Privacy Policy - Alantu Bakehouse

Privacy Policy

At Alantu Bakehouse (operated by ALANTU ENTERPRISE LTD), we are committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your personal data when you visit our website (alantu-bakehouse.co.uk) or make a purchase, in compliance with the UK General Data Protection Regulation (UK GDPR).

1. Information We Collect To fulfill your orders and provide the best possible service, we collect the following personal information:

Identity & Contact Data: Name, billing address, delivery address, email address, and phone number.
Financial Data: Payment card details. Please note that we do not store your full credit card information on our servers. All payments are securely encrypted and processed directly through our PCI-compliant payment gateway, Stripe.
Transaction Data: Details about payments to and from you, and other details of products or subscriptions you have purchased from us.

2. How We Use Your Information We use your personal data strictly for the following business purposes:

To process and deliver your orders (including our £35 bundles and weekly subscriptions).
To manage your account and subscription billing securely.
To communicate with you regarding your order status, delivery updates, or customer support inquiries.
To comply with our legal and regulatory obligations as a UK registered company.

3. Data Sharing and Third Parties We do not sell, rent, or trade your personal information to third parties. We only share your data with trusted service providers necessary to operate our business, including:

Payment Processors: Stripe, to process your transactions securely.
Shipping/Courier Partners: To deliver your artisanal bread orders to your doorstep.

4. Data Security and Retention We implement strict security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorized way. We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

5. Your Legal Rights (UK GDPR) Under the UK GDPR, you have the right to: