Privacy Policy

1. Information We Collect

Personal Information

When you use our services, we may collect the following personal information:

• Name and contact information (email address, phone number)
• Business information (bakery name, address)
• Payment information (processed securely through third-party providers)
• Account credentials (username, encrypted password)

Usage Data

We automatically collect certain information about how you use our service:

• Log data (IP address, browser type, pages visited)
• Device information (operating system, device type)
• Usage patterns (features used, time spent in application)
• Cookies and similar tracking technologies

Business Data

To provide our bakery management services, we process:

• Order information from your Shopify store
• Product and recipe data
• Production schedules and baking lists
• Inventory and supply information

2. How We Use Your Information

We use the information we collect to:

• Provide and maintain our bakery management services
• Generate baking lists and production schedules
• Process payments and manage your account
• Communicate with you about your service and support requests
• Improve our services and develop new features
• Ensure security and prevent fraud
• Comply with legal obligations
• Send you marketing communications (with your consent)

3. Information Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

Service Providers

We work with trusted third-party service providers who assist us in operating our service:

• Payment processors (Stripe, PayPal)
• Cloud hosting providers (Microsoft Azure)
• Email service providers
• Analytics services (Google Analytics)

Legal Requirements

We may disclose your information if required by law or in response to valid legal process, such as:

• Court orders or legal proceedings
• Government requests
• To protect our rights, property, or safety
• To protect the rights, property, or safety of our users

4. Data Security

We implement appropriate technical and organizational security measures to protect your personal information:

• Encryption of data in transit and at rest
• Regular security assessments and updates
• Access controls and user authentication
• Secure data centers and infrastructure
• Employee training on data protection
• Incident response procedures

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

5. Data Retention

We retain your personal information for as long as necessary to:

• Provide our services to you
• Comply with legal obligations
• Resolve disputes and enforce agreements
• Improve our services

When you close your account, we will delete or anonymize your personal information within 90 days, unless we are required to retain it for legal purposes.

6. Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal information:

UK GDPR Rights

• Access: Request a copy of the personal information we hold about you
• Rectification: Request correction of inaccurate or incomplete information
• Erasure: Request deletion of your personal information
• Portability: Request transfer of your data to another service
• Restriction: Request limitation of processing in certain circumstances
• Objection: Object to processing based on legitimate interests
• Withdraw consent: Withdraw consent for marketing communications

To exercise these rights, please contact us at info@bakinglist.co.uk. We will respond to your request within 30 days.

7. Cookies and Tracking Technologies

We use cookies and similar technologies to improve your experience on our website:

Essential Cookies

These cookies are necessary for the website to function and cannot be switched off.

Analytics Cookies

We use Google Analytics to understand how visitors use our website. You can opt out by visiting the Google Analytics opt-out page.

Managing Cookies

You can control cookies through your browser settings. Note that disabling cookies may affect the functionality of our website.

8. International Data Transfers

Our services are hosted in the United Kingdom. If you are accessing our services from outside the UK, your information may be transferred to, stored, and processed in the UK. We ensure appropriate safeguards are in place for any international transfers in accordance with applicable data protection laws.

9. Children's Privacy

Our services are not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If you become aware that a child has provided us with personal information, please contact us and we will delete such information.

10. Changes to This Privacy Policy

We may update this privacy policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. We will notify you of any material changes by:

• Posting the updated policy on our website
• Sending an email notification to registered users
• Displaying a prominent notice on our service

Your continued use of our services after any changes indicates your acceptance of the updated privacy policy.

11. Contact Information

If you have any questions, concerns, or requests regarding this privacy policy or our data practices, please contact us:

12. Supervisory Authority

If you are not satisfied with our response to your privacy concerns, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO):