Last Updated: 2025
Sutaree (“we”, “us”, “our”) is committed to protecting your privacy and ensuring that your personal data is handled responsibly. We comply with the UK GDPR, Data Protection Act 2018, and all applicable UK data protection laws.
Sutaree is a trading name of BAKEOLOGY BY Z&E LTD, a company registered in England and Wales.
We are the data controller responsible for your personal information under the UK GDPR.
If you have any questions about this policy, or about how your data is handled, please contact us using the details above.
2. Information We Collect
We may collect the following types of information:
Personal Information
• Full name
• Phone number
• Email address
• Shipping & billing address
Order & Transaction Information
• Purchase details
• Payment status
(All payments are processed securely by third-party payment providers such as Stripe or PayPal.)
Technical Data
• IP address
• Browser type
• Device information
• Cookies & website analytics
Social Media Interactions
If you contact us through Facebook, Instagram, or other social media channels, we may receive basic profile information and messages.
3. Legal Basis for Processing (UK GDPR Requirement)
We process your personal data under the following lawful bases:
• Contractual necessity – to fulfil and deliver your order
• Legitimate interests – fraud prevention, service improvement, and website analytics
• Consent – for marketing communications
• Legal obligation – for tax and accounting compliance
4. How We Use Your Information
Your information may be used for:
• Processing and fulfilling your orders
• Providing shipping and delivery updates
• Responding to customer enquiries
• Sending marketing emails (only if you have given consent)
• Improving our website and preventing fraud
5. Sharing Your Information
We may share your personal data with trusted third parties, including:
• Payment processors: Stripe, PayPal
• Delivery carriers: Royal Mail, Evri, DHL, etc.
• Website hosting and analytics tools (e.g., Google Analytics)
• Legal authorities if required by law
All third-party providers are required to respect the security of your personal data and process it only in accordance with our instructions.
We never sell your information.
6. International Data Transfers
If your data is transferred outside the UK, we ensure appropriate safeguards, including:
• Standard Contractual Clauses (SCCs), or
• Other UK-approved transfer mechanisms
7. Data Retention
• Order-related data: kept for 6 years (required by UK tax law)
• Marketing data: kept until you unsubscribe or withdraw consent
• Cookies: stored according to your browser preferences and our cookie policy
8. Your Rights Under UK GDPR
You have the right to:
• Access your personal data
• Correct inaccurate or incomplete information
• Request deletion of your data (“right to be forgotten”)
• Restrict processing
• Object to marketing communications
• Request data portability
To exercise these rights, please email us at contact@sutaree.co.uk.
We may need to verify your identity before processing your request.
9. Cookies
We use cookies to:
• Improve website performance and user experience
• Analyse traffic and usage patterns
• Personalise your shopping experience
When you visit our website, you will be asked to consent to the use of non-essential cookies in accordance with our Cookie Policy.
You can change or withdraw your cookie consent at any time from your browser settings.
10. Marketing Communications
We will only send marketing messages if you have given us your explicit consent.
You can withdraw this consent at any time by:
• Clicking “Unsubscribe” in any marketing email, or
• Contacting us directly at contact@sutaree.co.uk
11. Complaints
If you are not satisfied with how we handle your data, you can contact us first so we can try to resolve the issue.
If you are still unhappy, you have the right to lodge a complaint with the:
Information Commissioner’s Office (ICO)
Website: www.ico.org.uk
Helpline: 0303 123 1113
12. Updates to This Policy
We may update this privacy policy from time to time to reflect changes in our practices or legal requirements.
The updated version will always be posted on our website with the new “Last Updated” date.