This Privacy Policy explains how Lille Bakeshop processes personal data in connection with linedirtyear.click and related bakery communications. It applies to enquiries, order handling, website use, and the limited technical processing needed to operate and secure the site.
We use personal data to respond to enquiries, confirm order details, manage collection or delivery arrangements, handle written confirmations, maintain website security, support technical delivery, and keep records needed for administration and compliance. Where allergen information is provided, it is used only to address the specific order or enquiry.
We may share personal data with service providers that support website hosting, technical delivery, security, and message handling. These recipients act only for the purposes described in this policy and are expected to handle data under appropriate confidentiality and security obligations.
We may disclose personal data to public authorities, courts, or other recipients when required to comply with applicable law, enforce our rights, protect the security of the website, or respond to lawful requests. Any disclosure is limited to what is necessary for the stated purpose.
Depending on how you use the site, we may process your name, email address, phone number if provided, inquiry message, order specifications, event date or collection preferences, and allergen information that you choose to provide. We also process limited technical data such as server request metadata and browser and device information.
Data is collected when you submit a contact form, communicate by email or phone, place or discuss an order, or use the website. Technical data is collected through the operation of the site and its security and delivery functions.
We use essential cookies for site operation and cookies that remember privacy preferences. We do not confirm the use of analytics or marketing cookies on the basis of the current facts provided.
The site uses cookies only for essential operation and privacy preferences. Where your browser allows, you may block or delete cookies, but essential functions may not work as intended if you do so.
Subject to applicable law, you may have rights to access your personal data, correct inaccurate information, request deletion, object to certain processing, and obtain restriction of processing in appropriate cases. Some requests may be limited where retention or disclosure is required by law or necessary for legitimate operational reasons.
To exercise a privacy right, please provide enough information to identify the relevant data and the nature of your request. We may need to verify identity before responding, and we will handle the request within the period required by applicable law.
Personal data is retained for the period necessary to manage enquiries, orders, operational records, security logs, and any legal or accounting obligations that apply. When data is no longer needed, it is deleted or anonymised according to our retention practices and technical constraints.
If this policy is updated, the revised version will apply from the date it is made available on the website unless a different effective date is stated. We may also use reasonable notice where a change materially affects the way we process personal data.
Under the GDPR, we process personal data only where we have a lawful basis, and only to the extent needed for the operation of the site, response to enquiries, order handling, security, and related administrative tasks. The exact basis may vary according to the context of the interaction.
Where the GDPR applies, you may have rights of access, rectification, erasure, restriction, objection, and data portability, subject to legal conditions and limitations. If consent is used for a particular processing activity, you may withdraw it for future processing.
Use the listed channels for privacy questions or requests concerning this policy.
