Privacy Policy

1. Information we may collect

Depending on how you contact or interact with us, we may collect:

• Your name

• Email address

• Telephone or WhatsApp number

• Event date

• Delivery or collection information

• Delivery postcode and/or delivery address

• Cake requirements, including size, servings, flavour, design preferences and budget

• Details relating to your enquiry or order

• Correspondence between you and Misa’s Patisserie

• Payment and transaction information

• Information you choose to provide regarding dietary requirements or allergens

• Information submitted through our website enquiry forms

• Information submitted through Meta, Facebook or Instagram lead forms

• Information you provide when contacting us through email, WhatsApp or social media

• Technical information relating to your use of our website where applicable, such as device, browser and cookie information

We do not intentionally collect personal information that is unnecessary for processing your enquiry or order.

2. How we collect your information

We may collect or receive personal information when you:

• Submit an enquiry through our website

• Submit a Facebook or Instagram lead form

• Contact us by email

• Contact us through WhatsApp

• Contact us through Facebook or Instagram

• Request a quotation

• Place an order

• Arrange collection or delivery

• Communicate with us regarding an existing enquiry or booking

Where you submit information through a third-party platform such as Facebook, Instagram or WhatsApp, that platform may also process your information in accordance with its own privacy policy.

3. How we use your information

We use your personal information to:

• Review and respond to cake enquiries

• Check availability for your requested event date

• Prepare and send quotations

• Discuss your cake requirements

• Process and manage bookings and orders

• Contact you regarding your enquiry or order

• Arrange cake collection or delivery

• Share necessary delivery information with third-party couriers

• Process payments and maintain transaction records

• Provide customer service

• Respond to questions, amendments, complaints or other requests

• Maintain appropriate business, accounting and tax records

• Protect our business and prevent misuse or fraud

• Improve our enquiry and customer service processes

Submitting an enquiry does not create a booking or guarantee availability.

4. Our lawful basis for using your information

Under UK data protection law, we must have a lawful basis for processing your personal information.

Depending on the circumstances, we may rely on:

Contract and steps before entering into a contract
We use information you provide when responding to an enquiry, preparing a quotation, discussing an order and fulfilling a confirmed booking.

Legitimate interests
We may process information where reasonably necessary for running and protecting our business, maintaining customer service records, responding to correspondence and improving our services, provided that your rights and interests do not override those interests.

Legal obligation
We may retain or process certain information where required for accounting, tax, regulatory or other legal purposes.

Consent
Where consent is legally required, for example for certain forms of electronic marketing or particular uses of information, we will ask for your permission.

5. Dietary and allergen information

You may choose to provide information relating to food allergies, intolerances or dietary requirements when making an enquiry or placing an order.

We use this information only where relevant to responding to your enquiry, providing appropriate allergen information or managing your order.

Where information you provide constitutes special category personal data, such as health information, we will only process it where we have an appropriate lawful basis and a valid condition for processing special category data under applicable data protection law. Where we rely on explicit consent, we will ask for that consent separately and you may withdraw it at any time.

Where information provided to us constitutes health information or other special-category personal data, we will only process it where permitted by applicable data protection law and, where required, with your explicit consent.

Please note that Misa’s Patisserie cannot guarantee an allergen-free environment. Our separate allergen information and Terms & Conditions apply to all orders.

6. Who we may share your information with

We do not sell your personal information.

We may share limited personal information with trusted third parties where necessary to operate our business or fulfil your request, including:

• Third-party cake delivery couriers

• Website and form providers

• Email and communications service providers

• Payment processing providers

• Accounting or professional service providers

• Advertising and analytics providers, including Meta, where applicable in connection with our advertising or consented tracking technologies

• Technology providers used to manage enquiries and business communications

• Government authorities, regulators or professional advisers where required by law

We only provide third parties with information reasonably necessary for the relevant service.

For example, where you request cake delivery, your name, telephone number and delivery address may be provided to the delivery courier so that your order can be delivered.

7. Facebook and Instagram Lead Forms

If you submit an enquiry through a Misa’s Patisserie Facebook or Instagram advertisement, Meta may provide us with the information you entered into the lead form.

We will use that information to:

• Review your enquiry

• Contact you about your cake requirements

• Provide availability information

• Prepare a quotation where appropriate

• Follow up regarding the enquiry where reasonably necessary

Submitting a lead form does not automatically subscribe you to marketing communications.

Meta may separately process information about your use of Facebook and Instagram in accordance with Meta’s own privacy policies.

8. Email, WhatsApp and other communications

Where you ask us to contact you regarding an enquiry, quotation or order, we may communicate with you using the contact method you provide.

Messages relating directly to an enquiry you have requested are treated as customer-service or enquiry communications rather than general promotional marketing.

We will not use your email address or WhatsApp number for unrelated electronic marketing unless we have an appropriate lawful basis to do so.

9. How long we keep your information

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected.

As a general guide:

Unsuccessful or unconfirmed enquiries:

We may retain enquiry correspondence for up to 6 months after our last meaningful contact, unless we reasonably need to retain it for longer for legal, dispute-resolution or legitimate business-record purposes.

Confirmed orders and customer correspondence:

We may retain booking, order, payment and relevant correspondence records for up to 6 years where reasonably required for accounting, tax, contractual, dispute-resolution or legal purposes.

Financial and transaction records:

These are retained for the period required by applicable accounting and tax law.

Information that is no longer required will be deleted, anonymised or securely disposed of where reasonably practicable.

10. International data transfers

Where personal information is transferred outside the United Kingdom and UK data protection rules on restricted transfers apply, we use an applicable lawful transfer mechanism, such as UK adequacy regulations or appropriate safeguards permitted under UK data protection law.

11. Cookies and website technology

Our website uses cookies and similar technologies for essential website functions and may also use functional, analytics and advertising technologies.

Where consent is required, non-essential cookies and similar technologies will only be used after you have been given the opportunity to make your cookie choices.

You can manage your cookie choices through our website cookie settings, where available, and through your browser settings.

Providing your information and automated decisions

Providing personal information to us is generally voluntary. However, we need certain information to respond to your enquiry, prepare a quotation, manage a booking and fulfil an order. If you do not provide information that is necessary for these purposes, we may be unable to provide the requested service.

We do not use your personal information to make solely automated decisions that produce legal or similarly significant effects.

12. Your data protection rights

Depending on the circumstances, UK data protection law may give you the right to:

• Ask for access to personal information we hold about you

• Ask us to correct inaccurate or incomplete information

• Ask us to delete your personal information

• Ask us to restrict how your information is used

• Object to certain uses of your information

• Request transfer of certain information to you or another provider

• Withdraw consent where processing is based on consent

These rights are not absolute and may depend on the circumstances and the lawful basis on which we are processing your information.

To exercise any of these rights, please contact us using the details below.

13. Security

We take reasonable organisational and technical measures to protect personal information against unauthorised access, loss, misuse, disclosure or alteration.

However, no method of transmitting or storing information electronically can be guaranteed to be completely secure.

14. Complaints

If you have concerns about how we handle your personal information, please contact us first so that we can try to resolve the matter.

You also have the right to raise a concern with the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection.

15. Contact us

For questions about this Privacy Policy or how Misa’s Patisserie uses your personal information, please contact:

Misa’s Patisserie
Email: hello@misa-patisserie.com
Website: www.misa-patisserie.com

16. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our services, business practices or legal requirements.

The latest version will always be published on our website with the date of the most recent update.

​

Last updated: 29 August 2026