Privacy Policy

Privacy Policy (Crumb Spell)

Last updated: [30 April 2026]

​

Who we are

Crumb Spell (“we”, “us”, “our”) is a small baking business based in the United Kingdom. We are the “data controller” for the personal data we collect through this website.
​

Contact details
Email: crumb.spell@gmail.com

If you have questions about this policy or your data, contact us using the details above.

​

What personal data we collect:
​
We may collect the following information when you use our website or place an order:
 

1. • Identity and contact details (name, email address, phone number, delivery address)
   • Order details (items purchased, notes you add, fulfilment choice)
   • Payment information (payments are processed by our payment provider — we do not store full card details)
   • Communications (messages you send us via forms, email, or social media)
   • Technical data (IP address, device/browser information, pages visited, cookies)
    

2. How we collect your data
   We collect data when you:
   • Place an order or request delivery/pickup
   • Fill in a form on our site (e.g., enquiries, event requests)
   • Subscribe to updates (if you opt in)
   • Contact us by email or social media
   • Browse our site (via cookies and similar technologies)
    

3. Why we use your data and our lawful bases
   
   We use your data for the purposes below:
    

A) To process and fulfil your orders (preparing, packing, delivery/pickup, customer support)
Lawful basis: Contract (we need this to provide what you’ve ordered).
 

B) To manage our relationship with you (replying to enquiries, resolving issues, sending service emails like order confirmations)
Lawful basis: Contract and/or Legitimate interests (running our business and supporting customers).
 

C) To improve our website and understand how it’s used
Lawful basis: Legitimate interests and/or Consent (depending on the cookie type and your choices).
 

D) Marketing (only if you choose to receive it)
If you sign up to receive updates, we may send you occasional messages about new flavours, seasonal drops, or ordering reminders.

Lawful basis: Consent. You can opt out at any time (see section 9).
 

1. Who we share your data with
   
   We may share personal data only when needed to run our website and fulfil orders, for example with:
   • Website platform providers (e.g., Wix and its service partners)
   • Payment processing providers (to take payment)
   • Delivery and courier services (to deliver your order)
   • Analytics tools (to understand site performance — subject to your cookie settings)
    

We do not sell your personal data.*
 

International transfers

Some of our service providers may process data outside the UK. Where this happens, we take steps to ensure appropriate safeguards are in place in line with UK data protection law.
 

How long we keep your data

We keep personal data only as long as necessary for the purposes described above, including:
• Order and accounting records: kept for as long as required by law and good business practice
• Enquiries: kept for a reasonable period to manage follow-ups
• Marketing records: kept until you unsubscribe or we no longer need them
• Analytics/cookies: retained according to cookie settings and provider policies
 

Keeping your data secure

We take reasonable measures to protect your personal data, including limiting access and using reputable service providers. No website can guarantee 100% security, but we work to keep your information safe.
 

Your rights (UK GDPR)
​
You have rights over your personal data, including the right to:
• Access your data
• Correct inaccurate data
• Request deletion (in certain circumstances)
• Restrict or object to processing (in certain circumstances)
• Data portability (in certain circumstances)
• Withdraw consent (where we rely on consent, e.g., marketing)
 

To exercise any of these rights, contact us at crumb.spell@gmail.com . If you receive marketing from us, you can unsubscribe using the link in the email or by contacting us.

You also have the right to complain to the UK Information Commissioner’s Office (ICO) if you’re unhappy with how we handle your data.
 

Cookies and similar technologies

We use cookies and similar tools to help the website work and to understand how it’s used. Some cookies are essential; others (like analytics/marketing cookies) may be optional. You can manage your cookie preferences through our cookie banner/settings (where available). Wix provides tools such as a cookie banner/consent manager that you can enable on your site.
 

Children

Our website is not intended for children, and we do not knowingly collect personal data from children.
 

Changes to this policy

We may update this Privacy Policy from time to time. The latest version will always be posted on this page with the updated date.