Last updated: July 2026

Sundeis Cakes & Patisserie is committed to protecting your privacy and handling your personal data transparently and responsibly. This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Please read this policy carefully. If you have any questions, contact us using the details at the bottom of this page.

1. Who We Are

The data controller responsible for your personal data is:

Sundeis Cakes and Patisserie (Sundeis Ltd)
Foxley Lane, Purley, CR8 3ED
Email: info@sundeis.co.uk
Tel: +44 20 3397 8967

As a small business, we are not required to appoint a Data Protection Officer, but we take our obligations under UK GDPR seriously and are your first point of contact for any data-related queries.

2. What Personal Data We Collect

We may collect and process the following categories of personal data:

Information you provide directly:

Name
Email address
Telephone number
Postal address (for delivery orders)
Dietary and allergen requirements (where provided — see Section 3)
Messages and enquiry content submitted via our contact or enquiry forms
Payment information (processed securely by our payment provider — we do not store card details)

Information collected automatically when you visit our website:

IP address
Browser type and version
Device type and operating system
Pages visited and time spent on our site
Referring website

This technical data is collected by our website host, Wix.com, and is used to ensure the website functions correctly and securely. Please also refer to Wix's own Privacy Policy at wix.com/about/privacy.

3. Special Category Data — Allergen and Dietary Information

Where you provide us with information about allergies, dietary requirements or health-related needs in connection with a cake or food order, this constitutes special category data under UK GDPR. We collect and process this data solely for the purpose of fulfilling your order safely. We will never use this information for any other purpose, and it will not be shared with any third party other than where necessary to fulfil your order (for example, a specialist allergen-free supplier).

The lawful basis for processing this data is explicit consent, which we obtain at the point of order.

4. How We Use Your Personal Data

We only use your personal data where we have a lawful basis to do so. The table below explains how and why we use your information:

Purpose Data used Lawful basis

Responding to enquiries and contact form submissions Name, email, phone, message content Legitimate interests

Processing and fulfilling cake and food orders Name, address, phone, email, dietary info Contract performance

Processing payments Payment details (via third-party processor) Contract performance

Sending order confirmations and updates Name, email Contract performance

Maintaining records of transactions Name, contact details, order details Legal obligation

Improving our website and user experience Technical/device data Legitimate interests

Complying with legal obligations Any relevant data Legal obligation

We do not use your personal data for automated decision-making or profiling.

5. Marketing Communications

We will only send you marketing communications — such as updates about new products, seasonal menus or promotions — if you have explicitly opted in to receive them.

You may withdraw your consent to receive marketing communications at any time by emailing info@sundeis.co.uk or clicking the unsubscribe link in any marketing email. Withdrawal of consent does not affect the lawfulness of any processing carried out before you withdrew it.

6. Sharing Your Personal Data

We do not sell, rent or trade your personal data to any third party.

We may share your data with the following categories of third parties, strictly where necessary:

Wix.com — our website host and platform provider, who processes data on our behalf as a data processor
Payment processors — to securely handle card transactions (e.g. Wix Payments, PayPal or Stripe, depending on your payment method)
Specialist suppliers — where an allergen-free or dietary-specific product is sourced from a third-party supplier to fulfil your order, only the minimum necessary information will be shared
Law enforcement or regulatory authorities — where we are legally required to disclose information

All third-party processors we work with are required to handle your data securely and in accordance with UK GDPR. Where data is transferred outside the UK, we ensure appropriate safeguards are in place.

7. Data Retention

We will only retain your personal data for as long as necessary to fulfil the purpose for which it was collected, or as required by law:

Enquiry and contact form data -12 months from last contact
Order records (for accounting and legal purposes) - 7 years (HMRC requirement)
Marketing consent records - Until consent is withdrawn + 1 year
Website technical/device data -As per Wix.com's data retention policy

8. Your Rights Under UK GDPR

Sundeis Cakes & Patisserie is exempt from the ICO data protection fee registration requirement. However, we remain fully subject to and compliant with the UK GDPR and the Data Protection Act 2018.

Under UK GDPR, you have the following rights in relation to your personal data:

Right of access — you may request a copy of the personal data we hold about you
Right to rectification — you may ask us to correct inaccurate or incomplete data
Right to erasure — you may ask us to delete your personal data in certain circumstances
Right to restrict processing — you may ask us to limit how we use your data
Right to data portability — you may request your data in a portable format where technically feasible
Right to object — you may object to us processing your data on the basis of legitimate interests
Right to withdraw consent — where processing is based on consent, you may withdraw it at any time

To exercise any of these rights, please contact us at info@sundeis.co.uk. We will respond within one calendar month of receiving your request. We may need to verify your identity before processing your request.

If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Website: ico.org.uk
Helpline: 0303 123 1113

9. Cookies

Our website uses cookies — small text files placed on your device — to help the site function correctly and to understand how visitors use it. Wix.com manages the technical placement of cookies on our behalf.

The cookies used on our site fall into the following categories:

Essential cookies — required for the website to function (cannot be disabled)
Analytics cookies — help us understand visitor behaviour so we can improve the site (only placed with your consent)
Marketing/third-party cookies — may be placed by third-party services embedded in our site (e.g. social media buttons, payment widgets)

On your first visit to our site, you will be asked to consent to non-essential cookies via our cookie banner. You can update your preferences at any time by clicking the cookie settings link in our website footer.

For full details of the cookies used by Wix.com, please refer to wix.com/about/privacy.

10. Third-Party Links

Our website may contain links to third-party websites, including social media platforms. We are not responsible for the privacy practices of those sites and encourage you to read their own privacy policies before providing any personal data.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or in applicable law. When we do, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically.

12. Contact Us

If you have any questions, concerns or requests relating to this Privacy Policy or your personal data, please contact us:

Sundeis Ltd
Email: info@sundeis.co.uk
Tel: +44 20 3397 8967
Website: www.sundeis.co.uk