Privacy policy
Placeholder for the production privacy policy (UK GDPR).
This page is a placeholder. The production privacy policy is a legal document and needs drafting with the company’s data protection adviser before it goes live.
It will cover what personal data Heidi collects through the website, the app and the loyalty scheme; the lawful basis for each use; how long it is kept; who it is shared with; and how to exercise your rights under UK GDPR.
Will cover
- Data collected
- Orders, loyalty accounts, app usage, enquiry emails.
- Lawful basis
- Contract for orders; consent for marketing; legitimate interests elsewhere.
- Retention
- Per category — to be set with the DPO.
- Your rights
- Access, rectification, erasure, portability, objection.
- Contact
- privacy@heidibakery.co.uk
