Privacy Policy

Mill & Crumb Bakery (“we”, “us”) operates the website cantivesci.media. We are committed to protecting your personal data in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Who we are

Controller: Mill & Crumb Bakery, 12 Mill Lane, St Albans, Hertfordshire AL3 4PQ, United Kingdom.
Email: [email protected]
Phone: +44 1727 555 019

What we collect

• Contact details you send via our form (name, email, optional phone, message content).
• Technical data such as browser type and pages visited, if you allow analytics cookies.
• Cookie preference choices stored in your browser’s local storage.

Why we use your data

• Legitimate interests / contract: to reply to enquiries and manage cake or loaf orders.
• Consent: optional analytics or marketing cookies, where you have opted in.
• Legal obligation: where we must keep records for tax or consumer law.

How long we keep data

Enquiry messages are kept only as long as needed to respond and follow up (typically up to 12 months, unless a longer record is required for an order). Cookie preferences remain until you clear site data or change your choice.

Sharing

We do not sell your personal data. We may use trusted service providers (for example email or hosting) who process data on our instructions and under appropriate safeguards. If analytics tools are enabled with your consent, those providers process limited usage data under their own terms.

International transfers

If a provider stores data outside the UK, we ensure appropriate safeguards (such as UK adequacy regulations or standard contractual clauses) are in place where required.

Your rights

Under UK GDPR you may request access, rectification, erasure, restriction, portability, and object to certain processing. Where we rely on consent, you may withdraw it at any time. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk.

Children

Our website is not aimed at children under 13. Please do not submit personal data about a child without appropriate parental authority.

Contact

For privacy requests, email [email protected] or write to us at the address above. See also our Cookie Policy and Terms of Use.