This privacy notice explains how Sax Sweet Craft handles personal data when you use the website, contact us, or place an order. It is written to help you understand what we collect, why we process it, and how you can exercise your rights.
You may ask for information about the data we hold, request corrections, and in some cases ask for deletion, restriction, or objection to processing. Where consent is the basis, you may withdraw it for future use. We will consider each request in light of the applicable legal requirements and the operational need to complete the relevant service.
To exercise a privacy right, send a clear request and provide enough information for us to verify your identity and locate the relevant record. We may ask for additional details if needed to prevent misuse or to confirm the scope of the request. If a request cannot be fully granted, we will explain the reason where the law requires us to do so.
Contact and order records are retained for the period needed to manage the enquiry, fulfil the order, maintain business records, and address legal or accounting obligations. When data is no longer required, it is deleted, anonymised, or otherwise removed from active use according to the applicable retention need.
If we make material changes, we will update the policy text and use a reasonable method to make the revised version available. The date of the latest version should be checked before submitting a request or relying on a previous statement.
Privacy data overview
Depending on how you use the website, we may process your name, email address, phone number if you provide it, inquiry message, order specifications, event date or collection preferences, and any allergen information you choose to share. We also process limited technical data such as server request metadata and browser or device information for security and delivery purposes.
We receive personal data from contact form submissions, email, phone calls, and in-person or telephone order arrangements. Technical data is generated automatically when you visit the website or submit a form. We do not rely on unconfirmed tracking or marketing data sources.
The website uses cookies that are necessary for essential site operation and cookies that store privacy preferences. These cookies are used to support basic functionality and remember your choices. No unconfirmed analytics or marketing cookie use is described in this notice.
You can manage cookie preferences through your browser settings and, where available, through the site’s privacy controls. Essential cookies support basic site operation, while preference cookies help remember your privacy choices. We do not state that analytics or advertising cookies are active.
Data processing overview
This section outlines the primary purposes for processing personal data, the categories of recipients involved in service delivery, and the legal context that may govern disclosure.
We use personal data to respond to contact requests, manage order specifications, confirm collection or delivery preferences, handle allergen-related information you choose to provide, maintain website security, and support technical delivery of the site. We also use limited data to keep records needed for business administration and legal compliance.
We may share limited data with service providers that help us operate the website, respond to enquiries, maintain security, or deliver technical functions. These recipients act only for the purposes we define and should not use the data for their own unrelated purposes.
We may disclose personal data to public authorities, courts, or other parties when required by law, to protect our legal interests, or to comply with a lawful request. Any disclosure is limited to what is necessary for the relevant purpose.
Under the GDPR, personal data must be processed on a lawful basis, for specified purposes, and with appropriate safeguards. The information in this notice describes the main categories of data, the purposes of processing, and the practical channels available for rights requests.
Where the GDPR applies, you may have rights to access, rectify, erase, restrict, or object to certain processing, and to request data portability where applicable. If processing is based on consent, you may withdraw that consent for future processing. Some requests may be limited by legal obligations, recordkeeping needs, or the need to complete an order or respond to an enquiry.
