Privacy Policy

Who We Are

Maison D'Lux Cakes is a bespoke cake and dessert business based in London, and is the data controller responsible for the personal information collected through this website and in connection with your enquiries and orders. This policy explains what personal information we collect, why, how we use and protect it, and the rights available to you. If you have any questions, email us at maisondluxcakes@gmail.com.

Information We Collect

Depending on how you interact with us, we may collect:

• Your name, email address and phone number
• Your Instagram handle, if you get in touch or order via Instagram
• Details of your enquiry or order — event date and occasion, cake or dessert size, flavour, colours, decor and personalisation such as names or messages, and any allergen or dietary information you choose to share
• Reference images you attach to an enquiry
• The content of your messages and communications with us

We also use Cloudflare's aggregated website analytics to see roughly how visitors arrive at the site and which pages are viewed. This doesn't identify you personally, and we don't use tracking or marketing cookies.

How We Use Your Information

We use your information to:

• Respond to your enquiry and discuss your order
• Provide quotes and process bookings
• Create and manage your invoice
• Arrange collection or delivery
• Communicate with you about your order
• Take into account any allergy or dietary information you've shared
• Keep the business and financial records we're required to keep
• Send newsletter updates, if you've subscribed

We don't use your information for anything beyond running this business, and we never sell or rent it.

Our Lawful Basis for Using Your Information

Under UK data protection law, we need a valid reason — a "lawful basis" — for processing personal information. Depending on the situation, we process your information because:

• it's necessary to respond to your enquiry
• it's necessary to fulfil and manage your order
• we have a legal obligation to retain certain records, such as invoices, for tax and accounting purposes
• where applicable, you've given us consent — for example, by subscribing to our newsletter

Where we rely on consent, you can withdraw it at any time.

Payments

We take payment by direct bank transfer or Revolut. We don't use a card payment processor, and we never see or store your card details.

Third-Party Services

Enquiry form submissions are sent via FormSubmit, a third-party service that relays your message to our email inbox. Our website, order records and client list are hosted on Cloudflare's infrastructure, which may process data on servers outside the UK as part of its global network. These providers process information on our behalf to help us run our website and business, under their own respective terms and privacy policies.

Social Media

If you contact us through Instagram or another social media platform, that platform processes your information under its own privacy policy, independently of us. We may also photograph completed cakes and desserts for our portfolio, website or Instagram — if you'd rather a particular photo wasn't shared, or one already is and you'd like it removed, just let us know.

How Long We Keep Your Information

We keep different types of information for different periods, depending on why we hold it.

Client and contact details (name, phone, email, Instagram handle) are kept for as long as there's an ongoing business reason to hold them — for example, while you remain a customer we may hear from again — and are deleted on request at any time (see "Your Rights" below). Invoices and order records are financial records, so rather than deleting them we keep them on file and mark old ones as completed or cancelled, for as long as required to meet our tax and accounting obligations. Newsletter subscriber details are kept until you unsubscribe or ask us to remove you.

Keeping Your Information Secure

We take reasonable steps to protect your information against loss, misuse or unauthorised access. That said, no website or email system can be guaranteed completely secure, so please avoid sending highly sensitive information — such as full card details — over email or social media messaging.

Your Rights

You have the right to:

• Ask what personal information we hold about you
• Ask us to correct anything inaccurate
• Ask us to delete your information
• Object to or ask us to restrict how we use it
• Withdraw consent, where we rely on it

To exercise any of these rights, email maisondluxcakes@gmail.com and we'll get back to you as soon as we can. Some information — such as financial records — may need to be kept for legal reasons even after a deletion request.

Links to Other Websites

Our website may link to third-party sites, including Instagram and other social media. We aren't responsible for their content or privacy practices, so we'd recommend checking their own policies.

Changes to This Policy

We may update this policy from time to time as our business or the services we use change. The version published on this page, with its last-updated date above, always reflects our current practice.