Privacy & Cookies
The short version: we only ask for what we need to get your order baked and to your door, and nothing creeps around behind your back.
Who We Are
Cookie Coven is a small home bakery in Whitchurch, Hampshire, and the data controller for any personal information you give us. For anything on this page, or any concerns at all, email hello@cookiecoven.co.uk.
What We Collect
Only what's needed to bake and post your order: your name, delivery address, email address and phone number. Card payments are taken securely by Stripe — your card details go straight to them and we never see or store them.
How We Use It
Your details are used solely to make, post and support your order and to send order and dispatch confirmations. The legal basis is performing our contract with you (fulfilling your order) and our legitimate interest in running the bakery. We never sell your data, and we don't use it for marketing.
Who We Share It With
Only the services needed to complete your order: Stripe (to take payment), our delivery carrier (to get it to your door) and our email provider (to send confirmations). Each processes your information under its own terms and only for that purpose. We don't share your data with anyone else.
Cookies & Analytics
We use Google Analytics 4 to understand how the site is used. It only runs if you accept the cookie notice — decline and nothing is lost. Essential bits, like your basket and your cookie choice, are stored on your own device (local storage), not tracking cookies. During checkout, Stripe may set cookies needed to process your payment safely.
Keeping & Deleting Data
We keep order records only as long as we need them for the order and our legal and tax obligations, then remove them. You can ask what we hold about you, or ask us to correct or delete it, at any time by emailing hello@cookiecoven.co.uk.
Your Rights
Under UK GDPR you have the right to access, correct, delete or restrict the use of your personal data, and to object to its processing. Email hello@cookiecoven.co.uk and we'll put it right. If you're ever unhappy with how we've handled your data, you can also contact the Information Commissioner's Office (ICO) at ico.org.uk.
Last updated June 2026.