Privacy Policy

About us

Sponge Cakes Ltd is a company registered in England and Wales (“we” or “us” in this policy).

Overview

At Sponge we take your privacy and data security seriously. The following describes how we collect and process your personal data.

The data Sponge collects

We try to store only enough personal information to fulfil your order and to monitor the performance and health of our website.

This includes:

  • Your Name
  • Your Email address so we can send confirmation emails
  • A contact telephone number if we need to contact you about your order
  • Delivery details of the order (recipient’s name, address, delivery instructions)
  • Your order history and details of the items purchased
  • Any personalised messages or customisation related to your order
  • A hashed representation of your password (should you choose to create an account)
  • Any correspondence or communication with us.
  • Norfolk Passport number (if applicable)
  • Automated technologies or interactions. As you interact with our website, we may automatically collect technical data about your equipment, browsing actions and patterns. We collect this data by using cookies, server logs, website user tracking, session replay and other similar technologies.

Third Party Data Sharing

We share some essential items of your personal data with carefully selected service providers in order to process your order. Order particulars such as postcode may dictate which of these we will send your details to. Here is a breakdown of these essential providers, what personal data we share with them and why:

Postmark

What information we share: Email address, contents of emails.

Why: To be able to reliably send you order related email.

Privacy Policy: https://postmarkapp.com/eu-privacy

Royal Mail

What information we share: Recipient name, delivery address, email address, mobile phone number (if supplied)

Why: In order to fulfil your order and to send you delivery notifications.

Privacy Policy: https://www.royalmail.com/privacy-policy/

Fedex

What information we share: Recipient name, delivery address, email address, mobile phone number (if supplied)

Why: In order to fulfil your order and to send you delivery notifications.

Privacy Policy: https://www.fedex.com/en-gb/privacy-policy.html

DHL Parcel (formerly UKMail)

What information we share: Recipient name, delivery address, email address, mobile phone number (if supplied)

Why: In order to fulfil your order and to send you delivery notifications.

Privacy Policy: https://send.dhlparcel.co.uk/parcel-delivery/privacy-polic

Cookies

Our website uses cookies to collect information. Cookies are small data files stored on your device in order to ‘remember’ you. We use cookies primarily to hold a reference to your ‘shopping basket’ as you move around the site, but also to enable you to log in to your account. Our website relies on the use of cookies in order to facilitate a purchase.

Some of our third party partners may also use cookies for the delivery of their service, specific information on which is as follows:

Google Analytics

We use a third party service, Google Analytics, to log information and details of visitor behaviour. We do this to try and improve the website for our visitors and monitor the performance of our site. You can view Google Analytics’ privacy policy here: https://www.google.com/analytics/terms/gb.html.

Google Analytics may also use cookies for the delivery of its service, details of which are available here: https://developers.google.com/analytics/devguides/collection/analyticsjs/cookie-usage

You can revoke your consent for collection of this data by clicking here. If you clear your cookies you may need to re-enable this opt-out.

For further privacy protection, we also enable IP anonymisation. For more information about this visit the following link: https://support.google.com/analytics/answer/2763052?hl=en.

Google Adwords / Doubleclick

We use a third party service, Google Adwords, to log information and details of the performance of our Google search and shopping advertisements.

You can view Google Adwords’ privacy policy here: https://policies.google.com/technologies/ads?hl=en-GB.

Bing / Microsoft

We use a third party service, Bing, to log information and details of the performance of our Microsoft / Bing search and shopping advertisements.

You can view Bings privacy policy here: https://about.ads.microsoft.com/en-gb/policies/legal-privacy-and-security.

Facebook Pixel

We use a third party service, Facebook Pixel, to help us measure the effectiveness of our Facebook advertising. Facebook’s privacy policy is available here: https://www.facebook.com/about/privacy/.

If you wish to revoke your consent for this tracking you can visit the following link: https://www.facebook.com/ads/settings.

Mailchimp

We use a third party service, Mailchimp, to deliver our email newsletter and learn about our customer purchasing behaviour. We then use this information to send marketing emails. Mailchimp collects statistics around opening of email and link clicks to enable us to monitor and improve our email marketing. This is opt-in and only applies if you have joined our email mailing list.

Mailchimp’s privacy policy is available here: https://mailchimp.com/legal/privacy/.

If opted-in to our mailing list we will share your name, email address, order information (products purchased, discounts used, time and date information, and aggregated information based on your order history, eg Favourite Product, Dietary preference) with Mailchimp.

You can opt out of our email marketing and this data sharing at any time using the unsubscribe link at the bottom of all messages or by getting in contact with us here.

Klaviyo

We use a third party service, Klaviyo, to deliver our digital marketing and learn about our customer purchasing behaviour and preferences. We then use this information to send marketing materials. Klaviyo collects statistics around opening of email, link clicks, site browsing behaviour and product purchase history to enable us to monitor and improve our digital marketing.

Klaviyo’s privacy policy is available here: https://www.klaviyo.com/legal.

You can opt out of our email marketing and this data sharing at any time using the unsubscribe link at the bottom of all messages or by getting in contact with us here.

Access to your personal information

You are entitled to view, amend or delete the personal information that we hold. Please contact us here in order to make a request.

This policy was last updated 17/06/2024