Privacy & Cookies
What we collect, why, how long we keep it, and your rights. Last updated: October 2026.
Who we are
The Wheatless Whisk is a small gluten-free bakery run by Kim in Ludlow, Shropshire. We are the "data controller" for the personal information you give us through this website.
Contact: hello@wheatlesswhisk.co.uk
Business: [Legal business name], [postal address]
What we collect and why
| When you… | We collect | Why (lawful basis) |
|---|---|---|
| Place a customer pre-order | Name, email, phone, collection place and time, what you ordered, any notes | To make and hand over your order (contract) |
| Add allergy or dietary notes to an order | The health or dietary information you choose to share | Only with your explicit consent, given with the tick box on the order form, and only to prepare your order safely |
| Place a wholesale order | Business name, contact name, email, phone, delivery address, delivery and billing preferences | To supply and invoice your business (contract) |
| Send a message through the contact form | Name, email, optional phone, your message | To reply to you (legitimate interests) |
| Use the website | Your IP address, briefly, to stop spam and abuse | Keeping the site secure (legitimate interests) |
We never sell your information, use it for advertising, or add you to a mailing list without asking.
Who else handles it
- IONOS hosts this website and stores order and message records on its servers.
- Microsoft 365 delivers the order and enquiry emails to us and sends your order confirmation.
Both act only on our instructions under data processing agreements and keep data in the UK or EU, or under approved safeguards.
How long we keep it
- Website order and message records are deleted automatically after 12 months.
- Abuse-prevention records of IP addresses are kept for minutes, not days.
- Invoices for wholesale customers are kept for 6 years in our accounts, as UK tax law requires.
Your rights
You can ask us to give you a copy of your information, correct it, delete it, or stop using it. You can also withdraw consent for your dietary notes at any time. Email hello@wheatlesswhisk.co.uk and we will reply within one month.
If you're unhappy with how we've handled your information, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.
Cookies
We only use cookies that are strictly necessary for the site to work, so we don't need to ask for your consent and there is no cookie banner. We do not use analytics, advertising or tracking cookies, and no third party sets cookies through this site.
| Cookie | What it does | How long |
|---|---|---|
PHPSESSID | Keeps you signed in to the customer portal or the baker's control desk while you use the site | Until you close your browser |
ww_portal | Remembers that you entered the customer passcode, only if you tick "Keep me unlocked on this device" | 90 days, or until the passcode changes |
ww_sso | Used only by the baker while signing in with Microsoft | 10 minutes |
The fonts are stored on this website, so loading a page does not contact Google.
Keeping your information safe
The whole site uses an encrypted (HTTPS) connection. Order records are stored outside the public part of the website, and only the baker can view them, after signing in with two-step verification.
Changes
If we change how we use your information, we'll update this page and the date at the top.