Privacy & Cookies Policy
Last updated: [CONFIRM date]. This policy explains how we collect and use personal data when you visit our website, sign up to hear from us, or deal with us as a trade customer.
1. Who we are
Mini Pie Co Ltd (company number 17312987, registered office Unit G Colindale Business Park, Carlisle Road, London, England, NW9 0HN is the "controller" of your personal data. If you have any questions or wish to exercise your rights, contact us at hello@minipieco.co.uk.
2. What this policy covers
This policy covers our website (minipieco.co.uk), people who sign up to our mailing list, and our business/trade customers and enquirers. We do not knowingly collect data from children.
3. The personal data we collect
Depending on how you interact with us, we may collect:
- Contact details — name, business name, email address, and where provided, phone number and delivery/billing address.
- Mailing list data — your email address and, if given, your name, together with engagement data (such as whether you open our emails), collected through our email platform, Klaviyo.
- Trade account and order data — orders placed by phone or email, correspondence, and transaction and payment records.
- Website and technical data — IP address, device and browser information, and usage data collected via cookies and similar technologies (see section 8).
4. How and why we use your data
We use personal data for the following purposes, relying on the lawful bases under UK GDPR shown in brackets:
- To respond to enquiries and provide quotes (legitimate interests; and steps to enter into a contract).
- To take, process, deliver and administer wholesale orders (performance of a contract).
- To send you marketing emails about our products and news, where you have signed up or are an existing customer and have not opted out (consent, or legitimate interests / the “soft opt-in” for existing customers).
- To understand and improve our website and marketing (consent for non-essential cookies; otherwise legitimate interests).
- To keep accounting and business records and comply with our legal obligations (legal obligation).
- To protect our rights and manage disputes (legitimate interests).
5. Marketing and your choices
You can unsubscribe from our marketing at any time using the link in any email, or by contacting hello@minipieco.co.uk. Withdrawing consent does not affect processing carried out before you withdrew it.
6. Who we share data with
We do not sell your personal data. We share it only with:
- Service providers acting on our behalf (“processors”), including our email platform (Klaviyo), our website host, our delivery partners (such as Royal Mail and pallet carriers) where needed to deliver orders, and our payment and accounting providers.
- Professional advisers, and authorities or regulators where we are legally required to disclose.
- A buyer or successor if we sell or reorganise our business.
7. International transfers
Some of our providers (for example Klaviyo) are based outside the UK, including in the United States. Where personal data is transferred outside the UK, we rely on appropriate safeguards such as the UK’s international data transfer agreement or addendum, or an approved data-transfer mechanism such as the UK Extension to the EU–US Data Privacy Framework where the provider is certified.
8. Cookies
Our website uses cookies and similar technologies. These include:
- Essential cookies, needed for the site to work.
- Analytics cookies, which help us understand how the site is used.
- Marketing cookies, including those set by Klaviyo and any advertising tools we use.
We only set non-essential (analytics and marketing) cookies with your consent, which we collect through our cookie banner, and you can change your choices at any time
9. How long we keep data
We keep personal data only as long as necessary: mailing-list data until you unsubscribe or ask us to remove you; enquiry correspondence for a reasonable period; and order, transaction and accounting records for as long as required for tax and legal purposes (generally at least six years).
10. Your rights
Under UK data protection law you have the right to access your data; to have it corrected or erased; to restrict or object to processing; to data portability; and to withdraw consent. To exercise any of these, email hello@minipieco.co.uk. You also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk.
11. Security
We take appropriate technical and organisational measures to protect personal data against loss, misuse and unauthorised access, and we require our processors to do the same.
12. Changes to this policy
We may update this policy from time to time. The latest version will always be available on our website, with the “last updated” date shown above.