Our Privacy Policies
BAKE FRIEND LTD
PRIVACY POLICY
Effective Date: 14 February 2026
Bake Friend Ltd (Company No. 14839711) of Suite Ra01, 195–197 Wood Street, London, England, E17 3NU (“Bake Friend”, “we”, “us”, “our”) is the data controller responsible for your personal data.
This Privacy Policy explains how we collect, use, store and protect your personal information when you use the Bake Friend mobile application (“App”).
1. Personal Information We Collect
We collect the following categories of personal data:
A. Account Information
-
First name
-
Last name
-
Date of birth
-
Email address
-
Contact number
-
Residential address
B. Seller-Specific Information (When Acting as Seller)
-
Bank account number
-
Bank sort code
-
Stripe Connected Account ID
-
Business or kitchen address
-
Latitude and longitude of sale location
-
Optional hygiene documentation uploads
C. Transaction Information
-
Order history
-
Purchase amounts
-
Payout records
We do not store full card payment details. Payments are processed securely via third-party payment providers such as Stripe.
2. How We Use Your Personal Data
We use your data to:
-
Create and manage your account
-
Facilitate transactions between Users
-
Process payments and payouts
-
Provide customer support
-
Improve App functionality
-
Prevent fraud
-
Comply with legal obligations
-
Send marketing communications (where permitted)
3. Legal Bases for Processing (UK & EU Users)
Under the UK GDPR and EU GDPR, we rely on the following lawful bases:
-
Performance of a contract – to provide the App and process transactions
-
Legal obligation – to comply with financial and regulatory laws
-
Legitimate interests – to improve and secure the App
-
Consent – for marketing communications
You may withdraw consent at any time for marketing communications.
4. US & Canada Privacy Rights
United States
Depending on your state of residence (e.g., California), you may have rights to:
-
Request access to personal information
-
Request deletion
-
Request correction
-
Opt out of certain data uses
Canada
Under PIPEDA, you have the right to:
-
Access your personal information
-
Request corrections
-
Withdraw consent (subject to legal limits)
Requests can be made using the contact details below.
5. Data Sharing
We may share your data with:
-
Stripe (for payment processing)
-
Cloud hosting providers
-
Analytics providers
-
Regulatory authorities (if required by law)
-
Professional advisers
We do not sell personal data.
6. International Transfers
Your data may be transferred outside the UK or EU, including to the United States.
Where this occurs, we ensure appropriate safeguards are in place, including:
-
Standard Contractual Clauses
-
Secure encrypted transfers
-
Contractual data protection obligations
7. Data Retention
We retain your personal data while your account is active.
If you delete your account:
-
Personal data is deleted or anonymised
-
Certain transactional records may be retained where legally required (e.g., tax, anti-money laundering compliance)
We do not retain data longer than necessary.
8. Data Security
We implement appropriate technical and organisational security measures including:
-
Encrypted data transmission
-
Secure cloud hosting
-
Restricted access controls
-
Payment tokenisation via Stripe
However, no system can guarantee absolute security.
9. Anonymised & Aggregated Data
We may anonymise and aggregate data for:
-
Analytics
-
Platform improvements
-
Business intelligence
-
Statistical analysis
Anonymised data does not identify individual Users.
Bake Friend retains database rights in anonymised and aggregated datasets.
10. Your Rights (UK & EU)
You have the right to:
-
Access your personal data
-
Rectify inaccurate data
-
Erase data (“right to be forgotten”)
-
Restrict processing
-
Object to processing
-
Data portability
-
Lodge a complaint with the ICO or your local supervisory authority
11. Marketing Communications
By creating an account, you may receive marketing communications from Bake Friend.
You may unsubscribe at any time using the unsubscribe link in emails.
12. Children
The App is not intended for persons under 18 years of age.
We do not knowingly collect data from minors.
13. Contact Us
If you have questions about this Privacy Policy or wish to exercise your rights, contact:
Email: [Insert privacy email]
Address: Suite Ra01, 195–197 Wood Street, London, England, E17 3NU
UK Users may lodge complaints with the Information Commissioner’s Office (ICO).
