Privacy policy


Last updated: 28 July 2025

Milk it Bakehouse Limited. (“we”, “us”, “our”) is committed to protecting your privacy and respecting your personal data. This Privacy Policy explains how we collect, use, and protect your personal information when you visit or make a purchase from our website [www.milkitbakehouse.com] (the “Site”), contact us, or use our services. It also outlines your rights under UK data protection law, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

By accessing or using our Site or services, you agree to the practices described in this policy.

 

 

1. Who We Are

Milk it Bakehouse Limited is a company registered in England and Wales under company number 16370439.

Registered office: Unit 13, Lanteague Studios, Zelah, Truro, TR4 9JG

Email: hello@milkitbakehouse.com

We are the data controller of your personal data.

 

 

2. What Personal Data We Collect

We may collect and process the following personal information:

  • Identity and contact data (e.g. name, email, billing and shipping address, phone number)

  • Transaction data (e.g. order history, payment method — payment details are processed securely by third parties like Shopify Payments)

  • Account information (e.g. login credentials if you create an account)

  • Usage data (e.g. IP address, device information, pages visited, interactions on site)

  • Communication data (e.g. emails or messages you send to us)

  • Marketing preferences (if you opt in to receive communications)

 

 

3. How We Collect Your Data

We collect personal data:

  • Directly from you (e.g. when placing an order or contacting us)

  • Automatically through cookies and tracking technologies

  • From Shopify, our ecommerce platform

  • From our marketing or payment providers, where applicable

 

 

4. How We Use Your Data

We use your data to:

  • Process and deliver your orders

  • Provide customer support

  • Manage your account and preferences

  • Send marketing (if you’ve opted in)

  • Improve our website and services

  • Comply with legal obligations

  • Prevent fraud and maintain security

 

 

5. Legal Basis for Processing

We rely on the following lawful bases under UK GDPR:

  • Performance of contract (e.g. to fulfil your order)

  • Consent (e.g. for marketing emails or cookies)

  • Legal obligation (e.g. for tax and record-keeping)

  • Legitimate interests (e.g. improving services, preventing fraud)

 

 

6. Sharing Your Information

We only share personal data with trusted providers necessary to run our business, including:

  • Shopify (our ecommerce platform)

  • Payment processors (e.g. Shopify Payments)

  • Delivery partners (e.g. couriers)

  • Marketing platforms (e.g. Klaviyo, if you opt in)

  • Legal or regulatory bodies (where required by law)

 

We do not sell or rent your personal information.

 

 

7. International Transfers

Your personal data may be processed outside the UK (e.g. by Shopify in Canada or the US). Where required, we ensure appropriate safeguards such as adequacy decisions or Standard Contractual Clauses are in place to protect your data.

 

 

8. Your Rights

You have rights under UK GDPR, including to:

  • Access your personal data

  • Correct inaccurate data

  • Request erasure (in certain cases)

  • Object to or restrict processing

  • Withdraw consent (where relevant)

  • Lodge a complaint with the Information Commissioner’s Office (ICO)

To exercise your rights, contact us at hello@milkitbakehouse.com

 

 

9. Cookies and Tracking

We use cookies to improve your experience, personalise content, and analyse site traffic. You can manage cookie preferences via your browser or accept/reject optional cookies via our cookie banner (if implemented). For more, see our Cookie Policy (if available).

 

 

10. Marketing Communications

If you’ve opted in, we may send you updates, product news, or special offers. You can unsubscribe at any time via the link in any marketing email.

 

 

11. Data Retention

We retain personal data only as long as necessary for the purpose collected, including to comply with legal obligations or resolve disputes.

 

 

12. Children’s Privacy

Our website is not intended for children under 18, and we do not knowingly collect data from anyone under this age.

 

 

13. Security Measures

We use appropriate technical and organisational measures to keep your data safe. However, no system is completely secure. Please avoid sending sensitive information by unsecured means (e.g. email).

 

 

14. Changes to This Policy

We may update this Privacy Policy to reflect changes in law or our practices. The updated version will be posted here with a new “last updated” date.

 

 

15. Contact Us

For questions about this Privacy Policy or your personal data, please contact:

Email: hello@milkitbakehouse.com

Post: Milk it Bakehouse Limited, Unit 13, Lanteague Studios, Zelah, Truro, TR4 9JG