Privacy Brief
Winchester Croissant Cart respects your privacy. This notice describes how we handle personal information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Information We Collect
We collect only the data necessary to prepare and deliver your order:
- Name, phone number, and delivery address
- Email address for confirmations and receipts
- Optional notes you provide regarding access or preferences
- Website analytics — anonymous statistics on visits and device types
How We Use It
Your details are used exclusively for order processing, confirmation, dispatch updates, and customer support. We may also send a single follow-up email requesting feedback after delivery, but only if you have given consent.
Lawful Basis for Processing
The lawful basis for our processing is contractual necessity (to fulfil your order) and, where applicable, consent (for optional updates or marketing).
Data Storage & Security
All customer information is stored on encrypted servers within the United Kingdom. Payment data, if applicable, is processed by a certified third-party provider compliant with PCI-DSS standards. We review access permissions regularly and limit staff entry to operational needs only.
Retention Period
Order details are retained for up to twelve months for accounting and tax purposes, after which records are securely deleted. Analytics data are stored in aggregate form only.
Your Rights
Under UK law, you have the right to:
- Access your data
- Request correction or deletion
- Restrict or object to processing
- Withdraw consent at any time
To exercise these rights, email [email protected] with “Data Request” in the subject line. We will respond within thirty days.
Cookies & Analytics
We use only essential cookies for site operation and minimal analytics cookies to understand traffic volumes. See our Crumb Notice for full details.
Sharing Information
We never sell or trade personal information. Third-party couriers or payment processors receive only the data required to complete your transaction.
Contact for Privacy Matters
Data Controller: Winchester Croissant Cart
9 Jewry Street, Winchester SO23 8RZ, England
Tel: 441 962 675 482 Email: [email protected]
Updates to This Brief
This Privacy Brief may be updated from time to time. Any significant change will appear on this page with a revised date at the top.
Last updated: November 2025