Privacy Policy for JoJo Cake Boutique Ltd

At JoJo Cake Boutique, we take the privacy of our Coventry community as seriously as the quality of our bakes. This policy explains how we collect, use, and protect your personal data when you interact with us through our boutique, social media pages, or upcoming website.

1. Who We Are (The Data Controller)

JoJo Cake Boutique Ltd is a registered company in England and Wales.

Company Name: JoJo Cake Boutique Ltd (Company No. 16960111)
Registered Office: 80 Oxendon Way, Binley, Coventry, CV3 2GX
Data Protection Officer: Georgeta Dumitrache

2. The Data We Collect

We collect information that allows us to create your bespoke celebration cakes and deliver them safely to your door. This includes:

Identity Data: Your name and title.
Contact Data: Your billing address, delivery address in Coventry/Warwickshire, email address, and telephone numbers.
Transaction Data: Details about payments from you (processed securely via partners like PayPal) and details of products you have purchased from us.
Special Category Data (Allergens): We may collect information regarding food allergies or dietary requirements to ensure your safety. We only process this with your explicit consent.

3. How We Use Your Data

We will only use your personal data when the law allows us to. Most commonly, we use it for:

Performance of a Contract: To process and deliver your cake order.
Legal Obligation: To keep financial records for HMRC or comply with food safety regulations.
Consent: To send you “Birthday Club” offers or newsletters if you have opted-in.
Legitimate Interests: To improve our services and respond to your enquiries on Facebook or Instagram.

4. Data Sharing and Security

We do not sell your data. We only share information with trusted third parties essential to our business:

Delivery Partners: To get your cake to your CV3 address.
Payment Providers: Secure processors like PayPal to handle your transactions.
Professional Advisers: Auditors or lawyers if required by law.

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorized way.

5. Data Retention

We will only keep your personal data for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements (typically 6 years for tax purposes).

6. Your Legal Rights

Under the UK GDPR, you have the following rights:

The Right to Access: Request a copy of the data we hold about you.
The Right to Rectification: Ask us to correct any inaccurate information.
The Right to Erasure: Ask us to delete your data (the “Right to be Forgotten”).
The Right to Object: Stop us from using your data for direct marketing.
The Right to Withdraw Consent: Where we rely on consent (e.g., for allergy info or marketing), you can withdraw it at any time.

7. Cookies (Website Visitors)

Our website uses cookies to enhance your browsing experience. You can set your browser to refuse all or some cookies, but please note that some parts of our site may become inaccessible or not function properly.

8. How to Complain

If you have any concerns about our use of your personal information, you can make a complaint to us at shop@jojocakeboutique.co.uk.

You also have the right to complain to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk).