0203 239 4399
hello@mybaker.co
Menu
Search Search Basket
0
Cart
Next Day Delivery - order by 6pm! ★ Over 22,000 orders baked and delivered nationwide ★ Customer satisfaction: 4.7/5.0! ★ The UK's best artisanal bakers ★ Free (or discounted) delivery on orders over £200 ★

Privacy Policy

Last updated: 19 February 2026

Homebaked Limited (trading as My Baker) (“we”, “us”, “our”) is committed to protecting your privacy and handling your personal data transparently and securely.

This Privacy Policy explains how we collect, use, store and share your personal data when you visit www.mybaker.co, place an order, apply to become a baker, or otherwise interact with us.

1. Who We Are

Homebaked Limited
102 Osier Crescent
London
N10 1RE
United Kingdom

Email: hello@mybaker.co

For the purposes of the UK General Data Protection Regulation (“UK GDPR”) and the Data Protection Act 2018, we are the data controller of your personal data.

2. The Personal Data We Collect

A. Information You Provide to Us

You may provide us with personal data when you:

  • Place an order

  • Submit a bespoke cake enquiry

  • Register for an account

  • Subscribe to marketing communications

  • Contact customer services

  • Apply to become a baker

  • Participate in promotions or surveys

This may include:

  • Name

  • Billing and delivery address

  • Email address

  • Telephone number

  • Order details

  • Personalisation details (e.g. cake messages)

  • Payment information (processed securely via third-party providers)

  • Photographs (if submitted for bespoke designs)

  • Any information included in correspondence with us

B. Information Collected Automatically

When you use our website, we may automatically collect:

  • IP address

  • Browser type and version

  • Device type and operating system

  • Time zone setting

  • Website interaction data (pages viewed, clicks, time spent)

  • Referral source

  • Cookie and tracking data

C. Information from Third Parties

We may receive personal data from:

  • Payment providers (e.g. Shopify Payments, Stripe, PayPal)

  • Delivery partners and couriers

  • Analytics providers

  • Advertising networks

  • Business partners

3. How We Use Your Personal Data (and Our Lawful Basis)

We process your personal data under the following lawful bases:

To Perform a Contract

We use your data to:

  • Process and fulfil your order

  • Share necessary details with bakers to create your cake

  • Arrange delivery via couriers

  • Process payments

  • Provide customer support

  • Manage cancellations and refunds

Lawful basis: Performance of a contract

For Legitimate Interests

We use your data to:

  • Improve our website and services

  • Prevent fraud

  • Handle complaints

  • Analyse site performance

  • Maintain platform security

  • Manage business operations

Lawful basis: Legitimate interests, where these are not overridden by your rights.

For Marketing

If you are an existing customer, we may contact you about similar products or services.

If you are a new customer, we will only send marketing communications where you have consented.

You can unsubscribe at any time by:

Lawful basis: Consent (where required) or legitimate interests (soft opt-in for existing customers).

To Comply with Legal Obligations

We may process personal data to:

  • Comply with tax and accounting laws

  • Respond to lawful requests

  • Prevent fraud and financial crime

Lawful basis: Legal obligation

4. Sharing Your Personal Data

We may share your data with:

  • Independent bakers fulfilling your order

  • Courier and delivery providers

  • Payment processors (Shopify Payments, Stripe, PayPal)

  • IT and website hosting providers

  • Analytics and advertising providers

  • Professional advisers (legal, accounting)

  • Regulatory authorities where required by law

We only share data that is necessary for the relevant purpose.

We do not sell your personal data.

5. International Transfers

Some of our service providers (including Shopify, Stripe and analytics providers) may process data outside the UK.

Where personal data is transferred outside the UK, we ensure appropriate safeguards are in place, such as:

  • UK adequacy regulations; or

  • The UK International Data Transfer Agreement (IDTA) or UK Addendum to Standard Contractual Clauses.

6. Data Retention

We retain personal data only as long as necessary for the purposes outlined above.

For example:

  • Order and transaction data: retained for up to 6 years for tax and accounting purposes.

  • Marketing data: retained until you withdraw consent.

  • Customer service correspondence: retained as necessary to manage disputes and legal obligations.

We may retain data longer where required by law or in connection with legal claims.

7. Cookies

Our website is powered by Shopify and uses cookies and similar technologies.

Cookies help us:

  • Operate the website

  • Analyse performance

  • Remember your preferences

  • Deliver relevant advertising

You can manage your cookie preferences via your browser settings and our cookie banner.

For further details, please see our Cookie Policy.

8. Security

We implement appropriate technical and organisational measures to protect your personal data.

Payment information is processed securely by third-party providers. We do not store full credit or debit card details on our servers.

However, no method of transmission over the internet is completely secure.

9. Your Rights

Under UK GDPR, you have the right to:

  • Access your personal data

  • Request correction of inaccurate data

  • Request erasure (in certain circumstances)

  • Restrict processing

  • Object to processing

  • Withdraw consent (where processing is based on consent)

  • Request data portability

  • Lodge a complaint with the Information Commissioner’s Office (ICO)

You can exercise your rights by contacting us at hello@mybaker.co.

We will respond within one month, unless the request is complex (in which case we may extend this period as permitted by law).

There is no fee for making a request unless it is manifestly unfounded or excessive.

10. Complaints

If you are unhappy with how we handle your personal data, please contact us first.

You also have the right to lodge a complaint with:

Information Commissioner’s Office (ICO)
www.ico.org.uk

11. Third-Party Links

Our site may contain links to third-party websites. We are not responsible for their privacy policies. Please review their policies before submitting personal data.

12. Changes to This Policy

We may update this Privacy Policy from time to time.

The latest version will always be posted on this page with an updated “Last updated” date.

×