • Messages or enquiries sent via forms or email

b) Programme-Related Information

When registering for a baking programme, we may collect:

  • Parent/guardian contact details
  • Age of the young adult participant
  • General information shared voluntarily to help us provide appropriate support

⚠️ We do not request medical records or formal diagnoses. Any additional information is optional and shared at your discretion.

c) Payment Information

  • Payments are processed securely by third-party payment providers (e.g. Stripe).
  • We do not store card or payment details on our servers.

d) Website Usage Data

  • IP address
  • Browser type and device
  • Pages visited and time spent on site
  • Cookies and similar tracking technologies

3. How We Use Your Information

We use your personal data to:

  • Process and fulfil cake and pastry orders
  • Manage programme registrations and bookings
  • Communicate with parents and customers
  • Send order confirmations and service updates
  • Improve our website, services, and user experience
  • Comply with legal and regulatory obligations

4. Legal Basis for Processing (UK GDPR)

We process your personal data under the following lawful bases:

  • Consent – where you have given clear permission
  • Contractual necessity – to fulfil orders or programme registrations
  • Legitimate interests – to operate and improve our business
  • Legal obligation – for accounting, tax, and regulatory compliance

5. How We Share Your Data

We only share your data where necessary, including with:

  • Payment processors (e.g. Stripe)
  • Website hosting providers
  • Email communication services
  • Delivery partners (for product fulfilment)

All third parties are required to handle your data securely and in accordance with UK GDPR.

We do not sell your personal data to third parties.


6. Data Retention

We retain personal data only for as long as necessary:

  • Order and transaction data: as required for legal and tax purposes
  • Programme registration data: for the duration of the programme and a reasonable follow-up period
  • Marketing communications: until you withdraw consent

You may request deletion of your data at any time (see Section 9).


7. Cookies

Our website uses cookies to:

  • Ensure the site functions properly
  • Analyse website traffic and usage
  • Improve user experience

You can manage or disable cookies through your browser settings. Some features of the site may not function correctly without cookies.


8. How We Protect Your Data

We take appropriate technical and organisational measures to protect your personal data, including:

  • Secure hosting environments
  • Limited access to personal data
  • Encrypted payment processing via third-party providers

9. Your Rights Under UK GDPR

You have the right to:

  • Request access to your personal data
  • Request correction of inaccurate data
  • Request deletion of your data
  • Withdraw consent at any time
  • Object to certain types of processing
  • Request data portability

To exercise your rights, contact us at:
info@victoriaconfectionery.co.uk


10. Children and Vulnerable Individuals

Our services may involve young adults (18–25) participating in baking programmes. All registrations and communications are conducted through parents or guardians where appropriate.

We do not knowingly collect personal data from children under 18 without parental involvement.


11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page, with the updated date clearly shown.


12. Contact & Complaints

If you have questions or concerns about how your data is handled, please contact us first:

📧info@victoriaconfectionery.co.uk

If you are not satisfied, you have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO):
https://ico.org.uk