Privacy Policy

Philps Pasties is operated by Philps Bakery Ltd of 1 East End, St Just, Cornwall, TR19 7HF. We're the data controller for any personal information you give us when you order or get in touch.

We only collect information we actually need. That includes:

• Your name, delivery address, billing address, email and phone number when you place an order.
• Your email address (and first name, if you choose to share it) when you sign up to our newsletter.
• Order details — what you bought, when, and how much you paid.
• Technical details like your IP address, browser type, and how you arrived at our site, collected via cookies and analytics.

We use your information to:

• Process and dispatch your order, including sharing your address with the courier.
• Send you transactional emails (order confirmations, dispatch notifications, delivery updates).
• Send you marketing emails — but only if you've opted in. You can unsubscribe at any time using the link in any email.
• Improve the site, the products, and the service through anonymous analytics.
• Comply with our legal obligations (for example, keeping records for tax purposes).

Under UK GDPR we rely on three lawful bases for processing your data: contract (to fulfil your order), consent (for newsletter marketing and non-essential cookies), and legitimate interest (to keep the site secure and to improve it). You can withdraw consent at any time without affecting orders we've already processed.

We share the minimum necessary information with trusted partners who help us run the bakery and the site. These include our payment processor (Stripe), our courier (DPD), our email platform (Klaviyo), and our website host. Each partner is contractually bound to protect your data and only use it on our instructions. We never sell your data.

Some of our service providers (notably analytics and email) may transfer data outside the UK. Where they do, we rely on the UK's adequacy decisions or Standard Contractual Clauses to ensure your data continues to receive equivalent protection.

We keep order records for 7 years to comply with UK accounting and tax law.

Newsletter subscribers stay on the list until they unsubscribe, after which we keep a suppression record so we don't accidentally re-add them.

Anonymous analytics data is kept for up to 26 months.

Under UK GDPR you have the right to:

• Ask for a copy of the personal information we hold about you.
• Ask us to correct anything that's wrong, or delete information we no longer need.
• Object to our processing for marketing purposes (this happens automatically when you unsubscribe).
• Lodge a complaint with the Information Commissioner's Office at ico.org.uk.

We use a small number of cookies to keep your basket working, remember your preferences, and (with your consent) measure how the site performs. You can change your cookie preferences at any time using the cookie banner on the site or your browser settings.

Email info@philpspasties.co.uk with the subject line "Privacy" and our team will come back to you within 30 days, as required by UK GDPR.