Privacy Policy
Last updated 14 October 2026
Who we are
Our Dough is a small home bakery in East Folkestone, Kent, run by Rosanna Barr as a sole trader. We decide how your personal information is used, which makes us the "data controller" under UK data protection law (the UK GDPR and the Data Protection Act 2018).
Contact us about anything in this policy:
- Email: rosannabarr1@mac.com
- Post: 8 Canterbury Road, Folkestone
- Instagram: @ourdoughfolkestone
What we collect
We only collect what we need to bake and hand over your order.
| Information | When we collect it |
|---|---|
| Name and email address | Every order |
| Delivery address | Delivery orders only |
| Delivery or collection date, items ordered, notes | Every order |
| How you chose to pay (cash or card) | Every order |
| Payment details | Card payments only, handled by Stripe. We never see your full card number |
| Messages you send us | If you email or message us on Instagram |
The order form is run by Tally, which may record basic technical information (such as your browser type and time of submission) to keep the form working and secure.
Allergies
We do not ask for allergy or health information, and we are unable to take allergy requests because everything is made in a home kitchen that handles a range of allergens. If you have an allergy, please contact us before ordering.
Please don't include health information in your order notes. If you tell us about an allergy anyway, we will use it only to respond to you about your order and delete it once the order is complete.
How and why we use it
The law requires a "lawful basis" for each use of your information. Ours are below.
| What we do | Information used | Lawful basis |
|---|---|---|
| Take, bake and deliver or hand over your order | Name, email, address, order details, notes | Contract: we need it to fulfil your order |
| Take payment | Name, email, order total (card payments via Stripe) | Contract |
| Contact you about your order, such as confirmations or changes | Name, email | Contract |
| Keep business and tax records | Order details and amounts | Legal obligation (HMRC record-keeping rules) |
| Deal with questions, complaints or problems with an order | Order history, messages | Legitimate interests: running the bakery properly |
We do not send marketing emails. If we ever want to, we will ask you first. We never sell your information, and we do not use it for automated decision-making or profiling.
Who we share it with
We use a few trusted services to run the bakery. Each only receives what it needs and is bound by its own data protection terms.
| Service | What it does for us |
|---|---|
| Tally | Runs our online order form and stores form submissions |
| Stripe | Processes card payments |
| Google (Sheets and Drive) | Stores our order records |
| Gmail (Google) | Sends and receives order emails |
| Netlify | Hosts our website |
| Instagram (Meta) | Only if you choose to message us there |
We may also share information if the law requires it, for example with HMRC. We do not share your information with anyone else.
Transfers outside the UK
Some of these services store or process information outside the UK, including in the EU and the United States. Where that happens, the transfer is protected by UK-approved safeguards, such as UK adequacy regulations or the standard contractual terms approved by the UK Information Commissioner.
How long we keep it
We keep order records, payment records and messages for 6 years, to meet HMRC record-keeping rules, then delete them. The only exception is any allergy or health information you send us, which we delete once your order is complete.
Tally and Stripe keep their own copies in line with their policies. You can ask us to delete anything we are not legally required to keep.
How we keep it safe
Only Rosanna Barr can access customer information. Our accounts are password-protected with 2-step verification, and card details are handled entirely by Stripe, so we never see or store them.
Your rights
You have the right to:
- see the information we hold about you
- have it corrected if it is wrong
- have it deleted, unless we must keep it by law
- restrict or object to how we use it
- receive a copy in a format you can take elsewhere
To use any of these rights, email rosannabarr1@mac.com. It is free, and we will reply within one month.
If you are unhappy with how we have handled your information, please tell us first so we can put it right. You can also complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint or on 0303 123 1113.
Changes to this policy
If we change how we use your information, we will update this page and the date at the top.
© Our Dough, East Folkestone