Privacy policy

Who we are

Sofia Patisserie Limited (“we”, “us”) runs the Sofia Patisserie café and this website from 98 Cheetham Hill Road, Manchester M4 4EX. We are the controller of the personal information described here. You can contact us about your data at hello@sofiapatisserie.com or on 07915 021801.

What we collect

• Orders and event tickets: your name, email, mobile number, delivery address or collection details, what you order and any gift message or discount code.
• Table and afternoon tea bookings: your name, email, mobile number, the date, time and size of your booking, and anything you tell us in the notes.
• Custom orders: your email, WhatsApp number, the details of your order and, if you give it, your Instagram or TikTok handle.
• Allergies: if you tell us about allergies, this is health information. We use it only to prepare your food safely, and we rely on your explicit consent, which you give when you choose to share it with us.
• Contact messages, job applications and event sign-ups: your name, email and whatever you choose to tell us.
• Sofia Privé membership: your name, email, mobile number, how you heard about us, and the benefits you use each month.
• Stockist and concession applications: your business details, contact name, email and phone, product details, and the documents you upload, such as food hygiene certificates and insurance.
• Your account: your name and email. Your account, basket and preferences are saved in your own browser on this device.

How we use it and why

• To take, prepare, deliver and confirm your orders, bookings and tickets, and to arrange payment. This is necessary to carry out our contract with you.
• To reply to your messages and job applications, and to tell you about an event you registered for. This is in our legitimate interests in running our business.
• To keep the records the law requires, such as accounting and tax records. This is a legal obligation.
• To send you news and offers by email, only if you tick the box to say yes. You can unsubscribe at any time using the link in any email or by contacting us.

Who we share it with

We don’t sell your information. We share it only with the companies that help us run the website and deliver your order: our website host and form provider (Netlify), our email provider, our bank for payments, and the courier who delivers your order. Each of them may only use your information to provide their service to us. Our website loads its fonts from Google Fonts, which means your browser shares your IP address with Google.

How long we keep it

• Orders and payment records: six years, as required for tax.
• Bookings, custom order requests and messages: up to 12 months after your visit or our last reply.
• Job applications: six months, unless you join the team.
• Membership records: for as long as you’re a member, then six years for payment records.
• Stockist applications: 12 months if we don’t go ahead; for the length of the placement plus six years if we do.
• Marketing sign-ups and event interest: until you unsubscribe or ask us to remove you.

Cookies and browser storage

We don’t use advertising or tracking cookies. The site saves your basket, account and preferences in your browser’s local storage so they’re there when you come back. You can clear this at any time in your browser settings.

Our Instagram posts and TikTok videos on the home page only load if you choose to show them. When you do, Instagram (Meta) or TikTok may set their own cookies; see their privacy policies for how they use them.

Your rights

You have the right to ask for a copy of your information, to have it corrected or deleted, to object to or restrict how we use it, to withdraw your consent at any time, and to receive your information in a portable format. To use any of these rights, email hello@sofiapatisserie.com. We’ll reply within one month.

If you’re unhappy with how we’ve handled your information, please tell us first. You can also complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.