Privacy policy
Last updated: 7 September 2026
This policy covers two groups of people: customers, who buy cakes from us, and recipients, whose office address a customer gives us so we can deliver.
Who we are
GTM Cakes is [your registered company name and number, or your own name if you are a sole trader], of [registered address]. We are the data controller for the personal data described here. Email contact@gtmcakes.com.
What we collect, and why
If you are a customer: your name, email, phone number and billing address, so we can take the order, send the receipt and reach you if something goes wrong. Card details go straight to Stripe and never reach our servers. Lawful basis: performance of a contract.
If you are a recipient: your name, company and office address, given to us by the customer sending you a cake, plus a work email if they provide one so we can tell you a delivery is coming. Lawful basis: legitimate interests, being the delivery of a gift addressed to you. You can ask us to delete your details at any time.
We also keep order records, including invoices, for six years, because HMRC requires business records to be retained.
Who we share it with
Only the suppliers who make the delivery happen: our payment processor (Stripe), our partner bakeries, our delivery drivers, and our email and hosting providers. They act on our instructions and cannot use your data for anything else. We do not sell data and we do not share it for advertising.
If you supply the addresses
When you give us someone else's address you are responsible for having a proper reason to share it. Do not send a cake to a home address unless you have been given it for that purpose.
Your rights
You can ask for a copy of your data, ask us to correct or delete it, or object to how we use it. Email contact@gtmcakes.com and we will respond within one month. If you are not satisfied you can complain to the Information Commissioner's Office at ico.org.uk.
Cookies
The site sets no cookies until you accept them. Analytics cookies, if you accept, tell us how the site is used. Rejecting them changes nothing about the service.
Changes
If we change this policy we will update the date above, and email existing customers if the change is significant.