Privacy Policy

Who We Are
Sweet Green Icing is a local cake‑making business based in Norfolk.
Our website address is: https://www.sweetgreenicing.co.uk
Sweet Green Icing is also the data controller for this website and the services we provide.

Amanda Ward is the data controller and we are responsible for your personal data (referred to as “we”, “us” or “our” in this privacy notice).

Contact Details

You can contact us at:
Email: [email protected]

What Personal Data We Collect

We only collect the personal information you choose to give us when you contact us directly by phone, email, or social media. This may include your name, contact details, and information about your order or enquiry.
Our website hosting provider also automatically collects basic technical information such as IP addresses and browser details for security and server‑maintenance purposes. This data is not used for marketing.

Lawful Basis for Processing

We process personal data under the lawful bases of legitimate interests, contract, and legal obligation, depending on the nature of your interaction with us. This allows us to respond to enquiries, provide cake‑making services, maintain records, and comply with UK law.

Cookies and Tracking

This website does not use analytics or marketing cookies.
Only essential technical cookies or server logs may be used to keep the site secure and functioning correctly.

How Long We Keep Your Data

We only keep your personal information for as long as necessary.
• General enquiries are usually kept for up to 12 months.
• Order and service records may be kept for up to 7 years to meet UK tax and accounting requirements.
• Technical logs used for security are kept for a short period before being automatically deleted.

Third‑Party Service Providers

We may use trusted third‑party providers to help operate our website and business, such as website hosting, email services, and security tools. These providers only process your data on our instructions and are required to keep it secure.

Your Rights

Under UK GDPR, you have the right to:
• access the personal data we hold about you
• request corrections
• request deletion of your data (unless we must keep it for legal reasons)
• object to or restrict how we process your data
To exercise these rights, please contact us using the details above.
If you are not satisfied with our response, you may lodge a complaint with the Information Commissioner’s Office (ICO).

Data Protection Complaints (Data Protection (Use and Access) Act 2025)

If you have any concerns about how we have handled your personal data, you can raise a complaint using the contact details provided in this policy. We will acknowledge your complaint within 30 days, investigate the matter promptly, keep you informed of progress, and provide a clear outcome once our investigation is complete.
If you are not satisfied with our response, you have the right to contact the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection. Further information is available at: www.ico.org.uk.