Privacy Policy
Last updated: 5 October 2026
In short: this website uses no cookies, analytics or tracking, and its order planner doesn't send or save anything. I only get the details you choose to send me on Instagram, and I only use them to deal with your order.
1. Who I am
Caked by Abbie is a home baking business run by Abbie in Lucan, Co. Dublin, Ireland. I'm the “controller” of the personal data described here, which means I decide how and why it's used.
- Contact: Instagram message to @cakedbyabbie (opens in a new tab)
- Location: Lucan, Co. Dublin, Ireland. My full postal address is available on request.
2. What I collect and why
I only ask for what I need to make and hand over your order.
| What | Why | Legal basis (GDPR) | How long I keep it |
|---|---|---|---|
| Enquiries and orders: your name, Instagram username, order details, date, and any photos you send | To answer you, quote a price and make your order | Steps you ask for before a contract, and carrying out our contract (Art. 6(1)(b)) | Up to 12 months after your order or last message |
| Delivery details: your address and a contact for the day, only if you choose delivery | To deliver your order | Carrying out our contract (Art. 6(1)(b)) | Deleted within 1 month of delivery |
| Allergy information, only if you choose to tell me | To make your order as safely as I can | Your explicit consent (Art. 6(1)(a) and Art. 9(2)(a)). You can withdraw it at any time. | Deleted within 1 month of your order |
| Payment records: amount, date and payer name | To keep accounts and meet Irish tax rules | Legal obligation (Art. 6(1)(c)) | 6 years, as Irish Revenue requires |
| Technical server logs: IP address, browser type, page requested and time | Kept by the website host to run the site securely | Legitimate interest in security (Art. 6(1)(f)) | As set by the hosting provider, usually a short period |
The order planner
The order planner on the home page runs only in your browser. It doesn't send, save or share what you type. It just writes a message that you can copy into Instagram. Only what you choose to send me on Instagram reaches me.
Photos of your bake
I may share photos of bakes on Instagram. If a photo shows a name, a face, a photo print or other personal details, I'll ask you first and won't post it if you say no.
What I don't do
- I don't use cookies, analytics, advertising pixels or tracking. See the Cookie Policy.
- I don't sell or rent your personal data.
- I don't send marketing messages.
- I don't use automated decision-making or profiling.
3. Who I share it with
- Meta (Instagram), which carries our messages under its own privacy policy.
- The bank or payment app you use to pay me.
- The website hosting provider, which keeps server logs.
- My accountant, Irish Revenue or other authorities, only where the law requires it.
4. Transfers outside the EEA
Meta may process data outside the European Economic Area. Where it does, it relies on recognised safeguards such as the EU–US Data Privacy Framework or the European Commission's Standard Contractual Clauses.
5. Your rights
Under the GDPR you have the right to:
- access the personal data I hold about you
- have it corrected if it's wrong
- have it deleted
- restrict or object to how I use it
- get a copy in a portable format
- withdraw your consent at any time, where I rely on consent
To use any of these rights, send me an Instagram message to @cakedbyabbie (opens in a new tab). It's free, and I'll reply within one month.
6. Complaints
If you're unhappy with how I've handled your data, please tell me first so I can put it right. You can also complain to the Irish Data Protection Commission:
- Website: www.dataprotection.ie (opens in a new tab)
- Address: Data Protection Commission, 21 Fitzwilliam Square South, Dublin 2, D02 RD28, Ireland
7. Children
Orders should be placed by an adult. I don't knowingly collect personal data from anyone under 16.
8. Security
I keep your details in password-protected accounts with two-step verification turned on where available, and I delete them when I no longer need them.
9. Changes to this policy
If I change how I use personal data, I'll update this page and the “last updated” date above.