Privacy Policy
Effective date: 10 June 2026
Last updated: 10 June 2026
This Privacy Policy explains how Dreamy Cake Studio Ltd, trading as Dreamy Cake Shop, collects, uses, stores and protects your personal data when you visit our website, place an order, contact us or use our services.
Dreamy Cake Studio Ltd is a company registered in England and Wales under Company No. 16145675.
Contact email: shop@dreamycake.co.uk
We are committed to protecting your privacy and handling your personal data in accordance with the UK GDPR, the Data Protection Act 2018 and other applicable data protection laws.
1. Who we are
Dreamy Cake Studio Ltd operates the website and online shop under the name Dreamy Cake Shop.
For the purposes of data protection law, Dreamy Cake Studio Ltd is the data controller for the personal data we collect and process through this website.
2. Personal data we collect
We may collect and process the following types of personal data:
- your name;
- email address;
- phone number, where provided;
- billing address;
- delivery address;
- order details;
- payment status and transaction reference details;
- account login details, if you create an account;
- information submitted through contact forms;
- personalisation details, such as names, text, dates, design notes or custom order instructions;
- uploaded files, images, logos or artwork provided for custom or personalised orders;
- customer support messages and order communications;
- IP address, browser information, device information and website usage data;
- cookie and analytics information, where applicable.
We do not directly store full card details. Payments are processed by third-party payment providers such as Stripe.
3. How we collect your data
We collect personal data when you:
- visit our website;
- place an order;
- create an account;
- complete checkout;
- submit a contact form;
- upload files for a custom or personalised order;
- email us or contact us about an order;
- subscribe to marketing communications, where available;
- interact with cookies or website tracking technologies.
Some technical data may be collected automatically when you use our website.
4. How we use your data
We use your personal data to:
- process and fulfil orders;
- create, customise and produce personalised or made-to-order products;
- arrange shipping and delivery;
- process payments and refunds;
- communicate with you about your order;
- respond to customer service requests;
- manage your customer account;
- prevent fraud, misuse and security issues;
- maintain business, tax and accounting records;
- improve our website, products and services;
- send marketing communications where permitted by law;
- comply with legal obligations.
5. Our lawful basis for using your data
We only use your personal data where we have a lawful basis to do so. Depending on the situation, this may include:
- Contract: where processing is necessary to fulfil your order or provide our services.
- Legal obligation: where we need to keep records for tax, accounting or legal purposes.
- Legitimate interests: where necessary to run and improve our business, prevent fraud, manage customer service and keep our website secure.
- Consent: where you have given consent, for example for certain marketing communications or non-essential cookies where applicable.
6. Personalised orders and uploaded files
If you provide text, names, dates, logos, artwork, images or other files for a personalised or custom order, we use this information only to process, produce and manage your order.
Please do not upload or send sensitive personal information unless it is necessary for your order.
We may retain order-related files and communications for a limited period where needed for customer service, repeat order support, dispute handling, accounting or legal purposes.
7. Sharing your data
We may share your personal data with trusted third parties where necessary to operate our business and provide our services. This may include:
- payment providers, such as Stripe;
- shipping and courier providers, such as Royal Mail or other delivery services;
- website hosting and technical service providers;
- WordPress, WooCommerce and related website service providers;
- email and communication service providers;
- analytics providers, where used;
- marketing platforms, where used and permitted;
- professional advisers, accountants or legal advisers where necessary;
- authorities or regulators where required by law.
We do not sell your personal data.
8. International data transfers
Some of the third-party services we use may process personal data outside the United Kingdom.
Where this happens, we expect those providers to use appropriate safeguards required by data protection law, such as adequacy regulations or approved contractual protections.
9. How long we keep your data
We keep personal data only for as long as necessary for the purposes described in this policy.
Typical retention periods include:
- order, invoice and transaction records: usually up to 6 years for tax, accounting and legal purposes;
- customer account data: while your account remains active or until deletion is requested, subject to legal retention requirements;
- customer support messages: for as long as needed to deal with your request and maintain business records;
- custom order files and uploaded artwork: for as long as needed to produce the order, provide customer support, handle disputes or support repeat orders;
- marketing data: until you unsubscribe, withdraw consent or ask us to stop contacting you.
We may keep some information longer where required by law, to resolve disputes, prevent fraud or enforce our terms.
10. Cookies and similar technologies
Our website may use cookies and similar technologies to make the website work, improve performance, remember preferences, support checkout, provide security, analyse traffic and improve the customer experience.
Some cookies are necessary for the website and checkout to function. Others, such as analytics or marketing cookies, may depend on your consent where required.
You can usually control cookies through your browser settings. If you disable certain cookies, some parts of the website, cart or checkout may not work properly.
11. Marketing communications
We may send marketing emails where you have consented to receive them or where we are permitted to contact existing customers about similar products and services under applicable rules.
You can unsubscribe or object to marketing communications at any time by using the unsubscribe option where available or by contacting us at:
We will not sell your contact details to third parties for marketing.
12. Your data protection rights
Under UK data protection law, you may have the right to:
- request access to your personal data;
- request correction of inaccurate or incomplete data;
- request deletion of your personal data;
- request restriction of processing;
- object to certain types of processing;
- request data portability;
- withdraw consent where processing is based on consent;
- complain to the Information Commissioner’s Office.
These rights may be subject to legal limits, especially where we need to keep certain information for tax, accounting, legal, fraud prevention or order fulfilment purposes.
To exercise your rights, please contact us at:
13. Security
We take reasonable steps to protect personal data against unauthorised access, loss, misuse, alteration or disclosure.
However, no website, online service or email system can be guaranteed to be completely secure. Please take care when sending personal information online.
14. Third-party links
Our website may contain links to third-party websites or services.
We are not responsible for the privacy practices, content or security of third-party websites. Please review their privacy policies before providing personal data to them.
15. Children
Our website and products are intended for adults purchasing baking, cake decorating, custom and related products.
We do not knowingly collect personal data from children. If you believe a child has provided personal data to us, please contact us so we can review and delete it where appropriate.
16. Complaints
If you have any concerns about how we handle your personal data, please contact us first at:
You also have the right to complain to the Information Commissioner’s Office, the UK regulator for data protection.
ICO website: https://ico.org.uk
17. Changes to this Privacy Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page.
The version that applies is the version published on our website at the time you use the website or place an order.