Privacy policy

Who we are

Sturdy Cake Stackers is the data controller for the personal information described on this page.

Registered name

Sturdy Cake Stackers

Email

sturdystackers@gmail.com

What we collect, and why

When you place an order

We collect your name, billing and delivery address, email address and phone number if you give one. We need this to take payment, send your order and deal with any problem afterwards. The lawful basis is performance of a contract — we cannot fulfil an order without it.

We never see or store your card details. Payment is handled entirely by our payment provider; the card number is submitted to them directly and does not pass through this website.

When you use the contact form

We collect the name, email address and message you type in, so that we can reply. The lawful basis is legitimate interests — answering an enquiry someone has chosen to send us.

When you browse the shop

Adding something to your basket sets a single cookie so the basket survives between pages. It contains a random identifier and nothing else — no name, no email, no card details. It expires after 48 hours.

This site runs no analytics, no advertising tags and no tracking pixels. We do not build a profile of you, and we do not sell or share data for marketing.

Cookies

sturdy_cart

Strictly necessary. Keeps your basket linked to you between pages. Contains only a random token, expires after 48 hours, and cannot be read by scripts in your browser.

Because this is the only cookie and it is strictly necessary to provide a service you have asked for, we do not need to ask your consent for it. If we ever add analytics or advertising cookies, we will ask first.

Going through to checkout takes you to our shop system, which sets its own cookies needed to hold your order and take payment.

Who your information is shared with

We share only what is necessary, with:

• Our payment provider — to take payment and handle refunds and chargebacks.
• Our delivery carrier — the name, address and, where given, phone number needed to deliver your parcel. We currently use UPS.
• Our website and shop hosting providers — who store the data on our behalf and act only on our instructions.

We do not sell your personal information, and we do not share it with anyone for their own marketing.

How long we keep it

• Order records — six years after the end of the financial year they fall in, because HMRC requires us to keep records of sales for that long.
• Contact form messages — up to two years, then deleted.
• The basket cookie — 48 hours.

Your rights

Under UK data protection law you have the right to:

• ask for a copy of the personal information we hold about you;
• have inaccurate information corrected;
• ask us to delete information, where we do not have a legal obligation to keep it — order records we must keep for HMRC are the usual exception;
• ask us to restrict how we use it, or object to us using it;
• ask for your information in a portable format;
• withdraw consent at any time, where we relied on consent.

To exercise any of these, email sturdystackers@gmail.com. We will respond within one month.

Complaints

If you are unhappy with how we have handled your information, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner's Office atico.org.uk, or on 0303 123 1113.

Changes to this policy

If we change how we handle personal information, we will update this page and change the date below.

Last updated 2026-09-04.