Privacy policy

This policy explains what DataBake ("we", "us") collects, why, and your rights. It was last updated on 28 August 2026.

Who we are

DataBake provides order, label and invoicing software for bakeries. For account data we are the data controller. For the order data a bakery loads into its account (its customers' names, contact details and orders), the bakery is the controller and we act as its processor.

What we collect

• Account data — your name, e-mail address and password (stored hashed) when you register, and your bakery's name.
• Tenant data — the orders, customers, recipes and connected-store credentials your bakery adds. Store credentials are stored encrypted.
• Support data — tickets you raise and their replies.
• Technical data — server logs (IP address, request path, time) kept for security and debugging.

Who processes it for us

• Hosting: DigitalOcean (droplet in the UK/EU region we operate).
• Outbound e-mail: IONOS.
• Bot protection: Cloudflare Turnstile on our login and registration forms.
• Payments (when subscriptions launch): Stripe. We never store card numbers.

How long we keep it

Account and tenant data are kept while the account is active and deleted on verified request or account closure. Backups rotate on a 14-day cycle. Server logs rotate automatically.

Cookies

Essential cookies (session and CSRF protection) are required for the site to function and are always set. Analytics cookies (Google Analytics, if enabled) are only set after you accept them in the consent banner — you can change your choice at any time from the banner's preferences.

Your rights

Under UK GDPR you can request access to, correction of, or deletion of your personal data, and you can complain to the ICO. Contact us at privacy@databake.daniel-scott.co.uk for any request.