Privacy

Privacy and cookies

Last updated 11 October 2026

We’re a small bakery and we only collect what we need to take your order and look after you. This page explains what we hold, why, who helps us, and what you can do about it.

Who we are

Smashin’ Bakes, 9–11 Paisley Road, Barrhead, G78 1HG. We decide how your information is used (we’re the “data controller”). Questions or requests about your information: alanah@smashinbakes.co.uk.

What we collect, and why

Orders (name, email, phone, pickup or delivery address, what you ordered and any notes): to prepare and hand over or deliver your order and to contact you about it. This is needed to carry out your order.
Your account (name, email, a securely scrambled password, and optionally a saved phone number and delivery address): so you can log in, see past orders and check out faster. You can change or remove these at any time.
Enquiries and bespoke cake requests: to reply to you and plan your cake.
Votes and picks in our flavour polls and local-business promotions, linked to your account so each person votes once.
Emails about new bakes and offers: only if you ask for them (by ticking the box or joining our list). You can say no and still order. Every email has an unsubscribe link, and you can switch it off on your account page.
Anonymous visit counts: totals such as “42 visits today”. They use no cookies and don’t store your address or any details that identify you.

Our reasons (legal bases)

Carrying out your order or account: to do what you’ve asked us to.
Marketing emails: your consent, which you can withdraw whenever you like.
Keeping order records: a legal obligation (tax and accounting rules), and our legitimate interest in running a safe, fair shop (for example, preventing misuse).

Who we share it with

We never sell your information. Companies that help us run the site:

Our hosting company (Hostinger), which stores the website and its database.
Our email service (Resend), which sends order and newsletter emails for us.
SumUp, our payment provider, if you choose to pay by card online. You enter your card details on SumUp’s own secure page; we never see or store them. SumUp gets your order total and order number, and its own privacy policy covers your card details.
Google Maps, only if you press “Show the map” on the contact page, which then loads the map from Google. Links to Instagram, Facebook and TikTok take you to those sites under their own policies.

How long we keep it

Order records: up to 6 years, as tax rules require.
Your account and saved details: until you delete your account.
Marketing list: until you unsubscribe.
Enquiries: only as long as we need them, then they’re removed.

Cookies and similar storage

We only use what the site needs to work, so there are no advertising or tracking cookies, and no cookie banner is needed.

Login cookie (“customer_session”): keeps you signed in for up to 30 days, or until you sign out.
Your basket: kept in your own browser’s storage so it survives a refresh. It never leaves your device until you check out.
Small reminders in your browser, such as remembering that you closed the offer pop-up.

Your rights

You can ask to see what we hold about you, correct it, have it deleted, limit or object to how we use it, or take a copy to use elsewhere. Logged in, you can do the first, the second and the third yourself on your account page: download your information, edit your details, and delete your account. For anything else, email us and we’ll reply within a month.

When an account is deleted we keep the order records we must keep for tax purposes, but they are no longer linked to an account.

If you’re unhappy with how we’ve handled your information you can complain to the Information Commissioner’s Office at ico.org.uk, though we’d love the chance to put it right first.

Changes

If we change how we use your information we’ll update this page and the date at the top.