Draft updated: 25 September 2026.
Who is responsible
SWRL's website address is swrlbakes.com. The full legal name of the business responsible for personal information, its address and a working privacy email will be added here before launch. The contact page will provide the route for privacy enquiries once connected.
This preview
The preview uses example products and does not accept payment. Where email services are not configured, contact and newsletter submissions return an unavailable message; this does not mean an email has been sent or a subscription created.
When you submit a form, its contents reach the website server so the request can be checked, even if the service is unavailable. Please use sample details while reviewing the site. Your basket is saved in your browser's local storage so it can survive a page reload. Clearing site data in your browser removes that basket.
The intended live service
Once connected, the shop will need your name, email, delivery address, selected products and payment status to process and fulfil an order. Customer accounts will use your sign-in details and order history. These activities are intended to operate on the contractual basis of providing the service you request. We cannot deliver an order without the necessary delivery information.
Contact enquiries include your name, email, chosen topic and message. We intend to use them to respond to your enquiry, on the basis of taking steps towards a purchase or our legitimate interest in answering questions. Security checks and limited technical logs may support our legitimate interest in keeping the service working and preventing abuse. Required financial records will be retained to meet applicable legal obligations.
Email updates are your choice
Marketing emails will require a separate, affirmative signup. Buying cookies, creating an account or sending an enquiry will not automatically subscribe you. The signup will identify SWRL and explain the emails you are choosing to receive.
You will be able to unsubscribe using the link in every marketing email. Withdrawing consent stops future marketing, without affecting earlier lawful processing. Essential order or account messages are separate from marketing. The selected email provider and consent-record arrangements will be confirmed before signups open.
Services that help SWRL
The planned service uses Vercel for hosting, Stripe for payments and Royal Mail Click & Drop for dispatch. Customer and order storage, account services and either Resend or MailerLite for email must be confirmed in the final notice. Only the information needed for each service should be shared. SWRL does not need your full payment-card details in its own order records.
Before launch, SWRL must document each provider's role, processing locations and any overseas transfer safeguards. The final notice will identify relevant safeguards and how to request further information. A service being listed here does not mean it is already connected.
How long information is kept
The final retention schedule is pending. It must account for fulfilment and support needs, legal financial-record requirements, account activity and dispute handling. Enquiries should be removed when no longer needed. Marketing consent records and a minimal suppression record may be needed to respect an unsubscribe. Exact periods or clear criteria will be published before launch.
Browser storage and third-party content
The basket uses local storage. A connected account service may also use session cookies for sign-in. Any additional analytics, advertising, embedded maps or review widgets must be assessed and described before being enabled, with consent where required. Google and Trustpilot review profiles are not connected in this preview.
Your choices and rights
Depending on the reason information is used, you can ask to access or correct it, request deletion, restrict processing, or obtain a portable copy. Some records may need to remain for legal reasons. You can object to processing based on legitimate interests, and you can always object to direct marketing.
Use SWRL's confirmed privacy contact once published. You can also raise a concern with the Information Commissioner's Office. You do not need to complain to SWRL first to contact the ICO.
Keeping this notice accurate
The notice will be updated when the service or its data use changes. Rewards are a possible future feature; any new use of account information for rewards will be explained before it begins.
This draft was informed by the ICO's privacy information guidance and email marketing guidance. Operational details must be checked against the completed service before publication.
The proposed processing and retention approach also draws on the ICO's guidance on lawful bases and storage limitation.