Privacy Notice
Last updated: 30 August 2026
Who we are
Bakes by CR is the trading name of Francisco Ignacio Cruz Rodríguez, sole trader, of 78 Treville Close, Redditch, B98 0NW, United Kingdom. We are responsible for your personal data (the “data controller”). Contact us about your information at chef@bakesbycr.co.uk or +44 7896 740755.
What we collect and why
When you order, we collect your name, email, phone number and — for delivery orders — your delivery address, so we can fulfil your order and contact you about it. We also keep the contents and status of your order, including its payment status. When you contact us through enquiry forms (including event and grazing-table enquiries), we collect the details you provide so we can respond. If you subscribe to our newsletter, we store your email address and your consent record. If you voluntarily tell us about allergies, intolerances or dietary requirements, we use that information only to advise you and prepare your order safely.
Payments
Online card payments are processed by Stripe. We never see or store your full card details — Stripe handles them under its own security standards. We only record whether your payment succeeded, failed or is due on collection.
Emails
Order and account emails (such as order confirmations) are sent through our email provider, Resend. Marketing emails are only sent if you have explicitly subscribed, and you can unsubscribe at any time using the link in any marketing email or by contacting us. Unsubscribing never affects essential emails about your orders.
Where your information is processed
Our website is hosted on Emergent's cloud platform, order records are stored in a MongoDB database, and product photographs are stored in Emergent's object storage. Payment processing is by Stripe and transactional email delivery by Resend. We do not sell your information or share it with advertisers.
Security and record keeping
We keep security and audit logs (for example, sign-in attempts and administrative changes) to prevent fraud and keep the service reliable. We also keep records where the law requires, for example for tax and accounting purposes.
How long we keep information
Order and customer records are kept for up to 6 years to meet legal and accounting obligations. Enquiry messages are kept for up to 12 months after we respond. Newsletter consent records are kept until you unsubscribe, plus a suppression record so we do not email you again by mistake. Allergy or dietary notes are kept with the relevant order and then no longer than the order record. Security logs are kept for up to 12 months.
Your rights
Under UK data-protection law you have the right to access your information, correct it, ask for it to be deleted, object to or restrict how we use it, and request a copy in a portable format. Where we rely on your consent (for example, the newsletter), you can withdraw it at any time. To use any of these rights, contact us at chef@bakesbycr.co.uk or +44 7896 740755. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.
Cookies
Our website uses a small number of essential cookies — see our Cookie Policy for the exact list.
Changes to this notice
If we change this notice we will update this page and its “last updated” date.
Questions about this page? Contact us using the details in the footer and we'll be happy to help.