Privacy Policy

Last updated: 28 March 2026

Piece of Cake Gibraltar (“we”, “us”, “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your personal data when you visit our website or place an order with us, in compliance with the General Data Protection Regulation (GDPR) and the Gibraltar Data Protection Act 2004.

1. Data Controller

Piece of Cake Ltd
The Residence, 29-35 Engineer’s Lane
GX11 1AA Gibraltar
Email: cakes@pieceofcake.gi
Phone: +350 20043856

2. What Data We Collect

We collect the following personal data when you interact with our website:

  • Order information: Name, email address, phone number, delivery address, and payment details when you place an order.
  • Account information: Email address and password if you create an account.
  • Communication data: Any messages, greeting card text, or enquiries you send us.
  • Technical data: IP address, browser type, device information, and pages visited, collected via cookies and server logs.

We do not collect comments or reviews from customers on this website.

3. How We Use Your Data

We use your personal data for the following purposes:

  • To process and fulfil your orders, including delivery and collection.
  • To send you order confirmations, delivery updates, and receipts by email.
  • To respond to your enquiries and provide customer support.
  • To improve our website, products, and services.
  • To comply with legal obligations.

We will never use your data for marketing purposes without your explicit consent.

4. Legal Basis for Processing

We process your data on the following legal grounds:

  • Contract: Processing is necessary to fulfil your order (Article 6(1)(b) GDPR).
  • Legitimate interest: To improve our website and services (Article 6(1)(f) GDPR).
  • Consent: Where you have given explicit consent, such as for cookies (Article 6(1)(a) GDPR).
  • Legal obligation: Where required by law (Article 6(1)(c) GDPR).

5. Cookies

Our website uses cookies to:

  • Essential cookies: Enable core functionality such as your shopping cart and checkout. These are necessary and cannot be disabled.
  • Analytics cookies: Help us understand how visitors use our site (only with your consent).

You can manage your cookie preferences at any time using the cookie banner on our website.

6. Data Sharing

We do not sell your personal data. We may share your data with:

  • Payment processors: To securely process your payments.
  • Delivery partners: To deliver your orders.
  • Hosting providers: Our website is hosted by GoDaddy, who store data on our behalf.

All third parties are required to process your data securely and in accordance with GDPR.

7. Data Retention

We retain your personal data for as long as necessary to fulfil the purposes for which it was collected:

  • Order data: Retained for 6 years for tax and legal purposes.
  • Account data: Retained until you request deletion of your account.
  • Cookie data: As specified in the cookie consent settings.

8. Your Rights

Under the GDPR, you have the right to:

  • Access your personal data.
  • Rectify inaccurate or incomplete data.
  • Erase your data (“right to be forgotten”).
  • Restrict processing of your data.
  • Data portability — receive your data in a structured, machine-readable format.
  • Object to processing based on legitimate interest.
  • Withdraw consent at any time where processing is based on consent.

To exercise any of these rights, please contact us at cakes@pieceofcake.gi.

9. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Our website uses SSL encryption for all data transmission.

10. Children’s Privacy

Our website is not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date.

12. Contact & Complaints

If you have any questions about this Privacy Policy or wish to make a complaint, please contact us:

Email: cakes@pieceofcake.gi
Phone: +350 20043856
Address: The Residence, 29-35 Engineer’s Lane, GX11 1AA Gibraltar

You also have the right to lodge a complaint with the Gibraltar Regulatory Authority (GRA) at www.gra.gi.