Privacy policy

Last updated: June , 2026

This Privacy Policy explains how Galway Cakes, a  home-based bakery based in Galway, Ireland, collects, uses, stores, and protects your personal information when you visit our website, place an order, contact us, or interact with our business online.

We respect your privacy and are committed to protecting your personal data in line with Irish and EU data protection laws, including the General Data Protection Regulation, also known as GDPR.

1. Who We Are

Business name: Galway Cakes
Location: Galway, Ireland
Email: galwaycakes1@gmail.com

For the purposes of data protection law, Galway Cakes is the data controller of the personal information you provide to us.

2. What Information We Collect

When you use our website or place an order, we may collect the following information:

  • Your name
  • Email address
  • Phone number
  • Billing address
  • Delivery address
  • Eircode
  • Order details
  • Payment confirmation details
  • Messages or enquiries you send to us
  • Allergy or special instruction information you choose to provide
  • Website usage information, such as pages visited and cookies, where applicable

We only collect information that is necessary to process your order, deliver your products, respond to enquiries, improve our service, or meet legal obligations.

3. How We Use Your Information

We may use your personal information to:

  • Process and fulfil your order
  • Arrange delivery or shipping across Ireland
  • Contact you about your order
  • Respond to questions, complaints, or refund requests
  • Keep records for tax, accounting, and legal purposes
  • Improve our products, website, and customer service
  • Send marketing emails or offers, only where you have agreed to receive them
  • Protect our business against fraud, misuse, or legal claims

Under GDPR, businesses must have a lawful basis for collecting and using personal data, such as fulfilling a contract, complying with a legal obligation, consent, or legitimate interests.

4. Payment Information

Payments made through our website are processed securely by third-party payment providers.

We do not store your full card details on our website or in our business records. Your payment provider may process your payment information in line with their own privacy policy and security standards.

5. Delivery and Courier Services

To deliver your order, we may share necessary delivery details with courier or postal services, such as:

  • Your name
  • Delivery address
  • Eircode
  • Phone number
  • Email address, where required for tracking

This information is only shared where necessary to complete your delivery.

6. Allergies and Special Instructions

If you provide allergy information, dietary notes, or special delivery instructions, we will only use this information to prepare or fulfil your order safely.

Please note that our kitchen handles common allergens, including but not limited to gluten, wheat, eggs, milk, soya, nuts, peanuts, and sulphites.

7. Marketing Emails

We will only send you marketing emails, offers, or updates if you have chosen to receive them.

You can unsubscribe from marketing emails at any time by clicking the unsubscribe link in the email or by contacting us directly at:

galwaycakes1@gmail.com

We will still contact you where necessary about active orders, deliveries, refunds, or customer service issues.

8. Cookies and Website Tracking

Our website may use cookies or similar technologies to make the website work properly, remember your preferences, analyse website traffic, or support online shopping features.

Some cookies are necessary for the website to function, such as basket, checkout, and security cookies. Other cookies, such as analytics or advertising cookies, may require your consent. The Irish Data Protection Commission says consent is normally required for cookies and similar tracking technologies unless a limited exemption applies.

You can manage or disable cookies through your browser settings or through the cookie settings shown on our website, where available.

9. Who We Share Your Information With

We do not sell your personal information.

We may share your information only where necessary with trusted service providers, such as:

  • Website platform providers, for example Shopify, Wix, Squarespace, or similar
  • Payment processors
  • Courier or postal services
  • Email marketing platforms, if you sign up to marketing
  • Accountants, bookkeepers, or tax advisers
  • IT or website support providers
  • Legal or regulatory authorities, where required by law

These providers should only use your information as needed to provide their service to us.

10. How Long We Keep Your Information

We keep your personal information only for as long as necessary.

Order and transaction records may be kept for accounting, tax, and legal reasons. Customer enquiries may be kept for a reasonable period so we can deal with follow-up questions, complaints, or disputes.

Marketing information is kept until you unsubscribe or ask us to delete it, unless we have another lawful reason to keep it.

11. How We Protect Your Information

We take reasonable steps to protect your personal information from loss, misuse, unauthorised access, disclosure, or alteration.

This may include using secure website platforms, password protection, limited access to customer records, secure payment processors, and trusted service providers.

However, no online system is completely secure, so we cannot guarantee absolute security.

12. Your Data Protection Rights

Under GDPR, you have rights over your personal data. These may include the right to:

  • Access the personal data we hold about you
  • Ask us to correct inaccurate information
  • Ask us to delete your personal information
  • Restrict or object to how we use your information
  • Withdraw consent, where we rely on consent
  • Ask for a copy of your data in a portable format
  • Make a complaint to the Data Protection Commission

The Data Protection Commission is Ireland’s supervisory authority for GDPR and data protection matters.

To exercise your rights, contact us at:

galwaycakes1@gmail.com

13. Children’s Privacy

Our website and products are intended for customers aged 18 or over, or for use by customers with the involvement of a parent or guardian.

We do not knowingly collect personal information from children without appropriate consent.

14. Links to Other Websites

Our website may contain links to third-party websites, such as social media pages, payment providers, or delivery tracking services.

We are not responsible for the privacy practices, content, or security of those third-party websites.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our business, website, legal requirements, or how we use personal information.

The latest version will always be available on our website.

16. Contact Us

If you have any questions about this Privacy Policy or how we use your personal information, please contact us:

Galway Cakes
Galway, Ireland
Email: galwaycakes1@gmail.com