Last updated: 12 August 2026
Bao’s Bakery (“we”, “us” or “our”) is a partnership operated by Charlie and Josh. We are based in Norwich, Norfolk, UK.
We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use and protect your personal information when you visit our website, place an order, contact us or subscribe to our mailing list.
1. Who we are
Bao’s Bakery is an independent bakery partnership operated by Charlie and Josh in Norwich, Norfolk, UK.
For questions about this Privacy Policy or how we handle your personal data, please contact us at hello@baosbakery.co.uk.
2. What information we collect
Depending on how you interact with our website, we may collect:
- Your name
- Email address
- Telephone number
- Billing and delivery address
- Information about the products you order
- Payment and transaction information
- Information you provide when contacting us
- Your marketing preferences
- Technical information such as your IP address, browser type and information about how you use our website
We only collect information that is reasonably necessary for the purposes described in this policy.
3. When you place an order
When you place an order through our website, we collect information necessary to process and fulfil your order, including your name, contact details, delivery address, order details and payment-related information.
We use this information to:
- Process and fulfil your order
- Arrange delivery
- Send you order confirmations and other necessary information about your order
- Process payments
- Deal with refunds, cancellations, complaints and customer enquiries
- Keep appropriate records for accounting and legal purposes
- Prevent fraud and protect the security of our website and customers
We do not receive or store your full card payment details ourselves when you pay through our online payment provider.
4. Payments
Online payments are processed through WooPayments, which is provided by WooCommerce/Automattic and its payment processing partners.
Payment providers may process information such as your name, billing information, payment details, transaction amount and other information required to process and verify a payment and prevent fraud.
We do not store your full card number or payment security information on our website.
5. Mailing list and marketing
If you choose to subscribe to our mailing list, we collect your email address so that we can send you marketing communications about Bao’s Bakery, including information about our products, markets, events and other news.
We use MailerLite to manage and send our marketing emails. Your email address and relevant subscription information are transferred to and processed by MailerLite for this purpose. MailerLite may process your personal data on our behalf in accordance with its own privacy practices.
We use a confirmation process for new mailing-list subscribers. You will not be added to our mailing list unless you confirm your subscription.
You can unsubscribe from our marketing emails at any time by clicking the unsubscribe link included in our emails.
6. Cookies
Our website may use cookies and similar technologies to ensure that the website and online shop function correctly, remember your preferences and improve your experience.
Some cookies are necessary for the website and online shop to function, including cookies used to remember items in your shopping basket and to process orders.
You can control or disable cookies through your browser settings. Disabling certain cookies may affect the functionality of the website, including the ability to place an order.
7. Blog and website content
We may publish articles, recipes, news and other content on our website. Comments are not enabled on our blog, so we do not collect personal information through blog comments.
If you contact us through any contact details or forms provided on our website, we will use the information you provide to respond to your enquiry and for the other purposes described in this Privacy Policy.
8. Legal basis for processing
We process your personal data where this is necessary to fulfil a contract with you, such as processing and delivering an order you have placed.
We may also process personal data where this is necessary for us to comply with a legal obligation, such as maintaining financial and tax records.
Where we send marketing communications, we rely on your consent. You can withdraw your consent at any time by unsubscribing from our marketing emails.
We may also process information where it is necessary for our legitimate interests, provided that those interests are not overridden by your rights and interests.
9. Who we share your information with
We only share personal information where necessary to operate our business, provide our services or comply with legal obligations.
Depending on how you use our website, information may be shared with service providers including:
- WooCommerce/Automattic, which provides our online shop platform
- WooPayments and its payment processing partners, to process and verify payments and prevent fraud
- MailerLite, where you have subscribed to our mailing list
- Our website hosting and technical service providers
- Professional advisers, where necessary
- Government authorities or other organisations where we are legally required to do so
We do not sell your personal information.
10. How long we keep your information
We retain personal information only for as long as reasonably necessary for the purposes for which it was collected.
Order and transaction information may need to be retained for longer periods to meet our accounting, tax and other legal obligations.
If you subscribe to our mailing list, we will retain your email address while you remain subscribed. If you unsubscribe, we will stop sending you marketing communications, although we may retain limited information where necessary to record your unsubscribe request and ensure that we do not contact you again for marketing purposes.
11. Your rights
Under UK data protection law, you may have rights including the right to:
- Request access to the personal information we hold about you
- Ask us to correct inaccurate or incomplete information
- Ask us to delete your personal information in certain circumstances
- Ask us to restrict how we process your information in certain circumstances
- Object to certain processing
- Withdraw consent where processing is based on consent
- Request a copy of certain personal information in a portable format
You can unsubscribe from marketing emails at any time using the unsubscribe link in our emails.
If you wish to exercise any of your data protection rights, please contact us at hello@baosbakery.co.uk.
You also have the right to complain to the Information Commissioner’s Office (ICO) if you believe your personal information has been handled unlawfully.
12. Third-party services and links
Our website may contain links to websites or services operated by third parties. We are not responsible for the privacy practices of those websites.
We recommend checking the privacy policies of any third-party websites you visit.
13. Security
We take reasonable technical and organisational measures to protect personal information against unauthorised access, loss, misuse or disclosure.
However, no internet transmission or electronic storage system can be guaranteed to be completely secure.
14. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our business, website, services or legal requirements.
Any updates will be published on this page with the revised “Last updated” date.