Privacy policy

Last updated: 23 June 2026

Who we are

Crumb Works is a small bakery business based in Birmingham, West Midlands, UK.

This privacy policy explains how we collect, use, store, and handle personal information submitted through the Crumb Works website, including enquiries, orders, contact forms, and payment-related checkout steps.

For privacy questions or requests, contact us at bakedbymady@mail.com.

Information we collect

When you contact us, submit an enquiry, or place an order through the website, we may collect the following information:

• your name;
• email address;
• phone number;
• event date, if provided;
• serving requirements, if provided;
• cake, product, flavour, size, design, allergy, or order details you choose to send us;
• order notes or delivery instructions;
• collection or delivery preference;
• delivery address, city, and postcode if delivery is requested;
• products added to your order, quantities, prices, totals, and order reference;
• payment status information, such as whether an order is pending payment or marked as paid;
• payment checkout references, checkout IDs, and checkout links where relevant.

We do not intentionally collect sensitive personal information unless you choose to include it in your message or order notes, for example allergy information or dietary requirements.

How we use your information

We use your information to:

• reply to enquiries;
• discuss cake or order requests;
• provide quotes;
• arrange bookings, collections, and deliveries;
• create and manage customer orders;
• send order confirmations and customer service emails;
• manage pending, paid, fulfilled, or cancelled order statuses;
• keep practical business and accounting records;
• protect the website from spam, misuse, and fraudulent submissions;
• comply with legal, tax, accounting, or business record-keeping requirements.

We do not sell customer information.

Legal basis for using your information

We use customer and enquiry information where it is necessary to respond to your request, prepare a quote, take steps before entering into an order, or manage an order you place with us.

We may also keep certain records where we have a legitimate business interest, such as managing customer conversations, resolving order queries, keeping proof of orders, and protecting the business.

Where information must be kept for tax, accounting, legal, or regulatory reasons, we keep it because we are legally required to do so.

Enquiries and contact forms

When you submit an enquiry form, we may store the enquiry internally and send the enquiry details to our email inbox so we can respond.

Enquiry details may include your name, email address, phone number, event date, serving requirements, and the message or cake details you provide.

We may use a secure form processing provider to process and deliver enquiry form submissions. This means enquiry details submitted through a form may be processed by that provider before reaching us.

Orders

When you place an order through the website, your order details are saved internally so we can manage the order.

Order records may include your name, email address, phone number, products ordered, flavours, serving sizes, quantities, prices, fulfilment method, delivery details if applicable, order notes, payment status, payment checkout information, order reference, and status history.

Order details may also be included in internal order notification emails and customer confirmation emails.

Payments

Card payments are handled by a secure payment provider.

When you choose to pay online, the website creates a hosted checkout and redirects you to the payment provider to complete payment securely. This website does not directly collect or store your full card number, card expiry date, CVV, or full card payment details.

We may store payment-related order information such as the payment provider, checkout reference, checkout ID, checkout link, transaction ID where available, payment status, and payment date where available.

The payment provider may process payment and transaction information in accordance with its own privacy policy and payment terms.

Email and service providers

We may use third-party service providers to help run the website and customer communications.

This may include providers for:

• form submission processing;
• transactional email delivery, such as order confirmation emails;
• website hosting and storage;
• website security and spam prevention;
• payment processing.

These providers only receive the information needed to provide their services to us.

Website hosting, security, and spam protection

The website may use hosting, storage, security, and spam-prevention services to operate safely and reliably.

Where bot or spam-prevention checks are enabled, they may process technical information needed to check whether a form submission appears to be made by a real person rather than an automated bot.

The website may also process basic technical information automatically as part of normal website hosting and security, such as IP address, browser information, request details, and security logs.

Cookies, local storage, and analytics

The website currently uses browser local storage to remember items added to your cart. This helps the cart continue to work as you move between product pages and checkout.

Local storage is stored on your own device. You can clear it through your browser settings or by clearing the cart on the website.

How long we keep information

We keep enquiry and order information only for as long as reasonably needed to manage enquiries, orders, customer service, business records, accounting, tax, legal, or dispute-resolution requirements.

Some information may be kept for longer where we need it for legitimate business records or where the law requires us to keep it.

When information is no longer needed, we will delete it or anonymise it where practical.

Who we share information with

We only share personal information where needed to run the business, provide the website, manage orders, process payments, send emails, protect the site, or meet legal obligations.

This may include:

• payment providers;
• form processing providers;
• transactional email providers;
• website hosting, storage, security, and spam-prevention providers;
• professional advisers, accounting support, or legal authorities where required.

We do not sell customer information.

Your rights

You can ask us to:

• confirm what personal information we hold about you;
• correct inaccurate information;
• delete information we no longer need;
• restrict or object to certain uses of your information;
• provide a copy of information you have given us, where applicable.

We may need to keep some information where it is required for legal, accounting, tax, dispute-resolution, or legitimate business record-keeping reasons.

Complaints

If you have a concern about how we handle your information, please contact us first at bakedbymady@mail.com.

You also have the right to complain to the UK Information Commissioner's Office if you are unhappy with how your personal information is handled.

Contact

For privacy questions or requests, contact:

Crumb Works
Birmingham, West Midlands, UK
bakedbymady@mail.com