2. Information We Collect

We collect the following types of personal information:

Contact Information: Name, address, email address, phone number. Collected when you contact us to place an order or make an enquiry.

Order Information: Details of your cake order, including design specifications, dietary requirements, and delivery/collection preferences. Collected during the ordering process conducted via phone or email.

Payment Information: We do not directly collect or store any credit card details. We may retain transaction references or confirmation details for order tracking and accounting purposes.

Website Usage Data: IP address, browser type, operating system, pages visited, and other usage data collected through cookies and similar technologies (see our Cookie Policy below).

Communications Data: Records of email, phone, or other communications you have with us.

Marketing Preferences: Information about your preferences for receiving marketing communications from us.

4. Legal Basis for Processing

We process your personal information based on the following legal bases:

Contractual Necessity: Processing is necessary to fulfil our contract with you (i.e., to process your cake order).

Legitimate Interests: Processing is necessary for our legitimate business interests, such as improving our website, providing customer service, operating our website through Google Adsense and the Affiliate Links, while providing our business sustainability, provided that these interests are not overridden by your rights and freedoms.

Consent: We rely on your consent to send you marketing communications. You have the right to withdraw your consent at any time.

Legal Obligation: Processing is necessary to comply with our legal obligations.

 5. Data Sharing

 We may share your personal information with the following categories of recipients:

Third-Party Service Providers: We use third-party service providers to assist us with website hosting, email marketing, and other business functions. These providers are contractually obligated to protect your personal information and only use it for the purposes we specify.

Delivery Services: We may share your name, address, and phone number with delivery services to facilitate the delivery of your order (Not applicable).

Legal Authorities: We may disclose your personal information to legal authorities if required by law or legal process.

Google: Your website usage data may be shared with Google for the purposes of displaying ads through Google AdSense, in accordance with Google’s Privacy Policy. See Section 11 for more information.

Affiliate Partners: We may share anonymous, aggregated data about clicks on affiliate links with our affiliate partners. However, we will never share your individual personal information with these partners.

 We will never sell your personal information to third parties.

 6. Data Retention

We will retain your personal information for as long as necessary to fulfil the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

Order Information: We typically retain order information for 7 years for accounting and customer service purposes.

Contact Information: We retain your contact information for as long as you remain a customer or until you unsubscribe from our marketing communications.

Website Usage Data: We retain website usage data for 72 months for analytical purposes.

 7. Your Rights

You have the following rights regarding your personal information:

Right to Access: You have the right to request access to the personal information we hold about you.

Right to Rectification: You have the right to request that we correct any inaccurate or incomplete personal information.

Right to Erasure (“Right to be Forgotten”): You have the right to request that we erase your personal information under certain circumstances.

Right to Restriction of Processing: You have the right to request that we restrict the processing of your personal information under certain circumstances.

Right to Data Portability: You have the right to receive your personal information in a structured, commonly used, and machine-readable format and to transmit it to another data controller. Please note that due to the nature of the data we collect (primarily order information communicated via phone/email), exercising this right may be limited. We will do our best to provide your data in a useful format.

Right to Object: You have the right to object to the processing of your personal information for direct marketing purposes or on grounds relating to your particular situation.

Right to Withdraw Consent: If we are processing your personal information based on your consent, you have the right to withdraw your consent at any time

Right to Lodge a Complaint: You have the right to lodge a complaint with a data protection authority if you believe that we have violated your data protection rights. The relevant data protection authority in Ireland is the Data Protection Commission.

To exercise any of these rights, please contact us at contact@emmascake.ie. We may require you to verify your identity before processing your request.

 8. Security Measures

We take reasonable technical and organisational measures to protect your personal information from unauthorised access, use, or disclosure. These measures include:

9. Cookie Policy

Our website uses cookies to improve your browsing experience. Cookies are small text files that are stored on your computer or mobile device when you visit our website.

We use the following types of cookies:

Analytical Cookies: These cookies allow us to track website usage and improve our website’s performance.

Marketing/Advertising Cookies: These cookies are used by Google AdSense to display relevant ads and track their performance. (See Section 11)

You can control cookies through your browser settings. You can choose to block all cookies or only certain types of cookies. Please note that blocking cookies may affect the functionality of our website. You can also manage your ad preferences directly through your Google account.

10. International Data Transfers

Your personal information may be transferred to and processed in countries outside of the European Economic Area (EEA). Specifically, Google may transfer data related to AdSense to servers located around the world. We will take appropriate safeguards to ensure that your personal information is protected in accordance with GDPR standards.

11. Third-Party Advertising (Google AdSense)

• We use Google AdSense to display advertisements on our website. Google AdSense uses cookies and other technologies to personalise ads based on your browsing history and interests.

• Google may collect and use information about your visits to our website and other websites in order to provide you with relevant advertisements.

• You can learn more about how Google uses your information for advertising purposes and how to control your ad preferences by visiting the Google Ad and Privacy Policy.

• We are not responsible for the privacy practices of Google or other third-party advertisers.

12. Affiliate Links

(Not Applicable) – no links available

• Our website may contain affiliate links to third-party products or services. If you click on an affiliate link and make a purchase, we may earn a commission.

• We are not responsible for the privacy practices of these third-party websites. We encourage you to review the privacy policies of any website you visit.

• When you click on an affiliate link, the third-party website may use cookies to track your visit and attribute the purchase to our website. We do not have control over these cookies.

13. Children’s Privacy

Our services are not intended for children under the age of 16. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe that your child has provided us with personal information, please contact us immediately.

14. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our data processing practices or applicable laws. We will post the updated Privacy Policy on our website and indicate the effective date. We encourage you to review this Privacy Policy periodically.

15. Contact Us

If you have any questions or concerns about this Privacy Policy or our data processing practices, please contact us at:

• • Email: contact@emmascake.ie

By using our services, you acknowledge that you have read and understood this Privacy Policy.