When you order a cake we collect your name, email address, phone number, the date and slot you need it, and your delivery address. For bespoke orders we also keep the design brief and any reference photographs you upload. We use this only to make and deliver your cake, to answer your enquiry, and to keep the accounting records the law requires. We do not sell it, and we do not use it for advertising.
Who is responsible for your data
The data controller is the trader below. You can contact us about anything on this page by email.
Tinu Vivi trading as Vivi's Cakery
Email hello@viviscakery.co.uk
- Business structure
- Sole trader
- Companies House number
- Not applicable. Vivi's Cakery is a sole trader, not a registered company.
- VAT status
- Not VAT-registered. No VAT is added to or included in our prices; the price shown is the total you pay. We cannot issue a VAT invoice; you receive a payment receipt from Stripe and an order confirmation email from us.
- Food business registration
- Vivi's Cakery is registered as a food business with Liverpool City Council, and has been registered since 2024.
What we collect, and why
These are the only categories of personal data this website stores.
When you place an order
- Your name, email address and phone number
- The date and delivery slot you need the cake
- Your delivery address
- Any message or inscription you add to a cake, including any allergy information you tell us about
- A payment reference from Stripe. We never see or store your card details; those go directly to Stripe.
When you request a bespoke quote
- Your name, email address and phone number
- The occasion, the date, how many people it needs to serve, and your budget
- Your design brief
- Any reference photographs you upload, which are stored privately and never published
When you send us a message
- Your name, email address, subject and message
Allergy information
If you tell us about an allergy or intolerance, that is information about your health. Under UK GDPR it is a "special category" of data and gets extra protection. We collect it only because you have chosen to give it to us so that we can make your cake safely, we use it for nothing else, and we do not share it beyond the kitchen.
What we do not do
There are no advertising trackers, no analytics profiling and no third-party cookies on this website. We do not build a marketing profile of you and we do not sell or rent your details to anyone.
Who else sees it
Your data is shared only with the suppliers needed to run the business:
- Our hosting provider. The website and its database run with Hostinger International Limited. Our hosting plan is provisioned in the United Kingdom. Our hosting provider is an international company, and we cannot rule out that its support staff access the server from outside the UK.
- Stripe Payments UK, Ltd. processes card payments through Stripe Checkout. Stripe is a controller in its own right for payment data; see Stripe's own privacy policy.
- Email. Order confirmations, quote confirmations and our replies are sent through our hosting provider's email service from our own domain.
- Delivery. Whoever brings the cake is given your name, address and phone number so they can find you.
We do not give your data to anyone else unless we are legally required to.
How long we keep it
Order records are kept for 6 years after the order is fulfilled, in line with HMRC's requirement to retain tax records.
Bespoke quote requests that do not become orders, including any reference photographs you uploaded, are deleted within 12 months.
Messages sent through the contact form are deleted within 12 months of being answered.
Allergy information is kept with the order record for as long as that order record is kept, because it forms part of the food-safety history of what we made.
Technical logs
Our web server and the website itself keep short technical logs of requests. These record the IP address the request came from, the page asked for and the time, and for the enquiry and contact forms whether a submission was refused as automated. They do not contain the contents of your enquiry, your name or your email address.
We keep these logs to protect the site: to spot and slow down automated abuse, to enforce the limits on how often the forms can be used, and to investigate errors and security problems. The lawful basis is our legitimate interest in keeping the site available, secure and free of spam. Logs are kept for no longer than we need them for that, and are not used to build any profile of you or for any marketing purpose.