Privacy Policy

Last updated: 24 September 2026

Lavos Cakes is a small home bakery in Woking, Surrey. This page explains what personal information we collect when you get in touch, why we need it, and what we do with it. We have kept it short and plain, because you should be able to actually read it.

Who we are

Lavos Cakes is a bespoke cake business run by Nicolene Lavos, trading as Lavos Cakes, based in Woking, Surrey. For anything to do with your information, contact us at lavoscakes@gmail.com or +44 7788 158116. For data protection purposes, we are the “data controller” for the information described below.

What we collect

When you use the enquiry form, you give us your name, your email address, your phone number, the occasion, the date you need the cake, roughly how many people it needs to serve, whether you would like delivery or collection, what you tell us about the cake you have in mind, and any allergies or dietary requirements you tell us about.

When you contact us by WhatsApp, phone, email or Instagram, we hold whatever you send us in that message, along with your contact details.

When you visit this website, our website provider collects standard technical information such as your approximate location, browser and the pages you looked at. See our Cookie Policy for more on this.

We do not take payments through this website, so we never collect your card details here.

Allergies and dietary requirements

Information about allergies and health conditions is treated as a special category of personal data under UK data protection law, and it gets extra protection.

We ask for it because we bake in a home kitchen that handles nuts, dairy, eggs, wheat and other allergens, and we cannot safely quote for or make your cake without knowing. By telling us about an allergy or dietary requirement, you are giving us your explicit consent to record it and use it for that purpose.

We use it only to advise you honestly about what we can and cannot make safely, and to plan and bake your order. We do not share it with anyone else, and you can ask us to delete it at any time.

Why we use your information

We use it to reply to your enquiry and prepare a quote, which we do as steps taken at your request before entering into a contract. We use it to make and deliver your cake and stay in touch about your order, which we do to perform our contract with you. We keep records of orders and payments because we have a legal obligation to keep business and tax records. We hold allergy and dietary information on the basis of your explicit consent. And we keep the website working and secure as a legitimate interest in running the business.

We do not send marketing emails, and we do not sell, rent or trade your information to anyone. Ever.

How long we keep it

Enquiries that do not become orders are deleted after 12 months. Completed order records are kept for 6 years from the end of the tax year they fall in, because HMRC requires business records to be kept that long. Messages on WhatsApp and Instagram are kept while the conversation is relevant, then deleted.

Who else sees it

We use a small number of trusted providers to run the business. Squarespace hosts this website and stores enquiry form submissions. Google provides the email account we use to read and reply to enquiries.

These providers process your information on our instructions only. Both are based in the United States, so your information may be transferred outside the UK. Where that happens, it is protected by the safeguards required under UK data protection law, such as the International Data Transfer Agreement or an approved adequacy decision.

We will also share information if the law requires us to — for example, in response to a valid request from a public authority.

Your rights

Under UK data protection law you have the right to ask for a copy of the information we hold about you, to have it corrected if it is wrong, to have it deleted where we no longer need it, to object to or restrict how we use it, to withdraw your consent at any time where we rely on consent (such as for allergy information), and to ask for it in a portable format so you can take it elsewhere.

To do any of these, email lavoscakes@gmail.com. We will respond within one month, and it costs you nothing.

Complaints

If you are unhappy with how we have handled your information, please tell us first — we would much rather put it right ourselves.

You also have the right to complain to the Information Commissioner’s Office, the UK’s data protection regulator, at ico.org.uk or on 0303 123 1113. Their address is Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF.

Changes to this policy

If we change how we handle your information, we will update this page and change the date at the top.