top of page

Privacy Policy

Last updated: 21/09/2026

​

This privacy policy explains how Lydia Kraitman Cakes ("we," "us") collects, uses and protects your personal information when you visit lydiakraitmancakes.com or get in touch about a wedding cake, dessert table, afternoon tea or grazing table.

Lydia Kraitman Cakes is the data controller for the purposes of UK GDPR and the Data Protection Act 2018.

Contact: hello@lydiakraitmancakes.com

​

What information we collect

When you enquire, book, or order through this site, we may collect:

  • Name, email address, phone number, postal address

  • Wedding date, venue, and details relevant to your order (guest numbers, dietary requirements, design preferences)

  • Payment information, processed securely by Wix Payments, Stripe or PayPal depending on how you order. We do not store full card details ourselves

  • Correspondence you send us by email, phone, or through the enquiry form

We also automatically collect some technical information when you browse the site (see Cookies, below).

 

How we use your information

We use your information to:

  • Respond to enquiries and provide quotes

  • Manage bookings, consultations, and orders through to delivery

  • Process payments and deposits

  • Send order-related updates (confirmations, reminders, delivery arrangements)

  • With your consent, send occasional updates about our work by email. You can unsubscribe at any time

We do not sell your data, and we do not share it with third parties beyond those needed to run the business, listed below.

 

Who we share information with

  • Wix.com — hosts the website and processes contact form submissions

  • Dubsado — manages enquiries, contracts and client communication after you get in touch. Client portals are deleted 12 months after the wedding

  • Wix Payments, Stripe and PayPal — handle payment for orders and tasting boxes

  • Mailchimp — sends email updates to those who've opted in

  • Google Analytics — collects anonymised visit data to help us understand how the site is used

Some of these providers are based outside the UK. Where that's the case, they operate under standard contractual clauses or equivalent safeguards recognised under UK GDPR.

 

How long we keep your information

Client portal and correspondence data, held in Dubsado, is deleted 12 months after your wedding. A smaller set of records needed for accounting purposes (name, date, and order value) is retained for 6 years in line with HMRC requirements, after which it's securely deleted.

 

Your rights

Under UK GDPR, you have the right to:

  • Ask what personal data we hold about you

  • Ask us to correct inaccurate data

  • Ask us to delete your data, where we're not required to keep it for legal reasons

  • Withdraw consent to marketing communications at any time

  • Complain to the ICO if you believe we've handled your data incorrectly (ico.org.uk)

To exercise any of these, email hello@lydiakraitmancakes.com.

 

Changes to this policy

We may update this policy from time to time. The date at the top shows when it was last revised.

 

Cookie Policy

This site uses cookies, small files stored on your device, to help it run properly and to understand how visitors use it.

Essential cookies: required for the site to function (e.g. remembering items in your cart, keeping you signed in to a client portal). These can't be switched off.

Analytics cookies: Google Analytics, which helps us understand which pages are popular and how visitors move through the site. This data is anonymised and used only to improve the site.

Marketing cookies: used to track email campaign engagement via Mailchimp for those who've subscribed.

You can manage or withdraw cookie consent at any time via the cookie banner on this site, or through your browser settings.

bottom of page