THE BIG BANG CAKE ATELIER — operated by Jana Ehlers (sole trader).

Last updated: 24 October 2026.

​

Who we are:

​

The Big Bang Cake Atelier is a small, independent pâtisserie based in Coulsdon, South London. We are the data controller for the personal information described in this policy.

• Address: 40 Woodcote Grove Road, Coulsdon CR5 2AB.

• Email: thebigbangcakes@gmail.com

• Website: www.thebigbangcakes.co.uk

 

What information we collect:

​

We only collect what we need to reply to you and prepare and deliver your order or tasting box.

• Contact details: name, job title, work email, phone if provided.

• Company details: company name, size, workplace address or postcode.

• Event and order details: guest numbers, dates, dietary requirements and allergies, other details shared.

• Website and social media information: details and messages submitted through our website, Instagram, Facebook or LinkedIn.

 

How you may give us information:

​

Website form; LinkedIn Lead Gen Form; Instagram, Facebook or LinkedIn messages; email, telephone or other direct messages; placing an order or requesting a tasting box. Social media platforms may also process your information under their own privacy policies.

​

How we use your information:

​

We use your information to respond to enquiries and provide information about our products and services; review business tasting box requests and arrange deliveries; process and fulfil orders and issue invoices; manage dietary requirements and allergen information for food safety; follow up on enquiries, quotations or tasting box requests where permitted by law; maintain accounting, tax and legal records.

We use the allergy and dietary information provided by customers only to assess and fulfil orders safely. We do not request medical records or use allergy information for marketing. Where we need to record identifiable health information, we will ensure an appropriate lawful basis and Article 9 condition applies before processing it.

You can object to direct marketing at any time by emailing thebigbangcakes@gmail.com. We comply with applicable UK GDPR and PECR requirements.

We do not sell your information or use automated decision-making.

​

Lawful reasons:

​

We process personal information where necessary to respond to enquiries and fulfil orders (contract or steps taken before entering into a contract); to manage our business and communicate appropriately with business contacts (legitimate interests); to meet accounting, tax and other legal obligations (legal obligation); and where you have given valid consent, when consent is required.

Where an order involves personal health information, we assess the applicable UK GDPR requirements before processing it. Where we rely on explicit consent, we will request and record that consent.

​

Information sharing:

​

We may share your personal information with delivery partners and couriers, email and website service providers, invoicing and accounting providers, and our accountant where necessary to operate our business and fulfil orders. We may also share information with public authorities where required by law. When you submit information through social media or LinkedIn Lead Gen Forms, the relevant platform may also process your information under its own privacy policy. Some of our service providers may process personal information outside the UK. Where this involves a restricted international transfer, we will ensure that appropriate safeguards are in place as required by UK data protection law.

​

Retention:

​

We retain enquiries that do not result in an order for up to 12 months. We generally retain invoices and accounting records for six years, subject to applicable legal requirements. We keep allergy and dietary information only for as long as reasonably necessary for the relevant order and any applicable food safety or legal requirements. We retain marketing contact information until you opt out, together with minimal information needed to respect your preferences.

​

Rights:

​

Under UK data protection law, you have rights relating to your personal information. These may include the right to access, correct or delete your data, restrict or object to its processing, and request data portability, where applicable. You may withdraw consent at any time where we rely on it. You have the right to object to direct marketing at any time. To exercise your rights, please contact thebigbangcakes@gmail.com. We will normally respond within one month.

​

Complaints:

​

If you have concerns about how we handle your personal information, please contact us first. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at www.ico.org.uk or by calling 0303 123 1113.

​

Security:

​

We keep your information in password-protected accounts and share it only with people who need it. No method of sending information online is completely secure, but we take reasonable care to protect it.

​

Cookies:

​

Our published pages may use essential cookies or similar technologies provided by the hosting platform. Where non-essential cookies require consent under applicable law, appropriate consent choices will be provided.

Changes:​

We may update this policy from time to time. The date at the top shows when it was last changed.