Last updated: 9 July 2026

1. Who we are

The Cake Hun (“we”, “us”, “our”) is a bespoke celebration cake business based in Brixton, serving South and Central London. For the purposes of UK data protection law, The Cake Hun is the “data controller” of the personal information we collect from you.

Contact: amelia@thecakehun.com

2. What information we collect

We collect information when you get in touch with us, whether through our website enquiry form, Instagram (including DMs and comments), or email. This may include:

  • Your name
  • Email address and/or phone number
  • Instagram handle (if you contact us via Instagram)
  • Details of your event and cake requirements (e.g. date, venue, guest numbers, design preferences)
  • Dietary requirements or allergen information, where you choose to share this with us
  • Delivery address, where relevant to your order
  • Any other information you choose to include in your enquiry or correspondence with us

We do not collect or store your payment card or bank details directly. Invoicing and payment are handled through our accounting software (Xero), and payments are made directly to us via the payment methods Xero supports. Please refer to Xero’s own privacy policy for how they handle payment information.

3. How we use your information

We use your information to:

  • Respond to your enquiry and discuss your order
  • Design, quote for, and produce your cake
  • Communicate with you about your order, including allergen and delivery information
  • Send invoices and manage payments via Xero
  • Keep basic business records for accounting and legal purposes
  • Improve our service and, occasionally, share our work (e.g. photos of finished cakes) — we will always ask separately before using anything that identifies you personally, such as your name or event details, in our marketing or on social media

4. Our legal basis for using your information

We rely on the following legal bases under UK GDPR:

  • Contract — to take and fulfil your cake order
  • Legitimate interests — to respond to enquiries, manage our business, and keep records
  • Legal obligation — to meet accounting and tax requirements
  • Consent — where we ask separately, for example before featuring your details in marketing

5. Who we share your information with

We share limited information with trusted third parties who help us run our business:

  • Xero — for invoicing and bookkeeping
  • Google Calendar — for scheduling and managing orders internally
  • Instagram/Meta — if you contact us via Instagram, your messages are handled in line with Meta’s own privacy policy
  • Jetpack (Automattic) and Google — as part of running our WordPress website (see Section 6 for more detail)

We do not sell your personal information to anyone, and we do not share it with third parties for their own marketing purposes.

6. Cookies and our website

Our website is built on WordPress and uses cookies and similar technologies, including:

  • Jetpack — which powers our enquiry form, and may set functionality and security cookies
  • Google Fonts — used for the fonts on our site, which may involve your browser connecting to Google’s servers
  • Instagram embed — used to display our Instagram feed, which may set cookies from Meta

These third-party services may collect technical information such as your IP address when you visit our site, in line with their own privacy policies. Where non-essential cookies are used, you will be asked for your consent via a cookie banner, and you can change your preferences at any time through your browser settings or the cookie banner on our site.

7. How long we keep your information

We keep enquiry and order information for as long as reasonably necessary to fulfil your order and meet our accounting and legal obligations (generally up to 6 years, in line with UK tax record-keeping requirements). If your enquiry doesn’t turn into a booking, we’ll keep your details for a reasonable period in case you’d like to get in touch again, and delete them if there’s no further contact.

8. Your rights

Under UK data protection law, you have the right to:

  • Access the personal information we hold about you
  • Ask us to correct inaccurate information
  • Ask us to delete your information
  • Object to, or ask us to restrict, how we use your information
  • Ask for your information to be provided in a portable format
  • Withdraw consent at any time, where we’re relying on consent

To exercise any of these rights, just email us at amelia@thecakehun.com.

9. How to make a complaint

We hope we never give you a reason to complain, but if you’re unhappy with how we’ve handled your personal information, we want to hear about it and put things right.

Step 1: Tell us

Email amelia@thecakehun.com with details of your concern. We will:

  • Acknowledge your complaint within 30 days
  • Look into it properly and without unnecessary delay
  • Let you know the outcome and what, if anything, we’re doing about it

Step 2: Contact the ICO

If you’re not satisfied with our response, or you’d prefer to raise the matter independently, you can contact the Information Commissioner’s Office (ICO), the UK’s data protection regulator:

  • Website: ico.org.uk/make-a-complaint
  • Helpline: 0303 123 1113

10. Changes to this policy

We may update this policy from time to time, for example if our business practices change or the law requires it. We’ll update the “last updated” date at the top of this page when we do.

11. Contact us

If you have any questions about this policy or how we handle your information, please email amelia@thecakehun.com.