Privacy Policy

What Katy Baked

Last Updated: 16 June 2026

Who We Are

What Katy Baked is operated by Katy Snorgaard ("we", "us", "our").

We are committed to protecting and respecting your privacy and handling your personal information in accordance with UK data protection legislation, including the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Data (Use and Access) Act 2025.

If you have any questions about this Privacy Policy or how we use your personal information, please contact us at:

Email: hello@whatkatybaked.com

What Information We Collect

We may collect and process the following personal information:

Name

Email address

Telephone number

Postal address

Dietary requirements, allergies or other information relevant to cake orders, consultations or classes

Information you provide when contacting us, placing an order, booking a class, subscribing to updates or providing feedback

How We Use Your Information

We use your personal information to:

Process and manage enquiries, orders and bookings

Communicate with you regarding your order, booking or enquiry

Maintain internal business records

Provide customer support

Improve our products, services and customer experience

Request reviews or testimonials

Send marketing communications, special offers, event information or newsletters where you have consented to receive them or where permitted by law

Meet our legal and regulatory obligations

Lawful Basis for Processing

Under UK GDPR, we rely on one or more of the following lawful bases:

Contract

Where processing is necessary to fulfil an order, provide a service, or take steps at your request before entering into a contract.

Legal Obligation

Where processing is necessary for compliance with legal or regulatory requirements.

Legitimate Interests

Where processing is necessary for our legitimate business interests, provided those interests do not override your rights and freedoms. This may include improving our services, responding to enquiries and maintaining business records.

Consent

Where we rely on your consent, such as for marketing communications, you may withdraw your consent at any time by contacting us.

Marketing Communications

We may occasionally send information about products, services, events, promotions or news that we believe may interest you.

You may opt out of receiving marketing communications at any time by:

Clicking the unsubscribe link in any marketing email; or

Emailing us at hello@whatkatybaked.com

Sharing Your Information

We do not sell, rent or trade your personal information.

We may share your information with trusted service providers where necessary for the operation of our business, such as:

Website hosting providers

Email service providers

Payment processors

Booking or scheduling platforms

Professional advisers where legally required

Any third parties processing your data on our behalf are required to keep your information secure and use it only for the purposes for which it was provided.

Data Retention

We will retain your personal information only for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, accounting and tax requirements.

When personal information is no longer required, it will be securely deleted or anonymised.

Cookies

Our website uses cookies to improve your browsing experience and help us understand how visitors use our website.

Cookies are small files stored on your device that allow websites to recognise returning visitors and improve functionality.

You can control or disable cookies through your browser settings. Please note that some website features may not function correctly if cookies are disabled.

Links to Other Websites

Our website may contain links to external websites.

Once you leave our website, we have no control over the privacy practices of other websites and cannot be responsible for the protection of any information you provide to them. We recommend reviewing the privacy policies of any external websites you visit.

Security

We take appropriate technical and organisational measures to protect your personal information from unauthorised access, disclosure, alteration or destruction.

However, no method of electronic transmission or storage can be guaranteed to be completely secure, and we cannot guarantee absolute security.

Your Rights

Under UK data protection law, you have the right to:

Access the personal information we hold about you

Request correction of inaccurate or incomplete information

Request deletion of your personal information in certain circumstances

Request restriction of processing in certain circumstances

Object to processing based on legitimate interests or direct marketing

Request transfer of your data where applicable

Withdraw consent where processing is based on consent

To exercise any of these rights, please contact us at hello@whatkatybaked.com.

Data Protection Complaints

If you have concerns about how we have handled your personal information, please contact us in the first instance at hello@whatkatybaked.com.

In accordance with the Data (Use and Access) Act 2025, from 19 June 2026 we operate a data protection complaints procedure.

When a data protection complaint is received, we will:

Acknowledge receipt of the complaint within 30 days of receiving it;

Investigate the complaint and take appropriate steps to respond without undue delay;

Keep you informed of progress where an investigation is ongoing;

Inform you of the outcome of our investigation without undue delay.

We encourage individuals to raise concerns directly with us first so that we have an opportunity to investigate and resolve the issue.

If you remain dissatisfied after our complaints process has concluded, you have the right to raise your concerns with the Information Commissioner's Office (ICO).

Information Commissioner's Office

The Information Commissioner's Office (ICO) is the UK's independent authority responsible for upholding information rights and data protection law.

You can contact the ICO through their website if you believe your data protection rights have been infringed and you are not satisfied with our response.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

Any changes will be posted on this page and, where appropriate, notified to you by email.

We recommend reviewing this Privacy Policy periodically to stay informed about how we protect your information.