| Tax Name | Value |
|---|
Last updated: 14 July 2026
This Privacy Notice explains how DIGICRAFTING LTD, trading through the Craft Bakery brand, collects, uses, stores and protects personal information when you visit craftbakery.me , create an account, contact us or place an order through our website.
DIGICRAFTING LTD is the data controller responsible for the personal information processed through the Craft Bakery website and ordering platform.
Company name: DIGICRAFTING LTD Company number: 17142499 Registered office: Office 12, Initial Business Centre, Wilson Business Park, Manchester, United Kingdom, M40 8WN Trading name: Craft Bakery Website: https://craftbakery.me Contact email: digicraftpg@gmail.com
This Privacy Notice is prepared in accordance with the UK General Data Protection Regulation (“UK GDPR”), the Data Protection Act 2018 and other applicable UK privacy and electronic communications laws.
your full name;
business or trading name;
job title or position;
company registration or tax information where required;
customer account username or identification details.
email address;
telephone number;
billing address;
delivery address;
business or outlet address.
account login information;
encrypted password information;
account preferences;
preferred language;
account and ordering history.
We do not have access to your password in readable form where passwords are stored using appropriate encryption or hashing technology.
products ordered;
quantities;
order value;
order date and time;
delivery or collection information;
billing information;
payment method;
invoices, credit notes or payment records;
correspondence concerning an order.
Where payments are processed through a third-party payment provider, full card details are normally processed directly by that provider and are not stored by Craft Bakery. The applicable payment provider’s own privacy notice may also apply.
contact form submissions;
emails;
telephone communications;
customer service requests;
complaints;
product or delivery enquiries;
social media messages sent directly to us.
IP address;
browser type and version;
device type;
operating system;
time zone;
language settings;
login records;
pages visited;
referring website;
website interaction and diagnostic information;
cookie and consent preferences.
Where necessary to respond to a product enquiry or fulfil a specific order, you may voluntarily provide information concerning allergies, intolerances or dietary requirements.
Information about a person’s health may constitute special category personal data under the UK GDPR. We will only process such information where it is necessary, lawful and appropriate, including where you have voluntarily provided it for the purpose of responding to your request or protecting the health and safety of the intended consumer.
Customers remain responsible for reviewing current ingredient and allergen information before ordering or serving products.
directly from you when you create an account;
when you place, amend or cancel an order;
when you contact us;
when you complete a website form;
when you communicate with us by email, telephone or social media;
automatically through cookies, server logs and similar technologies;
from a business, café, retailer or organisation that has authorised you to place orders on its behalf;
from service providers assisting with website hosting, ordering, delivery, payments or customer support.
create and administer your customer account;
verify your identity or business details;
accept, process and manage orders;
arrange preparation, collection or delivery;
issue invoices and maintain financial records;
communicate about products, orders and account matters;
provide customer support;
manage complaints, refunds or order disputes;
maintain the security and functionality of the website;
detect and prevent fraud, misuse or unauthorised access;
improve our products, services and ordering platform;
comply with legal, accounting, tax and regulatory requirements;
establish, exercise or defend legal claims;
send marketing communications where permitted by law;
record and manage cookie choices.
We will not sell your personal information to third parties.
We process information where it is necessary to create or administer a customer account, provide requested products or services, process and fulfil an order, communicate about an order, or take steps at your request before entering into a contract.
We may process and retain information to comply with accounting, tax, food safety, company and commercial record-keeping requirements, and lawful requests from courts, regulators or public authorities.
We may process information where necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms. These interests may include operating and improving our business, maintaining website and account security, preventing fraud, managing customer relationships, responding to business enquiries, protecting our legal rights and understanding how our services are used.
We may rely on consent for non-essential cookies, certain electronic marketing communications, and processing voluntarily supplied information where consent is the appropriate lawful basis. You may withdraw your consent at any time.
We may send marketing emails or electronic messages where you have expressly consented, the communication is otherwise permitted by applicable electronic marketing law, or the communication is sent to an appropriate business contact and a lawful basis exists.
You may unsubscribe at any time by using the unsubscribe link in a marketing email, adjusting available communication settings, or contacting us at digicraftpg@gmail.com .
Service messages relating to your account, orders, invoices, deliveries or security are not marketing communications.
We may share personal information with carefully selected third parties where necessary, including website hosting and IT providers, cloud storage providers, email and communication providers, analytics and security providers, payment processors, accountants, auditors, professional advisers, delivery providers, customer support providers, public authorities where legally required, and potential purchasers or advisers in connection with a lawful business transaction.
Where a service provider processes personal information on our behalf, we require appropriate contractual, confidentiality and security safeguards.
Craft Bakery’s commercial, production, fulfilment or technical operations may involve service providers or business activities located outside the United Kingdom. Where UK personal information is transferred internationally, we will use a lawful transfer mechanism where required, such as a UK adequacy regulation, the UK International Data Transfer Agreement, the UK Addendum to the European Commission Standard Contractual Clauses, or another permitted mechanism.
customer account information may be retained while the account remains active and for a reasonable period afterwards;
order, invoice and transaction records may be retained for up to six years after the relevant financial period or longer where legally required;
customer service correspondence may be retained for the time necessary to resolve the matter and manage potential claims;
cookie consent records may be retained for the period necessary to demonstrate compliance;
marketing information may be retained until you unsubscribe or object, together with a limited suppression record.
We use reasonable technical and organisational measures designed to protect personal information against unauthorised access, accidental loss, unlawful use, alteration, disclosure or destruction. No internet transmission or storage system can be guaranteed to be completely secure.
request access to your personal information;
request correction of inaccurate or incomplete information;
request deletion of your personal information;
request restriction of processing;
object to processing based on legitimate interests;
object to direct marketing;
request transfer of certain information in a portable format;
withdraw consent where processing is based on consent;
request information about international transfer safeguards;
complain to the Information Commissioner’s Office.
To exercise your rights, contact:
Email: digicraftpg@gmail.com Postal address: DIGICRAFTING LTD, Office 12, Initial Business Centre, Wilson Business Park, Manchester, United Kingdom, M40 8WN
You have the right to complain to the UK Information Commissioner’s Office if you are concerned about how we use your personal information. We encourage you to contact us first so that we have an opportunity to address your concern.
Our website may contain links to third-party websites, platforms or social media services. We do not control those third parties and are not responsible for their privacy practices.
The Craft Bakery ordering platform is intended for business customers and adults authorised to place orders. Our services are not directed at children, and we do not knowingly create customer accounts for individuals under the age of 18.
We do not currently make decisions producing legal or similarly significant effects solely through automated processing.
We may update this Privacy Notice where our business practices, website functions or legal obligations change. The current version will be published on this page.
DIGICRAFTING LTD Trading as Craft Bakery Office 12, Initial Business Centre Wilson Business Park Manchester United Kingdom M40 8WN
Email: digicraftpg@gmail.com Website: https://craftbakery.me