Privacy Policy

1. Introduction

Baker's Dozen ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website bakersdozen.digital and use our services.

2. Information We Collect

2.1 Personal Information

We may collect personal information that you voluntarily provide to us when you:

• Fill out our contact form
• Book a consultation via Calendly
• Subscribe to our newsletter
• Purchase our services
• Communicate with us via email

This information may include:

• Name
• Email address
• Phone number
• Company name
• Payment information (processed securely through Stripe)
• Any other information you choose to provide

2.2 Automatically Collected Information

When you visit our website, we automatically collect certain information about your device and browsing activity, including:

• IP address
• Browser type and version
• Operating system
• Pages visited and time spent on pages
• Referring website
• Device information

2.3 Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience on our website. For detailed information about our use of cookies, please see our Cookie Policy.

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain our services
• Process your transactions and manage your orders
• Send you booking confirmations and updates
• Respond to your inquiries and provide customer support
• Send you marketing communications (with your consent)
• Improve our website and services
• Analyze website usage and trends
• Detect and prevent fraud and security threats
• Comply with legal obligations

4. Legal Basis for Processing (GDPR)

If you are from the European Economic Area (EEA) or UK, our legal basis for collecting and using your personal information depends on the data concerned and the context in which we collect it:

• Contract: Processing is necessary to perform a contract with you (e.g., providing services you've purchased)
• Consent: You have given us explicit consent to process your information (e.g., marketing emails)
• Legitimate interests: Processing is necessary for our legitimate business interests (e.g., improving our services, fraud prevention)
• Legal obligation: Processing is necessary to comply with the law

5. How We Share Your Information

We may share your information with:

5.1 Service Providers

We work with third-party service providers who help us operate our business:

• Stripe: Payment processing
• Calendly: Appointment scheduling
• Resend: Email delivery
• Supabase: Database hosting
• Netlify: Website hosting
• Google Analytics: Website analytics
• Google Tag Manager: Tag management
• Meta (Facebook): Advertising and analytics
• TikTok: Advertising and analytics

5.2 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency).

5.3 Business Transfers

If we are involved in a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction.

6. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. When we no longer need your information, we will securely delete or anonymize it.

7. Your Data Protection Rights (GDPR & UK GDPR)

If you are a resident of the EEA or UK, you have the following rights:

• Right to access: You can request copies of your personal data
• Right to rectification: You can request that we correct inaccurate or incomplete data
• Right to erasure: You can request that we delete your personal data
• Right to restrict processing: You can request that we restrict the processing of your data
• Right to data portability: You can request a copy of your data in a structured, machine-readable format
• Right to object: You can object to our processing of your personal data
• Right to withdraw consent: You can withdraw your consent at any time where we relied on consent to process your data

To exercise any of these rights, please contact us at hello@bakersdozen.digital. We will respond to your request within 30 days.

8. International Data Transfers

Your information may be transferred to and maintained on computers located outside of your country where data protection laws may differ. We ensure that appropriate safeguards are in place to protect your information in accordance with this Privacy Policy and applicable law.

9. Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

10. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18, we will take steps to delete that information.

11. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of these external sites. We encourage you to review the privacy policies of any third-party sites you visit.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes.

13. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

Baker's Dozen
Third Floor
207 Regent Street
London W1B 3HH
United Kingdom

Email: hello@bakersdozen.digital

14. Supervisory Authority

If you are located in the EEA or UK and believe we have not adequately addressed your concerns, you have the right to lodge a complaint with your local data protection supervisory authority. In the UK, this is the Information Commissioner's Office (ICO): ico.org.uk