Privacy Policy

Mabel the Bakery

Last updated: 16 October 2026

1. Introduction

Welcome to Mabel the Bakery. We respect your privacy and are committed to protecting your personal information.

This Privacy Policy explains how Mabel the Bakery (“Mabel”, “we”, “us” or “our”) collects, uses, stores and protects your personal information when you visit www.mabelthebakery.com, contact us, sign up to receive updates or otherwise interact with our business.

We handle personal information in accordance with applicable UK data protection laws, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Please read this policy carefully to understand how we use your information and the rights you have.

2. Who We Are

Mabel the Bakery is a neighbourhood bakery based at:

Mabel the Bakery
11 Market Place
Downham Market
Norfolk
PE38 9DF
United Kingdom

Email: hello@mabelthebakery.com

For the purposes of applicable data protection law, Mabel the Bakery is responsible for deciding how and why your personal information is used.

3. What Information We Collect

Depending on how you interact with us and which features are available on our website, we may collect the following types of personal information.

Information you provide to us

  • Your name and contact details, including your email address and telephone number.

  • Information you include in enquiries, feedback or other communications.

  • Your email address and preferences if you subscribe to our newsletter or marketing updates.

  • Information you provide when enquiring about events, catering, private bookings or other bakery services.

Website usage information

When you visit our website, certain technical information may be collected automatically, depending on the website services and technologies in use. This may include:

  • Your IP address.

  • Browser type and device information.

  • Pages visited and how you interact with our website.

  • The date, time and duration of your visit.

  • Information collected through cookies or similar technologies.

Order and payment information

If online ordering, event bookings or payment facilities are available, we may also process relevant order details, billing information, booking information and payment confirmations to fulfil your request.

Payment card details are generally handled by the relevant payment provider. We do not intend to store full payment card details ourselves.

We only collect personal information that is reasonably necessary for the relevant purpose.

4. How We Use Your Information

We may use your personal information to:

  • Respond to enquiries, messages and feedback.

  • Provide information about our bakery, products, opening hours and services.

  • Manage event enquiries, bookings and related communications.

  • Process and fulfil orders or payments where these facilities are offered.

  • Send newsletters and marketing communications where permitted by law.

  • Operate, maintain and improve our website.

  • Understand website usage and visitor preferences, where appropriate.

  • Protect our business, prevent fraud and maintain website security.

  • Meet our legal, accounting and regulatory obligations.

We will not use your personal information for purposes that are incompatible with those explained in this policy without providing further information where required.

5. Our Lawful Bases for Processing

Data protection law requires us to have a lawful basis for using personal information. Depending on the circumstances, we rely on the following bases:

Legitimate interests: To respond to general business enquiries, maintain our website, improve our services, protect our business and communicate appropriately with customers. We consider your rights and interests when relying on this basis.

Contract: Where processing is necessary to fulfil an order, manage a booking or take steps at your request before entering into a contract.

Consent: Where you have given permission for a particular use of your information, such as receiving certain marketing communications or accepting non-essential cookies where consent is required.

Legal obligation: Where we need to process or retain information to comply with applicable laws, including tax and accounting requirements.

Where we rely on consent, you can withdraw it at any time. Withdrawing consent will not affect the lawfulness of processing carried out before withdrawal.

6. Email Marketing and Communications

If you choose to subscribe to Mabel the Bakery's mailing list, we may use your email address to send bakery news, seasonal updates, special offers and information about upcoming events.

We will only send marketing communications where we have the necessary consent or another lawful basis permitted by applicable electronic marketing rules.

You can unsubscribe at any time by using the unsubscribe link in our emails or by contacting us at hello@mabelthebakery.com.

Even if you opt out of marketing, we may still contact you about an enquiry, order or booking where necessary.

We do not sell your personal information to third parties for their own marketing purposes.

7. Cookies and Similar Technologies

Our website may use cookies and similar technologies to support its operation and, where applicable, understand how visitors use the site.

Cookies are small files stored on your device. Depending on the website configuration, they may be used for:

  • Essential purposes: Supporting website functionality, security and basic features.

  • Analytics: Helping us understand website traffic and improve the visitor experience.

  • Marketing and embedded content: Supporting relevant third-party features or marketing technologies, where these are used.

Strictly necessary cookies may be used where permitted by law. We will seek your consent before using non-essential cookies or similar technologies where required.

You can manage your cookie preferences through the cookie settings available on our website, if provided. You can also manage cookies through your browser settings, although disabling certain cookies may affect website functionality.

The cookies actually used on our website will depend on the services and integrations installed. Please refer to our cookie settings or any accompanying Cookie Policy for further details.

8. Who We Share Your Information With

We may share personal information with trusted third parties where necessary to operate our business and provide our services. These may include:

  • Website hosting and website platform providers.

  • Email and newsletter service providers.

  • Website analytics providers, where enabled.

  • Payment processors and booking platforms, where applicable.

  • IT, security and technical support providers.

  • Professional advisers, such as accountants or legal advisers, where necessary.

  • Regulatory authorities, law enforcement or other parties where we are legally required to disclose information.

Where a third party processes personal information on our behalf, we take appropriate steps to ensure that it is handled securely and in accordance with applicable data protection requirements.

We do not sell or rent your personal information.

9. International Data Transfers

Some of our website providers or other service providers may store or process information outside the United Kingdom.

Where personal information is transferred internationally, we will take appropriate steps to ensure that the transfer complies with applicable data protection law. Depending on the circumstances, this may involve transferring information to a country recognised as providing adequate protection or using an appropriate legal safeguard.

Further information about relevant safeguards can be requested by contacting us.

10. How Long We Keep Your Information

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including meeting any legal, accounting or reporting requirements.

Our retention periods depend on the type of information and the reason we hold it. For example:

  • General enquiries: For as long as necessary to respond and deal with any follow-up matters.

  • Marketing subscriptions: Until you unsubscribe or we determine that the information is no longer needed, subject to any necessary suppression records.

  • Orders and financial records: For the periods required by applicable tax, accounting and other legal obligations.

  • Website and technical records: For the period reasonably necessary for security, operational and analytical purposes.

When information is no longer required, we will securely delete it or anonymise it where appropriate, unless we are legally required to retain it for longer.

11. How We Protect Your Information

We take reasonable technical and organisational measures to protect personal information against accidental loss, unauthorised access, alteration, disclosure or misuse.

Access to personal information is limited to those who need it for legitimate business purposes.

However, no method of transmitting information over the internet or storing information electronically can be guaranteed to be completely secure.

12. Your Data Protection Rights

Under applicable data protection law, you may have the right to:

  • Access the personal information we hold about you.

  • Rectify inaccurate or incomplete information.

  • Erase your personal information in certain circumstances.

  • Restrict how we process your information in certain circumstances.

  • Object to certain types of processing, including processing based on legitimate interests.

  • Data portability, where the relevant legal conditions apply.

  • Withdraw consent where we rely on consent to process your information.

You also have the right to object to direct marketing at any time.

These rights are subject to certain legal conditions and exemptions.

To exercise a right or ask a question about how we use your information, please email hello@mabelthebakery.com. We may need to verify your identity before responding.

13. Third-Party Websites and Social Media

Our website may contain links to third-party websites or services, including social media platforms such as Instagram and external event or booking pages.

If you follow a link to another website, that website will operate under its own privacy policy and terms. We are not responsible for the privacy practices or content of third-party websites.

We recommend reviewing their privacy policies before providing personal information.

14. Children's Privacy

Our website and services are intended for a general audience. We do not knowingly collect personal information from children where doing so would be unlawful or inappropriate.

If you believe that a child has provided personal information to us and you would like us to review or remove it, please contact us.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our business, website features, service providers or legal obligations.

Any updated version will be published on our website with a revised “Last updated” date.

We encourage you to review this page periodically.

16. Contact Us and Complaints

If you have questions about this Privacy Policy, would like to exercise your data protection rights or have concerns about how your information is handled, please contact:

Mabel the Bakery
Email: hello@mabelthebakery.com
Address: 11 Market Place, Downham Market, Norfolk, PE38 9DF, United Kingdom

You also have the right to complain to the UK's Information Commissioner's Office (ICO) if you are concerned about how your personal information has been handled.

Website: https://ico.org.uk/
Telephone: 0303 123 1113

We would appreciate the opportunity to address your concerns first, but you are entitled to contact the ICO directly.

Thank you for visiting Mabel the Bakery. We value your trust and are committed to treating your personal information responsibly.