Privacy & Cookies
The short version: we only ask for what we need to get your order baked and to your door, and nothing creeps around behind your back.
Who We Are
Cookie Coven is a small home bakery in Whitchurch, Hampshire, and the data controller for any personal information you give us. For anything on this page, or any concerns at all, email hello@cookiecoven.co.uk.
What We Collect
Only what's needed to bake and post your order: your name, delivery address, email address and phone number. Card payments are taken securely by Stripe — your card details go straight to them and we never see or store them.
Gift Orders
If you send a box as a gift you can give us the recipient's email so we can tell them it's coming. That's optional, it's off unless you fill it in, and we use that address once for that single note and nothing else. They're never added to a list, never marketed to, and the address isn't kept once the order is done. If you'd rather surprise them, leave it blank and we tell them nothing.
How We Use It
Your details are used solely to make, post and support your order and to send order and dispatch confirmations. The legal basis is performing our contract with you (fulfilling your order) and our legitimate interest in running the bakery. We never sell your data, and we don't use it for marketing.
Who We Share It With
Only the services needed to complete your order: Stripe (to take payment), our delivery carrier (to get it to your door) and our email provider (to send confirmations). Each processes your information under its own terms and only for that purpose. We don't share your data with anyone else.
Cookies & Analytics
We use Google Analytics 4 to understand how the site is used. It only runs if you accept the cookie notice — decline and nothing is lost. Essential bits, like your basket and your cookie choice, are stored on your own device (local storage), not tracking cookies. During checkout, Stripe may set cookies needed to process your payment safely.
Keeping & Deleting Data
We keep order records only as long as we need them for the order and our legal and tax obligations, then remove them. You can ask what we hold about you, or ask us to correct or delete it, at any time by emailing hello@cookiecoven.co.uk.
Your Rights
Under UK GDPR you have the right to access, correct, delete or restrict the use of your personal data, and to object to its processing. Email hello@cookiecoven.co.uk and we'll put it right. If you're ever unhappy with how we've handled your data, you can also contact the Information Commissioner's Office (ICO) at ico.org.uk.
Last updated June 2026.