Privacy Policy

The Cake Tasting Club Ltd is a UK-based subscription box business. Our registered address is 13 Springfield Park Road, Horsham, RH12 2PW. The data controller is Victoria Ellis.

If you have any questions about this policy or how we handle your data, contact us at [email protected].

When you place an order or create an account with us, we collect: your name, email address, delivery address, phone number, and payment information. Payment details are processed securely by our payment providers (Stripe, PayPal, Apple Pay, and Google Pay) and are never stored directly by us.

We also collect standard technical data when you visit our website, including your IP address, browser type, pages visited, and time spent on the site. This is collected automatically and does not identify you personally.

We use your personal information to process and deliver your orders, manage your subscription, send order confirmations and shipping updates, and respond to any queries you raise with us.

With your consent, we may also send you marketing emails about new boxes, flavours, and promotions. You can unsubscribe at any time using the link in any email we send.

We use aggregated, anonymised data to understand how people use our website and to improve our service.

To run our business, we share your data with trusted third parties only where necessary:

• Subbly powers our subscription platform and manages your account and billing data.
• Klaviyo manages our email marketing.
• Stripe, PayPal, Apple Pay, and Google Pay process payments securely.
• Meta and Google Analytics help us understand how our advertising and website are performing — this involves anonymised and aggregated data.
• Royal Mail handles delivery of your orders.

We occasionally receive customer order information from Yumbles, a marketplace through which some customers purchase our products. Yumbles share your name, email, and delivery address with us solely to fulfil your order. We do not share your data back with Yumbles beyond what is required for that purpose.

None of these third parties are permitted to use your data for their own marketing purposes.

Under UK GDPR, you have the right to access the personal data we hold about you, request corrections, ask us to delete it, object to how we use it, and request we restrict processing in certain circumstances. To exercise any of these rights, email us at [email protected].

You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk if you believe we have not handled your data correctly.