Privacy Policy

Privacy Policy

Last updated: 7 December 2025

Patisserie Cherie (“we”, “us”, or “our”) is the Data Controller for personal data collected through our website and ordering systems. We are committed to protecting your privacy and handling your data in accordance with the UK GDPR and the Data Protection Act 2018.

This policy details how we collect, use, and safeguard your personal information when you visit our website https://patisserie-cherie.co.uk/ and when you use our ordering partner, Storekit.

  1. Our Relationship with Storekit

Please note that our online ordering system is powered by a third-party platform, Storekit (https://order.storekit.com/patisserie-cherie/menu).

  • When you browse our main website: We collect limited data (forms and cookies).
  • When you place an order: You are redirected to the Storekit platform. Storekit processes your payment and order details, which are then shared with us solely for the purpose of fulfilling your order.

We encourage you to review Storekit’s Privacy Policy for specific details on how they handle payment security and data processing.

  1. The Data We Collect

We collect data in two ways: directly through our website and via our ordering partner.

  1. Data Collected on patisserie-cherie.co.uk

When you use the “Contact” or “Request” forms on our main website, we collect:

  • Identity Data: Name, contact details (email, phone)
  • Message Data: Any specific details, dietary requirements, or event information you provide in the message box.
  • Marketing Preferences: Consent for newsletters or promotions
  • Technical Data: IP address and browser type via Cookies (see Section 6).
  1. Data Received via Storekit

When you place an order through Storekit, they share the following information with us so we can bake and deliver your items:

  • Order Details: Items purchased and special instructions.
  • Delivery Data: Recipient name, delivery address, and phone number.
  • Financial Data: We do not collect or store your full credit/debit card details. All financial transactions are processed securely by Storekit and their payment processors (e.g., Stripe/Apple Pay). We only see the payment status (Paid/Unpaid).
  1. How We Use Your Personal Data

We use your personal data for the following purposes:

  • To respond to queries: Answering questions or providing quotes submitted via our website forms.
  • To process and fulfil your order: Using the data provided via Storekit to bake, pack, and deliver your pastry order.
  • To communicate with you: Sending order confirmations, delivery updates, or addressing issues with your order.
  • To comply with our legal obligations: Keeping records of sales for legal and accounting purposes.
  • To send marketing communications (only if you consent)
  1. Legal Basis for Processing

We process your data under:

  • Contractual necessity (to fulfil your order)
  • Legal obligation (tax and accounting compliance)
  • Consent (for marketing)
  • Legitimate interests (business operations and fraud prevention)
  1. Disclosure of Your Personal Data

We do not sell your data. We may share your data with trusted third parties solely to operate our business:

  • Storekit: Our e-commerce platform provider.
  • Delivery Partners: Couriers or delivery drivers who need your name, address, and phone number to deliver your order.
  • Professional Advisers: Accountants or authorities (like HMRC) if required by law.
  1. Data Retention

We retain your personal information only for as long as necessary.

  • Inquiries: Data from contact forms is kept for 12 months for reference and repeat orders, then securely deleted.
  • Order Data: We are legally required to keep basic information about our customers (including Contact, Identity, Financial, and Transaction Data) for 6 years from the end of the financial year in which the transaction occurred to comply with HMRC requirements.
  • Marketing Data: Until you withdraw consent
  1. Cookies

Our website uses cookies to distinguish you from other users.

  • Functional Cookies: Essential for the website to work securely.
  • Analytics: We may use tools (like Google Analytics) to understand how visitors use our site.
  • Storekit Cookies: When you navigate to the ordering page, Storekit may place its own cookies to manage your shopping cart and session.

You can set your browser to refuse all or some browser cookies.

  1. Your Legal Rights (GDPR)

Under the UK General Data Protection Regulation (GDPR), you have rights including:

  • Right to Access: You can ask for a copy of the personal data we hold about you.
  • Right to Rectification: You can ask us to correct inaccurate or incomplete data.
  • Right to Erasure: You can ask us to delete your data unless we are required to keep it for legal/tax reasons.

Right to withdraw consent for marketing You can object to the processing of your data for certain purposes, including marketing. If you have given consent for marketing, you can withdraw it at any time. To exercise these rights regarding data held by Patisserie Cherie, please contact us at:

  • Data Controller: Romain Bouillot
  • Business Name: Patisserie Cherie
  • Email: romain@patisserie-cherie.co.uk
  • Phone/WhatsApp: 07 595 301 036
  • Address: 24, Windsor Road N7 6JG London

We will respond within one month as required by UK GDPR.

If your request concerns data held specifically by Storekit (e.g., a Storekit account), we may direct you to contact them directly.

  1. Updates

We may update this policy from time to time. The latest version will always be available on our website.