1. Who We Are
Miky Tiramisù is a trading name of Mi-Cakes Ltd, a Private Limited Company registered in England and Wales (Company Number: 12054040), with registered office at 80b Elliscombe Road, London, England, SE7 7PY.
For any privacy-related enquiries, please contact us at: miky_tiramisu@outlook.com

 2. What Personal Data We Collect
When you place an order or contact us, we may collect the following personal data:
• Full name
• Email address
• Phone number
• Delivery address
• Allergy and dietary information (where provided)
• Order details and payment confirmation records
We may also collect technical data such as IP address, browser type and cookies when you visit our website. Where tracking tools such as Google Analytics are in use, this will be disclosed in our Cookie Policy on the website.

3. How We Use Your Personal Data
We use your personal data for the following purposes:
• To process and fulfil your order
• To contact you regarding your order, including confirmation and payment
• To manage allergen and dietary requirements to ensure food safety
• To comply with legal obligations under UK food safety law
• To send you marketing communications about our products and promotions, where you have consented to receive them.

4. Legal Basis for Processing
Under UK GDPR, we process your personal data on the following legal bases:
• Contract: processing necessary to fulfil your order
• Legal obligation: food allergen records required by UK food safety law
• Legitimate interests: maintaining order records and improving our service
• Consent: sending marketing emails, which you may withdraw at any time

5. How We Store Your Data
Your order data is stored securely via Microsoft Forms and Microsoft Outlook, and may be transferred to a spreadsheet (Microsoft Excel or Zoho) for order management purposes. All platforms used comply with UK GDPR requirements.
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, and in any case for no longer than 2 years from the date of your last order, unless required by law to retain it for longer.

6. Marketing Communications
If you have consented to receive marketing communications, we may send you updates about new products, seasonal offerings, promotions and order windows via email. You may unsubscribe at any time by contacting us at miky_tiramisu@outlook.com or by clicking the unsubscribe link in any marketing email.

7. Sharing Your Personal Data
We do not sell your personal data. We may share your data with:
• Payment processors (SumUp) solely for the purpose of processing payment for your order
• Regulatory authorities if required by law

8. Your Rights Under UK GDPR
You have the following rights regarding your personal data:
• Right of access: to request a copy of the personal data we hold about you
• Right to rectification: to request correction of inaccurate data
• Right to erasure: to request deletion of your data, subject to legal obligations
• Right to object: to object to processing based on legitimate interests or for direct marketing
• Right to withdraw consent: at any time, for processing based on consent
• Right to complain: to the Information Commissioner’s Office (ICO) at ico.org.uk
To exercise any of these rights, please contact us at miky_tiramisu@outlook.com.