Privacy Policy
Last updated: 10 September 2026
Who we are
This website, theoldbakehousecs.co.uk, is managed by my mind matters (Merseyside CIC).
For the purposes of UK data protection law, my mind matters (Merseyside CIC) is responsible for the personal information collected and processed through this website.
If you have any questions about how we use your personal information, or wish to exercise any of your data protection rights, please contact us at:
Email: hello@theoldbakehousecs.co.uk
What information we collect
The information we collect depends on how you use the website.
If you contact us through a form on the website, we may collect information such as your name, email address, telephone number and the contents of your message, depending on the information requested by the particular form.
We may also collect limited technical information automatically when you visit the website, such as your IP address, browser type, device information and information relating to the operation and security of the website.
We only collect information that is reasonably necessary for the operation and management of the website and the services we provide.
How we use your information
We may use personal information to:
- respond to enquiries and requests;
- provide information about The Old Bakehouse and its activities;
- communicate with you where you have asked us to do so;
- operate and maintain the website;
- protect the website against spam, abuse and security threats;
- keep the website secure;
- meet our legal and regulatory obligations; and
- maintain appropriate records where necessary.
We will not use your personal information for purposes that are incompatible with those described in this Privacy Policy.
Our legal basis for using your information
Under UK data protection law, we must have a lawful basis for processing personal information.
Depending on the circumstances, we may process information because:
- you have given us your consent;
- it is necessary for us to respond to a request you have made;
- processing is necessary for us to comply with a legal obligation;
- processing is necessary for the legitimate interests of my mind matters (Merseyside CIC), provided those interests do not override your rights and freedoms; or
- another lawful basis applies under UK data protection law.
Where we rely on consent, you can withdraw that consent at any time.
Cookies
This website uses cookies and similar technologies.
We use CookieAdmin to manage cookie consent and preferences.
Some cookies are necessary for the website to function correctly and may be used without consent where permitted by law. Non-essential cookies will only be used where appropriate consent has been obtained.
We do not currently use Google Analytics or other analytics services to track or analyse visitors to this website.
You can also control or restrict cookies through your browser settings. Disabling certain cookies may affect how the website functions.
Forms
We use FormLayer to provide forms on this website.
When you submit information through a form, the information you provide is stored in our website’s WordPress database and may be used by us to respond to your enquiry or provide the service for which the form is provided.
The information stored will depend on the particular form and may include your name, email address, telephone number and the contents of your message.
FormLayer also records information associated with form submissions, including the page or source URL from which a submission was made.
Form submissions are accessible only to authorised website administrators and are retained only for as long as reasonably necessary for dealing with the enquiry and maintaining appropriate records.
Spam protection
Akismet Anti-spam is installed on this website to provide spam protection.
Akismet is provided by Automattic. At present, Akismet is not connected to the forms provided through FormLayer, and form submissions are therefore not sent to Akismet for spam checking.
Third-party services
We use a limited number of third-party services to provide specific functions on this website.
These currently include:
- CookieAdmin, for managing cookie consent; and
- FormLayer, for providing website forms.
Akismet is installed for spam protection but is not currently connected to FormLayer.
We do not currently use analytics services such as Google Analytics, or external FormLayer integrations such as Mailchimp, Google Sheets, Slack, Discord, Notion or Trello.
Third-party providers may process information in accordance with their own privacy policies where information is sent to them as part of the service they provide.
Who we share your information with
We do not sell or rent your personal information.
Information submitted through this website is normally accessed only by authorised persons responsible for managing The Old Bakehouse and responding to enquiries.
We may share personal information with service providers where this is necessary to operate the website, provide a service you have requested, or comply with a legal obligation.
We may also disclose personal information where we are legally required to do so or where disclosure is necessary to protect the rights, safety or security of the organisation, website or other individuals.
How long we keep your information
We keep personal information only for as long as it is reasonably necessary for the purpose for which it was collected, or for as long as we are required to retain it by law.
Information submitted through a website form will normally be retained for as long as reasonably necessary to deal with the enquiry and maintain appropriate records.
The appropriate retention period may vary depending on the nature of the information and the reason it was collected.
How we protect your information
We take reasonable technical and organisational measures to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.
However, no transmission of information over the internet or storage system can be guaranteed to be completely secure.
Your rights
Under UK data protection law, you may have rights including:
- the right to ask for access to the personal information we hold about you;
- the right to ask us to correct inaccurate or incomplete information;
- the right to ask us to erase your personal information in certain circumstances;
- the right to ask us to restrict how we process your information in certain circumstances;
- the right to object to certain types of processing, including processing based on legitimate interests; and
- the right to data portability in certain circumstances.
Where we rely on your consent to process your information, you have the right to withdraw that consent at any time.
These rights are not absolute and may be subject to legal exceptions.
To exercise any of these rights, please contact us at hello@theoldbakehousecs.co.uk.
Complaints
If you have concerns about how we have handled your personal information, please contact us first so that we have an opportunity to address your concerns.
You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s independent data protection regulator.
Information about making a complaint is available from the ICO.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to the website, the way we process personal information, or changes in applicable law.
The latest version will always be published on this page.