Privacy notice
Last updated 24 May 2026
Little Oven by Nilam is the data controller for the personal information you share with us. I keep things simple: I only collect what I need to bake and deliver your cake, and I never sell your details. This notice explains how your data is handled under UK GDPR.
What I collect
When you enquire or order, I collect your name, email address, and — for delivery — your delivery address and order details (the cake, date, message and any preferences). Card payments are handled by Stripe; I never see or store your card number.
Why I use it
I use your information to reply to enquiries, prepare and fulfil your order, arrange collection or delivery, and keep a record of orders for my accounts. The lawful bases are performing our contract with you and my legitimate interest in running a small bakery.
Who I share it with
Only where necessary to fulfil your order: a payment processor (Stripe) to take payment, and a courier for postal deliveries. These providers handle your data under their own data-protection terms. I don’t sell or share your data for marketing.
How long I keep it
Enquiry messages are kept while we’re in touch and for a short time after. Order records are kept for up to six years to meet UK tax and accounting requirements, then deleted.
Your rights
You can ask to see the data I hold about you, correct it, or have it deleted where I’m not required to keep it. To make a request, message me through the contact page. You also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk.
Contact
For anything about your data, get in touch via the contact page or message @littleoven_nilam on Instagram.