Privacy Policy
Introduction
The Little Sugar Rose takes the privacy and security of your information very seriously. This Privacy Policy explains the types of personal data we may collect about you, how we use it, who we share it with and how long we keep it for. If you use any of our services, you will be deemed to have consented to the collection and use of the personal information you provide to us in the ways described below.
This Privacy Policy may change from time to time in line with legislation. We will not explicitly inform our clients or website users of these changes. Instead, we recommend that you check this page occasionally for any policy changes.
Please read this Policy carefully and if you have any questions please contact us at: info@thelittlesugarrose.com
Who are we
The Little Sugar Rose is a provider of cake, bakery, retail and training related services, based in Suffolk, UK.
When do we collect your personal data
To enable us to provide you with the right product or service to meet your needs, we collect personal information from a number of sources including our website contact form, our e-commerce platform, our in-house classes, wedding exhibitions and events, referrals from existing clients, wedding planners and wedding venues.
What type of data do we collect from you?
The personal data we collect is made up of some or all of the following: name, email address, telephone number, postal address, dietary requirements (for cake orders and in-house classes) and payment information. We may also keep details of your visits to our site including, but not limited to traffic data, location data, web logs and other communication data. We also retain records of your queries and correspondence in the event you contact us. We will only collect this information where it is necessary for us to do so.
​
How do we use your data?
Your personal data is used to ensure the services we deliver are suitable and appropriate and any data collected is only used to administer and deliver these services:
​
-
To respond to your enquiries;
-
To propose, quote, design, deliver and invoice for our professional services;
-
To process any product purchases or class bookings;
-
To provide you with products and services;
-
To comply with the contractual obligations we have with you;
-
To administer accounts, process payments and keep track of billing and payments;
-
To detect fraud and to make sure what you have told us is correct;
-
To comply with our contractual or legal obligations to share data for the purposes of law enforcement;
-
To carry out marketing and statistical analysis;
-
To review job applications;
-
To notify you about changes to our website and services;
-
To provide you with information about products or services that you request from us or which we feel may be of interest to you, where you have consented to be contacted for such purposes; and
-
To inform you of service and price changes.
​
How do we protect your personal data?
We use a number of Microsoft products including Microsoft Office within our business which has data encryption as standard. You may find details of Microsoft’s Privacy Policy here https://privacy.microsoft.com/en-gb/privacystatement.
When paying for products or classes on our website, we use the WixStores apps for the front end which in turn use Paypal for the transaction itself as this provides you with a secure payment platform. You may find details of Wix’s Privacy Policy here https://www.wix.com/about/privacy and Paypal’s Privacy Policy here https://www.paypal.com/webapps/mpp/ua/privacy-full We also have the ability to access the contact details you share with Paypal when you make a purchase on our website i.e., name, email address, and postal address. Please refer to Paypal’s Privacy Policy for details of how this information is protected and stored.
​
Where we have provided you with (or where you have chosen) a password which enables you to access certain parts of our website, you are responsible for keeping the password confidential. We ask you not to share your password with anyone.
​
Retention periods
On the completion of our service to you, we may keep your data for up to seven years after you have completed your services with us. We may not be able to delete your data before or after this time due to our legal and/or accountancy obligations. We may also keep it for research or statistical purposes. We assure you that your personal data shall only be used for the purposes stated herein. When we destroy or delete any of your personal information that we hold either electronically or on paper, we make every reasonable effort to do so in secure circumstances.
Who has access to your personal data
Here is a list of all the ways in which we may use your personal data and how we share the information with third parties:
​
-
Delivery of Goods
If you purchase a product, we may have to share your name and address details with a third party courier service. This will only be for the duration of that delivery.
-
Customer Services
We process your data for administration, billing, support and the provision of services to enable us to provide you with support.
Third Parties
For the avoidance of doubt, we do not and never shall sell your personal data to third parties for marketing or advertising purposes.
​
We work with a number of third parties (including business parties, service providers and fraud protection services) and we may receive information from them about you. These third parties may collect information about you including, but not limited to, your IP address, device-specific information, server logs, device event information, location information, and unique application numbers. We use their features within our website, however, in some instances, they may be acting as data controller and they will have their own privacy policies.
​
We may share your information if we are under a duty to disclose data in order to comply with any legal obligation or to protect the rights, property, or safety of The Little Sugar Rose, our customers, or others. This includes but is not limited to exchanging information with other companies and organisations for the purposes of fraud protection, credit risk reduction and dispute policies. However, we will take steps with the aim of ensuring that your privacy rights continue to be protected.
​
Links to other websites
Our website contains links to other websites of interest which are outside of our control and are not covered by this Privacy Policy. If you access other websites using the links provided, the operators of those sites may collect information from you which will be used by them in accordance with their own privacy policies which may differ from ours.
Use of ‘cookies’
Our website, like many other websites, uses cookies in order to improve your user experience by enabling our website to ‘remember’ you, either for the duration of your visit (using a ‘session cookie’) or for repeat visits (using a ‘persistent cookie’).
Cookies help us provide you with a better website, by enabling us to monitor which pages you find useful and which you do not. A cookie in no way gives us access to your computer or any information about you, other than the data you choose to share with us. You can choose to accept or decline cookies. Most web browsers automatically accept cookies, but you can usually modify your browser setting to decline cookies if preferred.
Site visits tracking
Like most websites, our website uses Google Analytics to track user interaction. We use this data to determine the number of people using our site, to better understand how they find and use our web pages and to see their journey through our website.
Although Google Analytics records data such as your geographical location, device, internet browser and operating system, none of this information personally identifies you to us. Google Analytics also records your computer’s IP address which could be used to personally identify you but Google do not grant us access to this.
Your rights
Under data protection law you have the right to request details of any personal data that we hold about you. Where we have no legitimate reason to continue to hold your information, you have the right to be forgotten. There are legal and accountancy reasons why we will need to keep your data but please do inform us if you think we are retaining or using your personal data incorrectly.
You also have the right to change the permissions that you have given us in relation to how we may use your data and you have the right to request that we cease using your data or that we delete all personal data records that we hold relating to you. You can exercise these rights at any time by emailing us at: info@thelittlesugarrose.com
​
You have the right to ask us not to process your personal data for marketing purposes. If you choose not to receive marketing communications from us about our products and services, you will have the choice to opt-in at a later date via links in our website or emails.
​
Accessing and updating your data
You have the right to access the information we hold about you. Please email your requests to info@thelittlesugarrose.com so that we may obtain this information for you.
​
Liability
We agree to take reasonable measures to protect your data in accordance with applicable laws and in accordance with our Terms and Conditions: https://www.thelittlesugarrose.com/terms-and-conditions
​
Data Breaches
In the event of a data breach, we shall ensure that our obligations under applicable data protection laws are complied with where necessary.
​
Your right to make a complaint
You have the right to make a complaint about how we process your personal data to the Information Commissioner:
​
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
​
Tel: 0303 123 1113
​
How to contact us
If you have any questions about this Privacy Policy you may contact us by telephone on 07889 503127 or by email at: info@thelittlesugarrose.com or via our contact page.
​