Privacy Policy

Privacy Policy for Thistle Delights

Last updated: 07/02/2026

1. Introduction

This Privacy Policy explains how Thistle Delights (“we”, “us”, “our”) collects, uses, and protects your personal information when you interact with us, place an order, or visit our website or social media pages. We are committed to safeguarding your privacy and complying with the UK General Data Protection Regulation (UK GDPR).

By using our services, you agree to the practices described in this policy.

2. Who We Are

Thistle Delights
Home‑based bakery located in Carluke, United Kingdom
Email: thistledelightsbakes@gmail.com
Social Media: Thistle Delights

We operate as a small business selling South African sweet treats online.

3. What Information We Collect

We collect the following types of personal data:

Information you provide directly

Name
Email address
Phone number
Delivery or collection address
Order details
Payment confirmation (we do not store card details)
Any messages or enquiries you send us

Information collected automatically

If you use our website, we may collect:

Basic analytics data (e.g., pages visited, time spent on site)
Cookies (only where applicable and with your consent)

4. How We Use Your Information

We use your personal data to:

Process and fulfil your orders
Contact you about your order or delivery
Respond to enquiries
Manage payments and receipts
Improve our products and services
Comply with legal obligations (e.g., tax records)

We do not use your data for automated decision‑making or profiling.

5. Legal Basis for Processing

We process your personal data under the following lawful bases:

Contract: To fulfil your order and provide customer service
Consent: When you opt in to marketing or newsletters
Legitimate interests: To operate and improve our business
Legal obligation: For accounting and tax purposes

6. How We Store and Protect Your Data

We take reasonable steps to keep your information secure, including:

Password‑protected devices
Secure payment platforms (e.g., payment link, bank transfer)
Limited access to personal data
Regular deletion of unnecessary data

We retain order‑related information for up to 6 years to comply with UK tax laws.

7. Sharing Your Information

We only share your data when necessary, such as with:

Delivery services (e.g., Royal Mail, couriers)
Payment processors
Website or social media platforms you use to contact us

We never sell your personal information to third parties.

8. Cookies (If Applicable)

If your website uses cookies, include this section:

We may use cookies to improve your browsing experience. You can adjust your browser settings to refuse cookies if you prefer. If you do, some website features may not function properly.

If you don’t use cookies, I can remove this section.

9. Your Rights Under UK GDPR

You have the right to:

Access the personal data we hold about you
Request corrections to inaccurate information
Request deletion of your data (in certain circumstances)
Object to or restrict processing
Withdraw consent for marketing at any time
Request a copy of your data in a portable format

To exercise any of these rights, contact us at thistledelightsbakes@gmail.com

10. Children’s Privacy

Our products and services are not intended for children under 16. We do not knowingly collect personal data from children.

11. Links to Other Websites

Our website or social media pages may contain links to external sites. We are not responsible for the privacy practices of those websites.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date.

13. Contact Us

If you have questions about this Privacy Policy or how we handle your data, please contact us at:
thistledelightsbakes@gmail.com