Legal Notices
These legal notices apply to the website lovely-loaves.co.uk (the “Website”). By accessing or using the Website, you acknowledge that you have read, understood and agree to be bound by these notices and the policies they reference.
Hosting and Edge Services
Infrastructure, content delivery and security services for the Website are provided by Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, United States.
Intellectual Property
The Website and all of its content and features (including without limitation text, recipes, graphics, photographs, logos, trade names, trademarks, design elements, audio and video content, and the selection and arrangement thereof) are protected by intellectual property and other laws. Unless expressly permitted by law, you must not reproduce, distribute, adapt, translate, publicly display, transmit, or otherwise use any content from the Website without prior written permission from the rights holder.
You may view the Website and print or download extracts for your personal, non‑commercial use only, provided you do not modify the content and you retain all proprietary notices. Any unauthorised use may infringe intellectual property rights and may result in civil and/or criminal liability.
Use of the Website
You agree not to misuse the Website, including by attempting to gain unauthorised access, introducing malware, scraping content, or interfering with its proper operation. You must not use the Website for unlawful purposes or in a manner that infringes the rights of others.
Liability
- Information accuracy: Content on the Website is provided for general information only. While reasonable efforts are made to keep the information accurate and up to date, no assurance or warranty (express or implied) is given as to its completeness, reliability, suitability, or accuracy. Any reliance you place on such information is strictly at your own risk.
- Availability and security: The Website may be suspended, withdrawn, or restricted at any time without notice. Reasonable measures are taken to keep the Website secure, but no method of transmission over the internet or electronic storage is completely secure.
- Third‑party content: The Website may reference third‑party services or content. Those are the responsibility of their respective providers. No endorsement or responsibility is accepted for third‑party content, products, or services.
- Losses: To the fullest extent permitted by law, liability is excluded for any indirect or consequential loss, loss of profits, loss of data, or business interruption arising from your use of the Website. Nothing in these notices excludes or limits liability for death or personal injury caused by negligence, fraud, or any other liability that cannot be excluded under applicable law.
Personal Data
Your privacy is important. This section explains how personal data is processed in connection with the Website in accordance with UK data protection law, including the UK GDPR and the Data Protection Act 2018.
Categories of personal data collected
- Identification and contact data you provide (for example, name and communication content when you submit a form or send a message).
- Order and transaction data (for example, products selected, delivery preferences, and payment confirmations from payment providers).
- Technical and usage data (for example, IP address, device and browser information, pages viewed, time zone, and interaction with site features), including data generated by security and performance tools.
- Cookie and similar technology data, as described in the Cookies section below.
Purposes and lawful bases
- Providing the Website and services, processing orders, customer service and communications: performance of a contract or steps taken at your request prior to entering into a contract.
- Security, fraud prevention, diagnostics, and ensuring the integrity and availability of the Website: legitimate interests in running a secure and reliable service.
- Compliance with legal and regulatory obligations (for example, tax and accounting obligations related to transactions): legal obligation.
- Analytics and audience measurement to improve the Website (using cookies or similar technologies): legitimate interests when strictly necessary and proportionate; otherwise based on your consent where required by law.
- Marketing communications (where applicable): consent. You can withdraw consent at any time.
Recipients and sharing
Personal data may be shared with carefully selected service providers acting on instructions, including hosting, content delivery and security providers (such as Cloudflare), IT support, analytics providers, and payment and delivery partners, solely for the purposes set out above and subject to appropriate contractual safeguards. Data may also be disclosed where required by law or to establish, exercise, or defend legal claims.
International transfers
Some service providers (including Cloudflare) may process data outside the United Kingdom. Where this occurs, appropriate safeguards are implemented, such as standard contractual clauses approved for use in the UK (with the UK Addendum as applicable), together with supplementary measures where necessary to ensure an essentially equivalent level of protection.
Retention
- Order and transaction records: retained for up to six years from the end of the relevant financial year to comply with legal and tax obligations.
- Account or communication records: retained for up to 24 months after the last interaction, unless a longer period is needed to resolve queries or disputes.
- Security and diagnostic logs: typically retained for up to 12 months, unless a longer period is required for incident investigation.
- Marketing preferences: retained until you withdraw consent or your preference expires under applicable rules.
- Cookies: retained in accordance with the durations stated in the Cookies section.
Your rights
Subject to conditions and exemptions under data protection law, you have the right to request access to your personal data, rectification, erasure, restriction, and portability, and to object to processing based on legitimate interests. Where processing is based on consent, you can withdraw your consent at any time. To exercise your rights, please contact us via the contact form available on the Website. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO), Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.
Cookies
The Website uses cookies and similar technologies to operate, secure and improve the service. Non‑essential cookies are used only with your consent in accordance with the Privacy and Electronic Communications Regulations (PECR). You can manage your preferences via your browser and, where presented, the cookie banner.
Types of cookies used
- Strictly necessary cookies: essential for the operation and security of the Website and to enable requested services (for example, page navigation, form submissions, checkout functionality, load balancing, bot management). These cannot be switched off via the Website.
- Functional cookies: enable enhanced functionality and personalisation (for example, remembering preferences).
- Performance and analytics cookies: help understand how visitors use the Website (for example, pages visited and interactions) to improve content and user experience. These are set only with your consent unless strictly necessary and proportionate.
- Advertising cookies: if used, these track browsing habits to deliver relevant advertising. These are set only with your consent.
Examples of cookies that may be set
- Cloudflare security and performance:
- __cf_bm (bot management; typically expires after 30 minutes)
- cf_clearance (verifies a user has passed a challenge; may persist for up to 1 year)
- __cfruid (rate limiting and traffic routing; session cookie)
- WordPress and related functionality:
- wordpress_test_cookie (checks cookie support; session cookie)
- wordpress_logged_in_* and wordpress_sec_* (authentication and session; session cookies)
- wp-settings-* and wp-settings-time-* (user interface preferences; typically 1 year)
- Commerce features (if enabled):
- woocommerce_cart_hash and woocommerce_items_in_cart (cart functionality; session cookies)
- wp_woocommerce_session_* (unique code to find cart data; typically 2 days)
The exact cookies in use can vary over time as the Website is updated or as services are enabled or disabled.
Managing cookies
- Consent: Non‑essential cookies are set only after you provide consent via the cookie banner. You can withdraw consent at any time. Withdrawing consent will not affect the lawfulness of processing based on consent before its withdrawal.
- Browser settings: You can block or delete cookies by adjusting your browser settings. Most browsers allow you to refuse all or some cookies and to delete existing cookies. If you block all cookies, some parts of the Website may not function properly.
- Revisiting choices: Clearing your cookies will cause the cookie banner to reappear so you can update your preferences.
Applicable Law and Jurisdiction
These legal notices and any dispute or claim arising out of or in connection with them or their subject matter are governed by the laws of England and Wales. The courts of England and Wales will have exclusive jurisdiction, without prejudice to any mandatory rights you may have as a consumer to bring proceedings in your local jurisdiction.
Changes to These Legal Notices
These legal notices may be updated from time to time to reflect changes in law, technology, or Website functionality. Material changes will apply prospectively from the date of publication on this page.
Last updated: 2 January 2026