Privacy Policy
Privacy Policy
Last updated: 17 June 2026
This Privacy Policy explains how Lothian Bakery (“we”, “us” or “our”) collects, uses and protects personal information when you use our website, place an order, contact us, or use any of our related services.
Our website is:
www.lothianbakery.co.uk
shop.lothianbakery.co.uk
If you have any questions about this policy, or if you would like to exercise your data protection rights, you can contact us at:
Lothian Bakery
3A Norwood Industrial Estate
29 Longridge Road
Whitburn
EH47 8HB
United Kingdom
Email: sales@lothianbakery.co.uk
1. What information we collect
We may collect personal information that you provide to us when you:
place an order;
create an account;
contact us by email, phone, website form, social media or message;
sign up for marketing;
request delivery;
make a payment;
take part in promotions or customer surveys.
This may include:
your name;
billing and delivery address;
email address;
telephone number;
order details;
delivery notes or safe-place instructions;
payment and transaction details;
account login details, where applicable;
any other information you choose to provide.
We may also collect technical information automatically when you use our website, including:
IP address;
browser and device information;
operating system;
pages viewed;
referring website;
approximate location;
date and time of visit;
cookie identifiers and similar online identifiers;
information about how you use our website.
2. Payment information
Payments are processed by third-party payment providers. We do not normally store full card details ourselves.
Our payment providers may include Stripe, PayPal, card payment providers, ShopWired payment integrations, or other secure payment processors used on our website.
Payment providers process your payment information in accordance with their own privacy policies and security standards.
3. How we use your information
We use your personal information to:
process and fulfil orders;
arrange local delivery or postal delivery;
manage customer accounts;
respond to enquiries;
provide customer service;
process payments and refunds;
keep records for tax, accounting and legal purposes;
prevent fraud and protect our business;
improve our website, products and services;
send service messages about your order;
send marketing communications, where you have agreed or where the law allows;
measure the effectiveness of our website and advertising.
We only use your information where we have a lawful basis to do so, including:
to perform a contract with you;
to comply with legal obligations;
where you have given consent;
where we have a legitimate business interest, provided your rights do not override that interest.
4. Marketing and advertising
We may use your information to send marketing emails or messages where you have consented, or where we are legally allowed to contact existing customers about similar products or services.
You can unsubscribe from marketing emails at any time by using the unsubscribe link in the email or by contacting us.
We may also use third-party advertising and analytics services, including Google Ads and Google Analytics, to understand how customers use our website, measure advertising performance, and show relevant adverts.
Where required, we will ask for your consent before using advertising cookies, analytics cookies, or personal data for personalised advertising.
5. Google Ads, Google Analytics and IP addresses
We use Google services, including Google Ads and Google Analytics, to help us measure website activity, understand how customers use our website, measure advertising performance, and improve our advertising.
Google may receive information such as:
your IP address;
device and browser information;
cookie identifiers;
pages visited;
actions taken on our website;
order or conversion events;
approximate location;
information about adverts you have interacted with.
Google may use IP addresses and similar information for measurement, security, fraud prevention, location estimation, advertising performance, and, where you have consented, advertising personalisation.
You can read more about how Google uses information from websites and apps that use Google services here:
How Google uses information from sites or apps that use Google services
You can also control some Google advertising settings through your Google account.
6. Cookies and similar technologies
Our website uses cookies and similar technologies such as pixels, tags and local storage.
Cookies may be used to:
make the website work properly;
remember items in your basket;
process orders;
improve website performance;
understand how visitors use the website;
measure advertising performance;
show relevant adverts, where you have consented.
Some cookies are necessary for the website to work and cannot be switched off. Other cookies, such as analytics and advertising cookies, will only be used where required consent has been given.
You can manage cookies through our cookie banner or through your browser settings. Blocking some cookies may affect how the website works.
7. Who we share information with
We may share personal information with trusted third parties where necessary to run our business and provide our services, including:
website and ecommerce providers;
payment processors;
delivery and postal providers;
IT and hosting providers;
email and marketing providers;
analytics and advertising providers, including Google;
accountants, bookkeepers and professional advisers;
HMRC, regulators, law enforcement or other authorities where legally required.
We do not sell your personal information.
8. Delivery and order information
If you place an order for local delivery or postal delivery, we use your delivery details, contact details and order information to fulfil your order.
Where necessary, information may be shared with delivery drivers, postal providers or couriers so that your order can be delivered.
If you provide safe-place instructions, these will be used only for delivery purposes.
9. How long we keep your information
We keep personal information only for as long as necessary for the purpose it was collected.
Order, payment, tax and accounting records may normally be kept for up to 6 years after the end of the relevant financial year, or longer if required by law.
Customer account information is kept while your account remains active, unless you ask us to delete it and we are legally able to do so.
Marketing information is kept until you unsubscribe or withdraw consent.
10. How we protect your information
We use reasonable technical and organisational measures to protect personal information from loss, misuse, unauthorised access, disclosure, alteration or destruction.
However, no internet transmission or online storage system is completely secure. You use our website at your own risk.
11. Children’s information
Our website and services are not intended for children under 13, and we do not knowingly collect personal information from children.
If you believe a child has provided us with personal information, please contact us and we will take appropriate steps to delete it.
12. Your data protection rights
Under UK data protection law, you may have the right to:
ask for a copy of the personal information we hold about you;
ask us to correct inaccurate information;
ask us to delete your information;
ask us to restrict how we use your information;
object to certain types of processing;
withdraw consent where we rely on consent;
request transfer of your information, where applicable.
These rights may be limited in some circumstances, for example where we need to keep information for legal, tax, accounting or fraud-prevention reasons.
To exercise your rights, contact us at:
You also have the right to complain to the UK Information Commissioner’s Office if you are unhappy with how we handle your personal information.
13. International transfers
Some of our service providers, including technology, analytics, advertising and payment providers, may process personal information outside the United Kingdom.
Where this happens, we rely on appropriate safeguards required by data protection law.
14. Changes to this policy
We may update this Privacy Policy from time to time to reflect changes in our business, website, legal obligations or the services we use.
The latest version will always be shown on our website with the updated date.
15. Contact us
If you have any questions about this Privacy Policy or how we handle your personal information, contact us at:
Lothian Bakery
3A Norwood Industrial Estate
29 Longridge Road
Whitburn
EH47 8HB
United Kingdom
Email: sales@lothianbakery.co.uk