Privacy Policy
This policy explains what personal data Forty8Bakes processes, why it is used and what rights you have.
Last updated: 1 September 2026
1. Who processes your data?
Forty8Bakes is responsible for personal data received through this website, email, Instagram and order requests. Privacy questions can be sent to order@forty8bakes.com.
2. What data do we process?
Depending on your request, we may process your name, email address, phone number, event or collection date, occasion, order preferences, flavours, themes, allergy and dietary information, budget indication, free-text messages and images uploaded by you.
3. Why do we use this data?
We use personal data to review requests, prepare quotes and orders, contact you, personalise products, arrange payment and collection or delivery, handle complaints, reduce form abuse and comply with legal administration requirements.
4. Legal bases
We process data to take steps at your request before entering into an agreement, to fulfil an order, to comply with legal obligations and, where appropriate, for legitimate interests such as security and customer service. Where consent is required, it will be requested separately.
5. Allergy and dietary information
Allergy information may contain sensitive health information. Please provide only what is necessary for the order. We use this information solely to assess and fulfil the order safely.
6. Uploaded photos
Inspiration photos and other uploaded files are used only for assessing, communicating about and fulfilling your order. Please do not upload unnecessary personal information relating to other people. Files will not be used for advertising without additional permission.
7. Retention
Request and communication data is kept only as long as needed to process the request and deal with reasonable follow-up matters. Data forming part of financial or tax records is retained for the applicable legal period. Uploaded inspiration images are deleted when no longer needed for the order, aftercare or a reasonable dispute period.
8. Sharing with third parties
Personal data is not sold. Data is shared only when necessary for the service, for example with hosting, email, payment or delivery providers, or where required by law. Service providers may process the data only for the agreed purpose.
9. Cookies and local storage
This website currently uses essential local storage for functions such as language choice and cookie preferences. You can reopen your preferences at any time through Cookie settings.
10. Security
Forty8Bakes takes reasonable technical and organisational measures to protect personal data against loss, unauthorised access or improper alteration. No online system can guarantee absolute security.
11. Your privacy rights
Under the GDPR, depending on the circumstances, you may request access, correction, deletion, restriction, portability or object to certain processing. Requests can be sent to order@forty8bakes.com. We may request additional information to verify your identity.
12. Complaints
If you believe your personal data is not being handled correctly, please contact Forty8Bakes. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
13. Changes
This Privacy Policy may be updated when the website, services or applicable law changes. The latest version will always be available on this page.
14. Contact
Privacy questions can be sent to order@forty8bakes.com.