PRIVACY POLICY

Last updated: AUGUST 2026

Mrs Bun the Baker Cookery school is committed to protecting your privacy. This policy explains what personal data we collect, why we collect it, how we use it, and your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who we are

Mrs Bun the Baker Cookery school hello@mrsbunthebaker.net. 07870727007

We are the "data controller" for the personal data described in this policy.

2. What information we collect

We collect the following types of information:

Booking details: name, email address, phone number, postal address (if provided), and details of the class(es) you book.
Payment information: processed securely by our payment provider, Wix, Eventbrite for Monday Masterchef only and Go cardless for DD Saturday class only We do not store your full card details ourselves.
Dietary and allergy information: provided by you when booking, so we can prepare food safely for you during classes.
Marketing preferences: your email address, if you sign up to our newsletter.
Photos and video: images or footage taken during classes for use in marketing (e.g. website, social media, brochures), where you have agreed to this.
Technical information: if you use our website, we may collect standard technical data such as IP address and browsing behaviour via cookies (see Section 7).

3. How and why we use your information

Data

Purpose

Legal basis

Booking details

To process your booking, manage your place on a class, and communicate with you about it

Performance of a contract

Payment information

To take payment for classes

Performance of a contract

Dietary/allergy information

To keep you safe and accommodate your needs during a class

Explicit consent (this is "special category" health data under UK GDPR)

Marketing emails

To send you newsletters, offers, and updates about upcoming classes

Consent

Photos/video

To promote the school on our website and social media

Consent

Technical/cookie data

To operate and improve our website

Consent / legitimate interests

Because dietary and allergy information counts as special category (health) data, we only collect and use it with your explicit consent, and only for the purpose of keeping you safe during a class. We do not use it for any other purpose.

4. Who we share your data with

We do not share your personal information with others except as indicated within this policy or when we inform you and give you an opportunity to opt out of having your personal information shared.

We will share your information in the following ways

With third party service providers, agents, or contractors. We use other companies, agents or contractors (“Service Providers”) to perform services on our behalf or to assist us with providing services to you. For example, we may engage Service Providers to process credit card transactions or other payment methods. Or, we may engage Service Providers to provide services such as marketing, advertising, communications, infrastructure and IT services, to provide customer service, to collect debts, and to analyse and enhance data (including data about users’ interactions with our service). These Service Providers may have access to your personal or other information in order to provide these functions. In addition, some of the information we request may be collected by third party providers on our behalf. We do not authorize them to use or disclose your personal information except in connection with providing their services.

Analytics: Specifically for analytics providers, we use Google Analytics Google Analytics which is a web analytics service offered by Google that tracks and reports website traffic. Google uses the data collected to track and monitor the use of our Service. This data is shared with other Google services. Google may use the collected data to contextualize and personalize the ads of its own advertising network.

We share personal data with trusted third parties who help us run the school, including:

WIX, Eventbrite, GoCardless — our online booking system provider
WIX — our payment processor
WIX — for sending newsletters, if you've subscribed

We do not sell your personal data to anyone. These providers only process your data on our instructions and are required to keep it secure. Unfortunately, transmission of data via the internet is not always secure, so we cannot guarantee security of your data, transmissions are at your own risk.

5. How long we keep your data

Booking and payment records to kept for [e.g. 6 years] to meet our accounting and tax obligations.
Dietary/allergy information this is kept only for as long as needed around your class, stays on the Wix booking form.
Marketing data: kept until you unsubscribe or ask us to delete it.
Photos/video this will be kept until you withdraw consent, after which we'll remove them from future use where reasonably possible (previously published/shared material may not always be fully retrievable).

6. Your rights

Under UK GDPR, you have the right to:

Access the personal data we hold about you
Ask us to correct inaccurate data
Ask us to delete your data ("right to be forgotten")
Withdraw consent at any time (e.g. unsubscribe from marketing, ask us not to use your photo, or stop us using dietary data once no longer needed)
Object to or restrict certain processing
Request a copy of your data in a portable format
Complain to the Information Commissioner's Office (ICO) at ico.org.uk if you're unhappy with how we've handled your data

To exercise any of these rights, contact us at hello@mrsbunthebaker.net

7. Cookies

Our website uses cookies to [e.g. remember your preferences, understand how visitors use the site]. You can control cookies through your browser settings. Our Cookies Policy explains what cookies are, how we use cookies, how third-parties we may partner with may use cookies on the Service, your choices regarding cookies and further information about cookies.

What are cookies

Cookies are small pieces of text sent to your web browser by a website you visit. A cookie file is stored in your web browser and allows the Service or a third-party to recognize you and make your next visit easier and the Service more useful to you.

Cookies can be “persistent” or “session” cookies. Persistent cookies remain on your personal computer or mobile device when you go offline, while session cookies are deleted as soon as you close your web browser.

How Mrs Bun the Baker® uses cookies

When you use and access the Service, we may place a number of cookies files in your web browser.

We use cookies for the following purposes:

· To enable certain functions of the Service

· To provide analytics

We use both session and persistent cookies on the Service and we use different types of cookies to run the Service:

· Essential cookies. We may use cookies to remember information that changes the way the Service behaves or looks, such as a user’s language preference on the Service.

· Analytics cookies. We may use analytics cookies to track information how the Service is used so that we can make improvements. We may also use analytics cookies to test new advertisements, pages, features or new functionality of the Service to see how our users react to them.

Third-party cookies

In addition to our own cookies, we may also use various third-parties cookies to report usage statistics of the Service, deliver advertisements on and through the Service, and so on.

What are your choices regarding cookies

If you’d like to delete cookies or instruct your web browser to delete or refuse cookies, please visit the help pages of your web browser.

Please note, however, that if you delete cookies or refuse to accept them, you might not be able to use all of the features we offer, you may not be able to store your preferences, and some of our pages might not display properly.

· For any other web browser, please visit your web browser’s official web pages.

Where can you find more information about cookies

You can learn more about cookies and the following third-party websites:

· All About Cookies: http://www.allaboutcookies.org/

· Network Advertising Initiative: http://www.networkadvertising.org/

8. Keeping your data secure

We use appropriate technical and organisational measures to protect your personal data against loss, misuse, or unauthorised access, including firewall protection and other IT security safeguards on the devices and systems we use to manage your data.

9. Changes to this policy

We may update this policy from time to time. Changes will be posted on this page with an updated "last updated" date.

10. Contact us

If you have any questions about this policy or how we handle your data, please contact:

Mrs Bun the Baker Cookery school hello@mrsbunthebaker.net. 07870727007