Privacy policy

Who we are

Emma Carlton's Bakery School ("we", "us", "our") runs bakery and cookery classes from the Cultural Quarter in North Shields. We are the data controller for the information described on this page.

Address: 62 Saville Street, North Shields, NE30 1ND
Email: hello@emmacarlton.com

What we collect

We only collect what we need in order to run a class or answer an enquiry.

• Booking details. Your name, email address and phone number, the class and date you have booked, and any notes you add when booking.
• Allergy and dietary information. Anything you tell us about allergies, intolerances or dietary requirements so we can plan your session safely.
• Enquiry details. Whatever you choose to include when you use our contact form or email us.
• Payment details. Card payments are handled by our payment provider. We receive confirmation that a payment succeeded and a record of the amount, but we do not see or store your full card number.
• Website data. Basic technical information such as IP address, browser and pages visited, where you have accepted analytics cookies. See our cookie policy for the detail.

Why we use it, and our lawful basis

What we do	Lawful basis
Take and manage your booking, send confirmations and joining instructions, and handle refunds	Performance of a contract with you
Answer enquiries you send us	Our legitimate interest in responding to people who contact us
Plan around allergies and dietary requirements	Your explicit consent, given when you tell us
Keep accounting and tax records	Our legal obligations
Send you news, offers and new class dates by email	Your consent, which you can withdraw at any time
Use non essential cookies and analytics	Your consent, given through the cookie banner

Marketing

We will only email you about classes and offers if you have asked us to. Every email we send has an unsubscribe link, and you can also reply to any of our emails or contact us directly to be taken off the list. Unsubscribing does not affect any booking you already have with us.

Who we share it with

We do not sell your information, and we do not share it with advertisers, investors or data brokers. We share it only with the suppliers who help us run the school, and only to the extent they need it:

• Our booking system, which stores your booking and sends confirmations
• Our payment provider, which processes card payments securely
• Our website host and website support agency
• Our email provider, and our email marketing platform if you have subscribed
• Our accountant, for tax and record keeping

We may also disclose information where the law requires it, or where it is necessary to establish or defend a legal claim.

Where your information is held

Some of our suppliers are based outside the UK. Where information is transferred abroad, we rely on our suppliers having appropriate safeguards in place, such as UK approved contract terms, so your information keeps an equivalent level of protection.

How long we keep it

• Booking records: kept for the current financial year plus six years, because we need them for tax purposes.
• Allergy and dietary notes: deleted shortly after your class has taken place.
• Enquiries that do not lead to a booking: deleted within 12 months.
• Marketing subscriptions: kept until you unsubscribe, and for a short period afterwards so we know not to email you again.

Your rights

Under UK data protection law you can ask us to:

• tell you what information we hold about you and give you a copy of it
• correct anything that is wrong or incomplete
• delete information we no longer need to keep
• restrict or object to how we use it
• transfer your information to another provider
• stop sending you marketing, at any time

Where we rely on your consent, you can withdraw it at any time. That does not affect anything we did before you withdrew it.

To exercise any of these rights, email us. We will respond within one month. There is no charge.

Complaints

If you are unhappy with how we have handled your information, please tell us first and we will try to sort it out. You also have the right to complain to the Information Commissioner's Office, the UK regulator for data protection, which can be contacted through its website at ico.org.uk or on 0303 123 1113.

Children

Our classes are open to bakers aged 14 and over, and under 16s attend with an adult. Where a booking is for someone under 18, we expect the booking and any information given to us to come from a parent or guardian.

Security

We keep your information on password protected accounts and reputable hosted services, and we limit access to those who need it to run the school. No system is completely secure, but we take sensible steps to protect what you give us.

Other websites

Our site links to other websites and embeds content from services such as our booking system and social media. This policy covers our site only, so please read the privacy policy of any other site you visit.

Changes to this policy

We may update this policy from time to time. Any changes will appear on this page with a new "last updated" date.