Privacy policy

The data controller is Pies, Puds & Tarts. For privacy enquiries, contact nisapaulesmemay@hotmail.com.

Address: Unit 2B, Orchard Park, Dereham Rd, Colkirk, Fakenham, Norfolk, NR21 7JQ, United Kingdom.

Contact form: your name, email address, and message, plus your phone number, company name, and enquiry type if you choose to give them. If you pre-order, this includes the items, market, and collection details you send us.

Email and phone: anything you send us directly, such as order details or questions.

Website analytics: we use Vercel Web Analytics to count page views and see which pages are popular. It does not use cookies, does not store anything on your device, and does not identify you personally.

Server logs: our hosting provider keeps short-lived technical logs (such as IP address, browser type, and the page requested) to keep the site secure and working.

Online card payment is currently paused. If we turn it back on, card details will be handled by our payment provider, Stripe, and never stored on our servers.

To reply to enquiries and arrange pre-orders and collection. Our lawful basis is taking steps at your request before entering into a contract, and performing that contract.

To keep records of orders and payments. Our lawful basis is legal obligation (for example, tax and accounting rules).

To understand how the website is used and keep it secure. Our lawful basis is our legitimate interest in running a working, secure website.

We do not sell your data, send marketing emails without your permission, or use your data for automated decision-making.

We only share data with service providers who help us run the business and act on our instructions:

Vercel (website hosting and analytics), Brevo (sends contact form messages to us by email), and our email providers (Microsoft Outlook and Zoho Mail).

Our website administrator receives copies of contact form messages to check that they are being delivered correctly. They do not use this information for any other purpose.

Our food hygiene rating badge is loaded from the Food Standards Agency (ratings.food.gov.uk), so your browser connects to their website to display it. The badge does not set cookies.

Some of these providers are based outside the UK, including in the US and EU. Where data leaves the UK, it is protected by appropriate safeguards such as UK adequacy regulations, the UK Extension to the EU-US Data Privacy Framework, or standard contractual clauses.

Enquiries that do not lead to an order: up to 2 years after we last hear from you.

Order and payment records: 6 years, as required for tax purposes.

Server logs are deleted automatically by our hosting provider, usually within a few days.

Under UK GDPR, you can ask to see, correct, or delete your personal data, ask us to restrict or stop using it, or ask for a copy to take elsewhere.

Email nisapaulesmemay@hotmail.com to make a request. We will reply within one month.

If you are unhappy with how we have handled your data, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.

We may update this policy from time to time. The date at the top of the page shows when it was last changed.