Privacy Policy

Privacy Policy

Effective Date: 14 January 2026

1. Who We Are

CrumbLab is an artisan bakery operating at www.crumblab.co.uk. We are committed to protecting your personal data in accordance with UK GDPR and the Data Protection Act 2018.

2. What Data We Collect

We collect and process the following personal information:

  • Order Information: Name, billing/delivery address, email, phone number, payment details
  • Account Information: Email, password (encrypted), order history
  • Technical Data: IP address, browser type, device information, cookies
  • Marketing Data: Email preferences, communication history

3. How We Use Your Data

We use your personal data to:

  • Process and fulfill your orders
  • Communicate about your orders and deliveries
  • Provide customer support
  • Send marketing communications (with your consent)
  • Improve our website and services
  • Comply with legal obligations

4. Legal Basis for Processing

We process your data based on:

  • Contract performance: To fulfill orders you place with us
  • Consent: For marketing communications and non-essential cookies
  • Legitimate interests: To improve our services and prevent fraud
  • Legal obligation: To comply with tax and accounting requirements

5. Data Sharing

We share your data only with trusted service providers necessary to operate our business:

  • Payment processors (to process transactions securely)
  • Delivery partners (to fulfill orders)
  • Email service providers (for order confirmations and marketing)
  • Analytics providers (to improve our website)

We do not sell your personal data to third parties.

6. Data Retention

We retain your personal data for as long as necessary to fulfill the purposes outlined above, typically:

  • Order data: 7 years (for tax and accounting purposes)
  • Marketing data: Until you withdraw consent
  • Account data: Until you request deletion

7. Your Rights

Under GDPR, you have the right to:

  • Access: Request a copy of your personal data
  • Rectification: Correct inaccurate data
  • Erasure: Request deletion of your data
  • Restriction: Limit how we use your data
  • Portability: Receive your data in a portable format
  • Object: Object to processing based on legitimate interests
  • Withdraw consent: Opt out of marketing at any time

To exercise these rights, please contact us using the details below.

8. Cookies

We use cookies to enhance your browsing experience, analyze site traffic, and personalize content. You can manage cookie preferences through your browser settings.

9. Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, or misuse. All payment transactions are encrypted using SSL technology.

10. International Transfers

Some of our service providers may be located outside the UK/EEA. Where this occurs, we ensure appropriate safeguards are in place to protect your data in accordance with GDPR.

11. Children's Privacy

Our services are not directed to individuals under 16. We do not knowingly collect personal data from children.

12. Changes to This Policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated effective date.

13. Contact Us

For questions about this privacy policy or to exercise your data rights, please contact us at:

Email: cookie@crumblab.co.uk
Address: 9 Emmeline Avenue, Weldon, Swanscombe, Kent, DA10 1EA

14. Supervisory Authority

You have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe your data protection rights have been violated: www.ico.org.uk