Privacy Policy

Effective Date: 5 July 2026

Privacy Policy for Half Moon Bakery

Half Moon Bakery is committed to protecting your privacy and handling your personal information responsibly. This Privacy Policy explains what information we collect, how we use it, and your rights under UK data protection law.

This policy applies to the Half Moon Bakery website and any personal information you provide when contacting us, placing an order, or using our services.

1. Who We Are

Half Moon Bakery is a UK-based micro bakery operated by Wealden Mushrooms Ltd, a company registered in England and Wales.

Our contact details are:

Half Moon Bakery
2 Scots Pine Grove
Wadhurst
TN5 6FR

Email: halfmoonbakery@protonmail.com

Telephone: +44 7538 488026

For the purposes of UK data protection law, Wealden Mushrooms Ltd is the data controller responsible for your personal information.

2. Information We Collect

Depending on how you interact with us, we may collect:

Information you provide

  • Your name

  • Email address

  • Telephone number

  • Delivery or collection details

  • Order details

  • Messages you send via our contact form, WhatsApp or Instagram

  • Any dietary or allergy information you choose to provide

Information collected automatically

When you visit our website, we may collect:

  • IP address

  • Browser type

  • Device information

  • Pages visited

  • Time spent on our website

  • General website usage information through cookies and Google Analytics

3. How We Collect Your Information

We collect personal information when you:

  • Complete our contact form

  • Place an order via WhatsApp

  • Place an order through Instagram Direct Messages

  • Contact us by email or telephone

  • Browse our website

  • Subscribe to our marketing emails

  • Interact with cookies on our website

4. How We Use Your Information

We use your information to:

  • Process and fulfil your orders

  • Arrange collection or local delivery

  • Respond to enquiries

  • Communicate with you about your order

  • Process payments through our payment provider

  • Improve our website and customer experience

  • Send marketing communications where you have chosen to receive them

  • Meet our legal and accounting obligations

5. Lawful Basis for Processing

Under the UK GDPR, we process your information on the following legal bases:

Contract

To process your order and provide the products or services you have requested.

Legal obligation

To comply with tax, accounting and other legal requirements.

Legitimate interests

To improve our website, respond to enquiries, prevent fraud and operate our business efficiently.

Consent

Where required, such as for optional cookies and marketing emails, we will ask for your consent before processing your information.

6. Payment Processing

Payments are processed securely by SumUp.

We do not store or have access to your full payment card details. Payment information is handled securely by our payment provider in accordance with their own privacy and security standards.

7. Cookies and Analytics

Our website uses cookies to improve your browsing experience and understand how visitors use our website.

These may include:

  • Essential cookies required for website functionality

  • Analytics cookies provided through Google Analytics

  • Cookie preference settings

You can manage your cookie preferences through our cookie consent banner when visiting the website.

You may also adjust your browser settings to control cookies at any time.

8. Marketing Communications

If you choose to subscribe, we may send you updates about new products, seasonal menus, special offers and bakery news using Squarespace Email Campaigns.

You can unsubscribe at any time by:

  • Clicking the unsubscribe link in any email; or

  • Contacting us directly using the details above.

We will never sell your personal information for marketing purposes.

9. How Long We Keep Your Information

We only keep personal information for as long as necessary.

Typically:

  • Customer enquiries are retained only as long as reasonably necessary.

  • Order records and associated financial information are generally retained for six years to comply with UK tax and accounting requirements.

  • Marketing information is retained until you unsubscribe or withdraw your consent.

  • Website analytics data is retained according to Google Analytics retention settings.

Where information is no longer required, it will be securely deleted or anonymised.

10. Sharing Your Information

We only share personal information where necessary.

This may include:

  • SumUp for payment processing

  • Squarespace for website hosting and email communications

  • Google Analytics for website analytics

  • Professional advisers such as accountants where required

  • Government authorities where legally required

We never sell your personal information to third parties.

11. International Transfers

Some of the companies we use may process data outside the United Kingdom.

Where this happens, we ensure appropriate safeguards are in place, such as the use of approved contractual protections or transfers to countries recognised as providing adequate levels of data protection.

12. Data Security

We take appropriate technical and organisational measures to protect your personal information against:

  • Unauthorised access

  • Loss

  • Misuse

  • Alteration

  • Disclosure

While no internet transmission can ever be guaranteed completely secure, we work with reputable service providers and follow recognised security practices.

13. Your Rights

Under UK GDPR, you have the right to:

  • Access your personal information

  • Request correction of inaccurate information

  • Request deletion of your information in certain circumstances

  • Restrict or object to certain processing

  • Withdraw consent where processing relies on consent

  • Request transfer of your data where applicable

  • Lodge a complaint with the Information Commissioner's Office (ICO)

To exercise any of these rights, please contact us using the details provided above.

14. Complaints

If you have concerns about how we handle your personal information, we encourage you to contact us first so we can try to resolve the issue.

You also have the right to make a complaint to the Information Commissioner's Office (ICO).

Website: https://ico.org.uk/

Telephone: 0303 123 1113

15. Contact Us

If you have any questions about this Privacy Policy or how we use your personal information, please contact us:

Half Moon Bakery

Email: halfmoonbakery@protonmail.com

Telephone: +44 7538 488026

Address:

2 Scots Pine Grove

Wadhurst

TN5 6FR

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our business, legal requirements or the services we use.

The latest version will always be published on this website, together with the effective date shown at the top of this policy.