Privacy Policy

Last updated: 1 September 2026

Shiraz Patisserie ("we", "us", "our") respects your privacy and is committed to protecting your personal information.

This Privacy Policy explains how we collect, use, store and protect your personal information when you visit or use https://shirazpatisserie.co.uk/ (the "Website"), create an account, place an order, contact us, or otherwise interact with us. This includes purchases of our cakes, biscuits, nuts and other products, and enquiries about bespoke cakes or our Taste Portrait experience.

We process personal information in accordance with applicable UK data protection laws, including the UK General Data Protection Regulation (“UK GDPR”), the Data Protection Act 2018 and applicable privacy and electronic communications legislation.

1. Who We Are

The Website is operated by:

Shiraz Patisserie

6 Belmont Parade, Finchley Rd

London NW11 6XP

United Kingdom

Telephone: 020 8458 9793

Email: info@shirazpatisserie.co.uk

For data protection purposes, Shiraz Patisserie is the data controller responsible for your personal information.

Shiraz Patisserie is a trading name of Shiraz Patisserie Ltd, a company registered in England and Wales under company number 13154029.

2. Information We Collect

Depending on how you use our Website, we may collect the following information:

Information you provide to us

This may include:

  • Full name
  • Billing and delivery address
  • Email address
  • Telephone number
  • Account login details
  • Order details
  • Payment and transaction information
  • Information provided when contacting us
  • Information relating to bespoke cake enquiries or Taste Portrait requests
  • Allergy, intolerance or dietary requirement information you choose to share with us so that we can prepare your order safely
  • Preferences or other information you voluntarily provide to us
  • Marketing preferences

Where you share information about allergies, intolerances or dietary requirements, this may be considered “special category data” under UK data protection law. We only collect and use this information, with your explicit consent, for the purpose of preparing your order safely and correctly — for example, to identify products containing nuts or other allergens. We do not use this information for any other purpose, such as marketing.

Information collected automatically

When you visit our Website, certain technical information may be collected automatically, including:

  • IP address
  • Browser type and version
  • Device type
  • Operating system
  • Approximate location derived from technical information
  • Website pages visited
  • Referring website
  • Date and time of visits
  • Website interaction information
  • Cookie and similar technology information

The precise information collected depends on the services, applications, analytics tools and cookies installed on the Website.

3. How We Use Your Information

We may use your personal information for the following purposes:

Processing and fulfilling orders

We use your information to:

  • Process and confirm your orders
  • Take or facilitate payment
  • Prepare your products, including taking account of any allergy or dietary information you provide
  • Arrange collection or delivery
  • Contact you about your order
  • Provide order confirmations and receipts
  • Deal with cancellations, refunds, complaints and customer service enquiries

Managing your account

If you create an account, we may use your information to:

  • Create and maintain your account
  • Authenticate your login
  • Display your order history
  • Provide account-related services

Customer service

We may use information you provide to respond to questions, enquiries, complaints and requests.

Bespoke products and services

If you enquire about or purchase a bespoke cake or Taste Portrait experience, we may use information you provide to understand your requirements and communicate with you about the order.

Website operation and security

We may process technical information to:

  • Operate and maintain the Website
  • Keep the Website secure
  • Detect and prevent fraud, abuse and unauthorised activity
  • Troubleshoot technical problems
  • Improve the reliability and performance of the Website

Marketing

Where permitted by law and, where required, with your consent, we may use your information to send you information about our products, promotions, events and services.

You can unsubscribe from marketing communications at any time by using the unsubscribe facility in the relevant communication or by contacting us.

Legal and regulatory purposes

We may process information where necessary to:

  • Comply with legal or regulatory obligations
  • Establish, exercise or defend legal claims
  • Prevent fraud or other unlawful activity
  • Protect our rights, property and customers

4. Lawful Bases for Processing

Depending on the circumstances, we may rely on one or more of the following lawful bases under UK data protection law:

  • Contract: where processing is necessary to provide products or services you have ordered or requested.
  • Legal obligation: where we are required to process information to comply with a legal or regulatory requirement.
  • Legitimate interests: where processing is necessary for our legitimate business interests and those interests are not overridden by your rights and interests. Examples may include website security, fraud prevention, customer service and improving our products and services.
  • Consent: where you have given us permission to process your information for a particular purpose, such as certain marketing activities, non-essential cookies, or information about allergies and dietary requirements.

Where we rely on consent, you may withdraw your consent at any time.

5. Payment Information

Payments made through the Website may be processed by third-party payment providers.

We do not intend to store your complete payment card details on our own systems unless expressly stated otherwise.

Payment information may be collected and processed directly by our payment provider in accordance with its own privacy policy and security procedures.

Payment provider: Shopify Payments.

We recommend reviewing the relevant payment provider's privacy information before making a payment.

6. Who We Share Your Information With

We may share personal information with trusted third parties where necessary to operate our business and provide our services. These may include:

  • Shopify, our e-commerce and website hosting platform
  • Payment service providers, including our payment provider named in Section 5
  • Delivery and courier providers
  • IT and hosting providers
  • Email and communications providers
  • Customer service providers
  • Analytics providers
  • Marketing and social media platforms, where you interact with our marketing (for example via Instagram or TikTok)
  • Professional advisers, such as accountants, lawyers and insurers
  • Government authorities, regulators or law enforcement where legally required

We only share information where there is an appropriate legal basis and where reasonably necessary for the relevant purpose.

7. International Transfers

Some of our service providers, including Shopify, may process personal information outside the United Kingdom, including in the United States and other countries.

Where personal information is transferred outside the UK, we will take appropriate steps to ensure that the transfer is lawful and that appropriate safeguards are in place, such as the UK's International Data Transfer Agreement or an adequacy decision, where required by applicable data protection law.

8. How Long We Keep Your Information

We keep personal information only for as long as reasonably necessary for the purposes for which it was collected, including to meet legal, accounting, tax, regulatory and reporting requirements.

Different types of information may be retained for different periods. For example, order and transaction information may need to be retained for accounting, tax and legal purposes after an order has been completed (generally up to 6 years).

Where information is no longer required, we will securely delete it or anonymise it where appropriate.

9. Your Data Protection Rights

Subject to applicable law, you may have rights including:

  • The right to be informed about how we use your information
  • The right to access your personal information
  • The right to request correction of inaccurate information
  • The right to request deletion of your information in certain circumstances
  • The right to restrict processing in certain circumstances
  • The right to object to certain processing
  • The right to data portability in certain circumstances
  • The right to withdraw consent where processing is based on consent

You may also have the right to object to direct marketing.

To exercise your rights, contact us using the details provided below. We may need to verify your identity before completing certain requests.

You also have the right to lodge a complaint with the UK's data protection regulator, the Information Commissioner's Office (ICO), at ico.org.uk or by calling 0303 123 1113. We would, however, welcome the opportunity to address your concerns directly first — see Section 17.

10. Marketing Communications

If you have agreed to receive marketing communications from us, we may contact you about products, promotions, news and other relevant updates.

You can unsubscribe at any time.

Unsubscribing from marketing communications will not affect essential communications relating to orders, payments, deliveries, account security or other transactions.

11. Cookies

Our Website uses cookies and similar technologies.

Some cookies are necessary for the Website to function, including features such as shopping baskets, checkout and security.

Other cookies may be used for analytics, functionality or marketing purposes and may require your consent.

Please see our separate Cookie Policy for further information.

12. Children's Privacy

Our Website is intended for general consumers and is not specifically directed at children.

We do not knowingly seek to collect personal information from children where such collection is not appropriate.

If you believe that a child has provided us with personal information unnecessarily, please contact us.

13. Data Security

We take reasonable technical and organisational measures to protect personal information against unauthorised access, accidental loss, destruction, alteration or disclosure.

However, no internet transmission or electronic storage system can be guaranteed to be completely secure.

14. Third-Party Websites

Our Website may contain links to third-party websites, social media platforms or other services.

We are not responsible for the privacy practices or content of third-party websites.

You should review the privacy policies of those websites before providing them with personal information.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our services, technology, legal requirements or business practices.

The updated version will be published on this page with a revised “Last updated” date.

16. Contact Us

If you have questions about this Privacy Policy or how we process your personal information, please contact:

Shiraz Patisserie

6 Belmont Parade, Finchley Rd

London NW11 6XP

United Kingdom

Telephone: 020 8458 9793

Email: info@shirazpatisserie.co.uk

17. Complaints

If you have concerns about how we use your personal information, please contact us first so that we can investigate and try to resolve your concern.

Shiraz Patisserie

6 Belmont Parade, Finchley Rd

London NW11 6XP

United Kingdom

Telephone: 020 8458 9793

Email: info@shirazpatisserie.co.uk