Handmade in Horley · Collection & local delivery · Biscuit tins posted across the UK

Your information

Privacy

We collect only the information needed to respond to enquiries and manage orders.

The Overflow Kitchen

Last updated: 6 November 2026

Information we collect

When you contact us or submit an order request, we may collect your name, email address, telephone number, postcode, delivery address (if delivery is requested), order details, requested dates, cake preferences and any information you choose to include in the notes field. Telephone numbers are optional; delivery details are requested only when relevant. Please tell us about ingredients to avoid rather than medical history.

How we use your information

We use this information only to respond to you, confirm availability and the final price, arrange payment, collection or delivery, manage your order, deal with questions or complaints, protect the website from misuse, and keep records where required by law.

Contract: We use information where necessary to take steps at your request before entering into a contract, such as preparing a quote, and to fulfil an agreed order.

Legal obligation: We retain information where needed to meet legal requirements, including accounting and tax record-keeping.

Legitimate interests: We use limited information where necessary for business administration and website security, taking account of your rights and interests.

How your order request is handled

Order requests are submitted securely through this website. Cloudflare processes the submission to check and protect the form before sending the order details to our protected business email account operated by Google.

We keep customer and order information in our business email account and an Excel spreadsheet to manage orders and maintain business records. We do not sell customer information.

Service providers and international processing

Cloudflare and Google provide the website, security and email services used to handle order requests. They process information on our behalf in accordance with their applicable privacy and data-protection arrangements. Their services may process information in the United Kingdom and other countries.

How long we keep it

Routine enquiry and order information held in our business email account and Excel spreadsheet will normally be kept for no longer than 12 months and then deleted when no longer needed. Information needed for accounting, tax or other legal record-keeping requirements may be retained for longer.

Security and cookies

We use Cloudflare Web Analytics to count visits and page views and understand how our website performs. It does not use cookies or local storage to track visitors.

We use appropriate measures such as encrypted connections, form validation, anti-spam checks and restricted access to our business email. This website does not use analytics, advertising or other non-essential cookies. Security services may process limited technical information, such as an IP address, to detect and prevent misuse.

Please do not enter payment-card or bank-account details in the order form.

Your data-protection rights

You may ask us for a copy of your personal information, or ask us to correct or delete it, subject to any legal record-keeping requirements. You may also object to or ask us to restrict certain uses of your information where applicable.

Contact us

For questions about your personal information, contact [email protected].

Questions or complaints

Please contact us if you have a concern about how we use your information. You also have the right to complain to the Information Commissioner’s Office (ICO). Visit ico.org.uk/make-a-complaint or telephone 0303 123 1113.