Privacy Policy
Last updated: 17/10/2026
Velvet Roots (“we”, “us”, “our”) is a small bakery based in Hampshire, England. We take your privacy seriously. This policy explains what personal information we collect when you order from us or visit our website, how we use it and what your rights are.
Who we are
Velvet Roots, operated by Velvet Roots Bakes. You can contact us at velvet.roots.bakes@outlook.com.
What we collect
Your name, delivery and billing address, email address and phone number when you place an order
Details of what you’ve ordered, and any notes you add (such as gift messages or allergy information)
Payment confirmation. We never see or store your full card details, as payments are handled securely by our payment provider.
Your email address if you sign up for updates
Basic website information, such as your device and how you use the site, through cookies and analytics
Messages you send us by email or Instagram
How we use it
To bake, pack, post or deliver your order and contact you about it
To process payments and keep records of our sales
To reply to your questions
To send you news about new boxes and drops, but only if you’ve agreed to this. You can unsubscribe at any time.
To improve our website and keep it secure
Our legal basis
We use your information to fulfil your order (contract), to meet legal and tax obligations, for our legitimate interests in running and improving our business, and, for marketing emails, because you’ve given us your consent.
Who we share it with
We only share what’s needed to run the shop:
Squarespace, which hosts our website and shop
Our payment providers who process payments
Royal Mail [or other courier], who need your name, address and contact details to deliver your order
We don’t sell your personal information to anyone.
Allergy and dietary information
If you tell us about an allergy or dietary requirement, we use it only to help you order safely. Please note that our kitchen handles gluten, among other allergens. See the allergen information on each product page.
How long we keep it
We keep order and payment records for up to 6 years, as required for tax and accounting purposes. Marketing details are kept until you unsubscribe. Other messages are kept for as long as needed to deal with your enquiry.
Cookies
Our website uses cookies to make the shop work (for example, remembering your basket) and to understand how people use the site. You can control cookies through your browser settings.
Your rights
Under UK data protection law you can ask us to:
Show you the information we hold about you
Correct anything that’s wrong
Delete your information, where we’re not legally required to keep it
Stop using your information for marketing
Restrict or object to how we use it
To do any of these, email velvet.roots.bakes@outlook.com. If you’re unhappy with how we’ve handled your information, you can complain to the Information Commissioner’s Office (ICO) at ico.org.uk.
Changes to this policy
We may update this policy from time to time. The latest version will always be on this page.