Last updated: 29 October 2026

This privacy policy explains how The Pantry (“we”, “us”, “our”) collects, uses and protects your personal data when you visit askthepantry.co.uk, place an order, or contact us. We are committed to handling your data fairly and in line with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations (PECR).

1. Who we are

The Pantry is the data controller for the personal data described in this policy. Our shops are at 112 Kingsland High Road, Dalston, Hackney, London E8 2NS (+44 20 7254 5777) and 26–28 Goodmayes Road, Ilford IG3 9UN (+44 20 8637 3317).

If you have any questions about this policy or how we use your data, email us at orders@askthepantry.co.uk or call +44 20 7254 5777.

2. The data we collect

  • Order and contact details: your name, email address, phone number, billing and delivery address, and the date and time you want your cake.
  • Order content: the products you choose, any message or name you ask us to put on a cake, dietary notes, and photos you upload for photo cakes.
  • Payment details: card and wallet payments (including Apple Pay and Google Pay) are processed securely by our payment providers. We never see or store your full card number.
  • Account details: if you have an account with us, your login details and order history.
  • Messages: anything you send us by email, phone, WhatsApp or our contact form.
  • Marketing preferences: whether you have signed up to our newsletter or offers.
  • Technical and usage data: your IP address, browser and device type, and how you use our website. Some of this is collected through cookies (see section 8).

3. How we use your data and our lawful basis

  • To take, make and deliver your order, send order confirmations and updates, and handle refunds or complaints. Lawful basis: performance of a contract.
  • To keep accounting and tax records. Lawful basis: legal obligation.
  • To answer your questions and provide customer service. Lawful basis: legitimate interests (helping our customers) or contract.
  • To keep our website and payments secure and prevent fraud and misuse. Lawful basis: legitimate interests.
  • To understand how our website is used and improve it. Lawful basis: consent, given through our cookie banner.
  • To send you newsletters and offers. Lawful basis: consent. You can unsubscribe at any time using the link in every email.
  • To show you relevant adverts on other sites and social media. Lawful basis: consent, given through our cookie banner.
  • To ask you to review your order on an independent review site. Lawful basis: legitimate interests. You can opt out at any time.

4. Who we share your data with

We never sell your personal data. We share it only with trusted service providers who help us run our business, and only as much as they need:

  • Payment providers (Stripe and WooPayments) to process your payment.
  • Our delivery drivers to bring your order to you.
  • Website hosting and email providers (including Hostinger) to host our website and send order emails.
  • Email marketing providers (Mailchimp and Omnisend), only if you have signed up to our emails.
  • Analytics and advertising providers (Google, Meta and Microsoft Clarity), only if you have accepted the relevant cookies.
  • Review platforms (Trustpilot) to collect independent reviews.
  • Professional advisers, such as our accountants, and authorities such as HMRC or the police where the law requires it.

5. International transfers

Some of our service providers store or process data outside the UK, for example in the United States or the European Economic Area. When this happens, we make sure appropriate safeguards are in place, such as UK adequacy regulations, the UK Extension to the EU-US Data Privacy Framework, or the UK International Data Transfer Agreement or Addendum.

6. How long we keep your data

  • Order and payment records: 6 years from the end of the financial year of the order, as required for tax and accounting.
  • Photos you upload for a photo cake: up to 30 days after your order is completed, unless we need them to resolve a complaint.
  • Account details: until you ask us to close your account, or after 3 years without any activity.
  • Customer service messages: up to 2 years.
  • Marketing preferences: until you unsubscribe or withdraw consent.
  • Cookies: for the periods shown in our cookie settings.

7. Your rights

Under UK data protection law you have the right to:

  • ask for a copy of the personal data we hold about you;
  • ask us to correct data that is wrong or incomplete;
  • ask us to delete your data;
  • ask us to restrict how we use your data;
  • object to us using your data, including for direct marketing;
  • ask us to transfer your data to another organisation;
  • withdraw your consent at any time, where we rely on consent.

To use any of these rights, email orders@askthepantry.co.uk. There is normally no charge, and we will reply within one month.

8. Cookies

We use cookies and similar technologies. Strictly necessary cookies keep the website, basket and checkout working and are always on. Analytics, functional and advertising cookies (for example from Google, Meta and Microsoft Clarity) are only used if you accept them in our cookie banner. You can change your choice at any time using the cookie settings button on our website, which also lists the cookies we use.

9. Keeping your data safe

Our website uses an encrypted (HTTPS) connection, payments are handled by PCI-compliant payment providers, and access to customer data is limited to staff who need it to fulfil your order.

10. Children

Our website is not aimed at children under 13, and we do not knowingly collect their personal data. Orders must be placed by an adult.

11. Complaints

If you are unhappy with how we have handled your data, please contact us first so we can try to put it right. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK data protection regulator: ico.org.uk/make-a-complaint or 0303 123 1113.

12. Changes to this policy

We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated at the top.