Privacy Notice

Signature Cookies is a trading name of Alex Bingleton, sole trader. Alex Bingleton is responsible for the personal information used for Signature Cookies website enquiries and orders.

Business address:
12–13 Vyse Street
Birmingham
West Midlands
B18 6LE

Questions about this notice can be sent to hello@signaturecookies.co.uk or raised through the Signature Cookies WhatsApp number shown on this website.

This notice covers the Signature Cookies website and direct conversations. WhatsApp, Instagram, payment-link providers, banks and hosting or analytics providers also process information under their own notices.

Depending on your enquiry or order, this may include your contact details, WhatsApp conversation, occasion and design choices, personalised wording, delivery or collection information, allergy or intolerance information you choose to provide, payment status, and customer-service correspondence.

The website may also process technical security data, consent preferences, page/CTA interactions and campaign source. Analytics must not receive names, phone numbers, email addresses, postcodes, delivery addresses, personalisation wording, WhatsApp message bodies or payment data.

• To answer enquiries and take steps requested before a contract: contract.
• To confirm, make, deliver and support an order: contract.
• To maintain financial, food-safety and other required records: legal obligation.
• To protect the website, prevent misuse and improve essential operations: legitimate interests, balanced against your rights.
• To run optional analytics or marketing technologies: consent, where required.

We do not sell personal information. Marketing messages are not introduced by this Phase 4 website.

Only where necessary, information may be shared with hosting and IT providers, WhatsApp/Meta, delivery providers, payment-link or banking providers, professional advisers and public authorities where legally required. A delivery provider needs the delivery name, address and contact details, but does not need personalisation analytics.

Optional Google Analytics, Google Ads, Meta and TikTok technologies remain consent-gated; an absent provider ID makes no related network request.

Some technology providers may process information outside the UK. Before enabling each production provider, Signature Cookies must confirm the relevant contractual safeguards, adequacy arrangements or other lawful transfer mechanism and update this notice with provider-specific detail.

Information is kept only as long as reasonably needed for the purpose, including order fulfilment, customer service, food-safety traceability, accounting, legal claims and security. No fixed period is stated where it has not been operationally confirmed.

When information is no longer needed, it should be deleted or anonymised securely. Consent choices remain on the device until changed, cleared or the consent version is replaced.

Depending on the circumstances, you may ask for access, correction, deletion, restriction, portability or object to certain uses. Where processing relies on consent, you may withdraw it without affecting earlier lawful use. Rights are not absolute and lawful record-keeping may still apply.

You may complain to the Information Commissioner’s Office. The ICO complaints service explains the current process.

Access should be limited to people and providers who need the information. Production systems must use secure accounts, least-privilege access, protected secrets, maintained software and appropriate deletion and incident procedures.

Please do not send payment card details or unnecessary sensitive information through WhatsApp. Payment is completed using the agreed payment-link or bank-transfer process.

Optional analytics and marketing technologies are off until the relevant preference allows them. You can reject optional technologies or change your choice from “Privacy choices” in the footer. See the Cookie Policy.

If a new purpose or provider is introduced, this notice and the consent experience must be updated before that use begins. Current drafting follows the ICO’s right-to-be-informed guidance.