Privacy & Cookie Policy

JJ’s Bakes  |  Last updated July 2026

This policy explains how JJ’s Bakes collects, uses, stores and shares personal information, including information collected through its website, online shop, enquiry forms and other ordering channels. It also explains how cookies and similar technologies are used.

1. Who we are

JJ’s Bakes is operated by Jade Jefferson as a sole trader. Jade Jefferson, trading as JJ’s Bakes, is the data controller responsible for the personal information described in this policy.

2. The information we collect

Depending on how you contact or purchase from us, we may collect:

·       your name, email address, telephone number and delivery or collection address;

·       order, payment and transaction information;

·       customer-account and gift-card information;

·       details submitted through our general contact and bespoke cake enquiry forms;

·       event dates, occasions, budgets, guest numbers, cake wording, names and ages supplied for a design;

·       dietary requirements and allergy information;

·       inspiration photographs and other files you choose to upload;

·       communications sent by email, telephone, WhatsApp, Instagram or Facebook;

·       newsletter preferences and records of consent;

·       technical information, including IP address, browser, device and website-usage information; and

·       information contained in reviews, feedback or photographs you permit us to use.

Please avoid sending photographs containing identifiable people, particularly children, unless this is necessary and you have permission to share them.

3. Dietary requirements and allergy information

Information about allergies or dietary requirements may reveal health information and is treated with additional care. We use this information only to respond to your enquiry, assess whether we can safely fulfil your request, prepare your order and communicate relevant limitations or risks.

Where required, we rely on your explicit consent to process this information. You may withdraw that consent, but doing so may mean that we cannot proceed with an order where the information is necessary to prepare it safely.

Customers remain responsible for providing accurate and complete allergy information. The handling of allergy information under this policy does not replace the allergen information, warnings or terms supplied with an order.

4. How we collect information

We collect information:

·       when you browse or use our website;

·       when you create an account, place an order or purchase a gift card;

·       when you complete a contact, bespoke cake or newsletter form;

·       when you contact us by email, telephone, WhatsApp or social media;

·       when you provide feedback, a review or photographs; and

·       from service providers involved in payments, website hosting and analytics.

5. How and why we use personal information

To respond to enquiries and fulfil orders

We use contact, order, delivery, design and payment information to provide quotations, discuss bespoke designs, take payment, prepare and deliver or make orders available for collection. Our lawful basis is usually that the processing is necessary to take steps at your request or perform our contract with you.

To operate and improve the business

We may use information to administer customer accounts, prevent fraud, provide customer service, manage complaints, understand website performance and improve our products and services. We rely on our legitimate interests where those interests are not overridden by your rights.

To comply with legal obligations

We retain and use certain transaction and accounting records to comply with tax, accounting, food-safety and other legal requirements, and may use information to establish, exercise or defend legal claims.

Marketing

If you actively opt in, we may send occasional news, product updates and offers by email. Marketing consent is optional and separate from placing an order. You can unsubscribe at any time by using the link in an email or by contacting jjsbakes@outlook.com.

Our newsletter may be operated through Squarespace Email Campaigns or Mailchimp. This policy must be updated to identify the selected provider before newsletters are sent.

6. Payments

Online payments may be processed by Stripe and PayPal. These providers receive the information needed to process and protect the payment. JJ’s Bakes does not ordinarily receive or store complete card details. Stripe and PayPal process personal information under their own privacy notices.

7. Who we share information with

We may share only the information reasonably necessary with:

·       Squarespace, which hosts the website, shop, forms, customer accounts and related services;

·       Stripe and PayPal for payment processing;

·       the selected email-marketing provider, if you subscribe;

·       Google, where Google Analytics or Google Maps is enabled and permitted;

·       Instagram, Facebook or review providers where content from those services is embedded;

·       postal, courier or local delivery providers where required to deliver an order;

·       IT, professional, accounting, insurance or legal advisers where reasonably necessary; and

·       regulators, courts, law-enforcement bodies or other authorities where required by law.

We do not sell personal information. Jade is the only person within JJ’s Bakes who ordinarily accesses customer details, although service providers may process information on the business’s behalf.

8. International processing

Some providers, including Squarespace, Google, Stripe, PayPal, Meta and Mailchimp, may process information outside the United Kingdom. Where this occurs, the provider or JJ’s Bakes will use an approved legal safeguard, such as an adequacy decision or appropriate contractual protections, where required.

9. How long we keep information

We keep information only for as long as reasonably necessary. Our usual periods are:

·       enquiries that do not become orders: up to 12 months after the last communication;

·       completed order, transaction and accounting records: up to six years, or longer if legally required;

·       inspiration images: normally up to 12 months after the enquiry or completed order, unless you separately permit portfolio use;

·       customer accounts: while active and for a reasonable period afterwards, subject to records we must retain;

·       marketing information: until you unsubscribe, withdraw consent or the mailing list is discontinued; and

·       cookie and analytics information: according to the lifespan of the relevant cookie or service record.

Information may be retained for longer where reasonably necessary to resolve a complaint, protect legal rights or meet a legal requirement. We may keep a minimal suppression record so that we do not contact someone who has unsubscribed.

10. Security

We take reasonable organisational and technical measures to protect personal information. However, no website, email system or internet transmission can be guaranteed to be completely secure.

11. Your data-protection rights

Depending on the circumstances, you may have the right to:

·       request access to your personal information;

·       ask us to correct inaccurate or incomplete information;

·       ask us to erase information;

·       ask us to restrict how information is used;

·       object to processing based on legitimate interests or to direct marketing;

·       receive certain information in a portable format; and

·       withdraw consent at any time where processing is based on consent.

To exercise a right, email jjsbakes@outlook.com. We may need to confirm your identity. Rights are not absolute, and we may retain information where the law permits or requires us to do so.

You may complain to the Information Commissioner’s Office at ico.org.uk. We would appreciate the opportunity to address your concern first.

12. Children’s information

Our website and ordering services are intended for adults. We do not knowingly invite children to create accounts or submit orders. Customers may provide a child’s name or age for cake personalisation; we use that information only to fulfil the request and ask customers not to provide more information than necessary.

13. Links and third-party services

Our website may link to or display content from third-party websites and services. Those organisations control their own processing, and their privacy notices should be reviewed separately.

14. Cookie Policy

What cookies are

Cookies and similar technologies are small files or identifiers stored on or accessed from your device. They can make a website function, remember choices, support checkout, measure performance or enable third-party content.

Cookies we may use

The website may use the following categories:

·       Strictly necessary cookies: required for security, navigation, forms, shopping baskets, checkout, customer accounts, payments and cookie preferences. These cannot usually be switched off through the consent tool.

·       Analytics cookies: used by Squarespace Analytics and, where enabled, Google Analytics to understand visits and website use. These should be activated only after consent where consent is required.

·       Functional cookies: support optional features such as maps, embedded social-media content or reviews. The relevant feature may not work if these cookies are rejected.

·       Marketing cookies: may be used by third parties to measure campaigns or advertising. JJ’s Bakes will not intentionally enable these without appropriate consent.

Current and potential providers

Squarespace may place essential commerce, account, security and consent-preference cookies. Google Analytics and Google Maps may place analytics or functional cookies if enabled. Stripe and PayPal may use security, fraud-prevention and payment cookies during checkout. Instagram, Facebook or review providers may place cookies if their content is embedded.

The precise cookie names, purposes and durations depend on the final Squarespace configuration and enabled integrations. The live cookie consent panel and this section must be checked and updated before launch and whenever website features change.

Managing cookie choices

When you first visit the website, you should be offered a choice to accept or reject non-essential cookies. Rejecting non-essential cookies should not prevent the basic website or checkout from functioning. You can change your choice through the website’s cookie settings, where available, and can also delete or block cookies using your browser settings.

Blocking some cookies may affect optional features. Consent can be withdrawn at any time, but this will not make earlier processing unlawful.

15. Changes to this policy

We may update this policy when our website, services, providers or legal obligations change. The latest version will be published on the website with an updated revision date.

16. Contact us

Questions or requests about this policy can be sent to:

·       Jade Jefferson, trading as JJ’s Bakes

·       JJ’s Bakes Bakery, 5 Sowerby Road, Sowerby, YO7 1HR

·       jjsbakes@outlook.com