Privacy Policy

Kindle Bakes is committed to protecting your privacy and ensuring that your personal data is collected and used lawfully, transparently, and fairly in accordance with the EU General Data Protection Regulation (GDPR) and the Data Protection Acts 1988–2018 in Ireland. This policy explains how we collect, use, store, and protect your personal information when you use our website and services.

Data Controller Details

Name: Kindle Bakes

Address: Adamstown, Dublin.

Contact for Data Protection Queries:  +353 (0) 892618456

Information We Collect

We may collect and process the following:

Personal Data: name, email address, postal address, phone number, payment information, and any other information you provide when placing orders, creating an account, subscribing to our newsletter, or contacting us.

Order Data: details of products you order, order history, delivery instructions.

Technical / Usage Data: IP address, browser type and version, device identifiers, operating system, browsing behaviour on our site (pages visited, time spent, etc.), from analytics and cookies.

Communications Data: any messages or feedback you give us (emails, direct messages).

Legal Bases for Processing

Under GDPR, we rely on one or more of these legal bases in order to process your personal data:

Contract: to fulfil your orders and deliver services you request.

Legal obligation: to comply with laws or regulations applicable in Ireland.

Legitimate interests: for example, to improve our services, website security, detect fraud, or ensure quality of products. Your interests will be balanced against ours.

Consent: where required, for example, for marketing communications or non-essential cookies.

How We Use Your Information

Your personal data may be used for:

Processing, confirming, and fulfilling orders; delivery of products.

Customer service: responding to inquiries, complaints.

Marketing: if you have opted in, to send updates, special offers, newsletters.

Analytics: to understand how visitors use our site, improve user experience.

Compliance with legal and regulatory obligations (tax, accounting, consumer law etc.).

Sharing / Disclosure of Data

We will not sell your personal data. We may share it with:

Service providers (e.g. payment processors, delivery companies, analytics providers) who help us operate our business. They will only have access to what they need to perform their services and are obliged to protect your data.

Legal authorities or regulators where required by law (e.g. as required by data protection law, court order).

Business transfers: if Kindle Bakes is sold, merged, or there is a reorganisation, your personal data may be part of that transaction, subject to confidentiality.

Cookies & Tracking Technologies

We use cookies and similar technologies to make our website work as you expect and to enhance your browsing experience (e.g. remembering preferences, analyzing usage).

We will obtain your consent for non-essential cookies (e.g. marketing, analytics) as required by Irish/EU law.

You can usually disable cookies through your browser settings, however this may affect certain website functionalities.

 Data Retention

We keep your personal data only as long as necessary for the purposes for which it was collected, or as required by law.

When your data is no longer needed, we will securely delete or anonymize it.

Your Rights

Under GDPR and Irish law, you have the following rights:

Right of Access: You can request a copy of your personal data that we hold.

Right to Rectification: You may ask us to correct any inaccurate or incomplete data.

Right to Erasure (“Right to be forgotten”): In certain circumstances, you can request deletion of your data.

Right to Restriction of Processing: You can limit how we use your data in certain cases.

Right to Object: You may object to certain types of processing, including for direct marketing.

Right to Data Portability: To receive data you have provided in a structured, commonly used, machine-readable format (if applicable).

Right to Withdraw Consent: If processing is based on consent, you can withdraw that consent at any time.

Right to Complain: If you believe we have processed your data unlawfully, you have the right to lodge a complaint with the Irish Data Protection Commission (DPC).

Security Measures

We implement appropriate technical and organisational measures to safeguard your personal data from unauthorised or unlawful processing, and against accidental loss, destruction or damage.

This includes measures such as secure server hosting, data access controls, encryption (where possible), staff training, and regular security reviews.

 International Data Transfers

If personal data is transferred outside the European Economic Area (EEA), we will ensure that adequate safeguards are in place, such as standard contractual clauses approved by the European Commission, or ensure the recipient country is deemed to have adequate data protection safeguards.

If no adequate safeguards are possible, personal data will not be transferred.

Children’s Data

We do not knowingly collect personal data from children under 16 without parental/guardian consent.

If we become aware that data of a child under that age has been collected without appropriate consent, we will take steps to delete it.

 Changes to This Policy

We may update this policy from time to time, particularly when there are changes in our services, practices, or legal requirements.

The “Last Updated” date will reflect the latest version.

We encourage you to review this policy periodically.

Contact Information

If you have any questions about this policy or your personal data, or want to exercise your rights, contact us:

Kindle Bakes
Phone: +353 (0) 892618456
Address: Adamstown, Dublin.