We take your data protection very seriously and only gather the information we need to give you the best possible service, as well as the best experience on our website. We do not sell data.
Who we are
We are The Bakery by Knife & Fork of Unit 2 Castle Farm, Clifton Road, Deddington, Oxfordshire, OX15 0TP. The owner is Tanya Young. You can contact us by calling 01869 337677. Our website address is: https://knifeandforkbakery.co.uk
What personal data we collect and why we collect it
We collect the personal information you give us when you complete our online forms. This includes name, email address & phone number. We collect this information to enable us to contact you to respond to you. The lawful basis for processing this data is ‘consent’: You have given us clear consent for us to process your personal data for the specific purpose of dealing with your online order.
Should you contact us by phone or other contact method, with an order or enquiry, the same lawful basis of ‘consent’ applies. You have given us clear consent for us to process your personal data for the specific purpose of responding to your online order or query.
If you contact us online or by phone, email or alternative contact method, we collect the personal data needed in order to give you the best service possible. The same lawful basis of ‘consent’ applies. You have given us clear consent to process your personal data for the specific purpose of providing you with the services you have requested.
We also use the lawful basis or ‘legitimate interest’. We collect your data in order for us to supply you with information or services you have requested.
Should you tick the consent box on our contact form allowing us to send you occasional emails with Knife & Fork's news, events & special offers, we will keep the necessary information to allow us to provide you with this service. Similarly, if you respond to an email from us specifically asking you if you would like to be added to our mailing list, we will keep the necessary information to allow us to provide you with this service. Please be assured that this is an occasional email and not spam.
We do not store any payment details. Payment is made via shopify, bank transfer or Paypal. No payment details are taken by The Bakery by Knife & Fork.
How we store your data & how long we store your data
Your data is stored in a file on our private computer. The data that is kept is used to enable us to provide the services you have requested. We keep this data indefinitely so that we have it available should you make an order or enquiry in the future.
Who we share your data with
There is very limited access to your data. Access to your data in - house is only by those that need to do so.
Our accountant has access to the information which is necessary for them to prepare our accounts. They are subject to a duty of confidentiality.
What rights you have over your data
Under the GDPR your rights are as follows:
- the right to be informed
- the right of access
- the right to rectification
- the right to erasure
- the right to restrict processing
- the right to data portability
- the right to object
- the right to withdraw consent
To summarise, you can contact us to see what personal data we store about you and how we use it and store it. You can request for any of your details to be changed or removed. If you would like to implement any of the rights above, please contact us. You can read more about your rights in detail here.
You can request to receive a copy of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.
Our website is SSL secure (https).
To opt out of being tracked by Google Analytics across all websites, visit http://tools.google.com/dlpage/gaoptout.
You can contact us by calling 01869 337677 or by using the contact form on our website.
What data breach procedures we have in place
Should we ever be made aware of a data breach, we will inform all affected customers. We will also inform the ICO (Information Commissioner's Office) within the specified 72 hours, if it is likely that there will be a risk to people’s rights and freedoms, for example, if personal data has been stolen or passed on to an unauthorised party.