Shop Oven-fresh Bread Coming soon!

Privacy Policy for Crust Bakery Aberdeen Limited


This Privacy Policy explains how **Crust Bakery Aberdeen Limited** (“we,” “us,” “our”) collects, uses, discloses, and protects your personal information in accordance with the **UK Data Protection Act 2018** and the **General Data Protection Regulation (GDPR)**. By visiting our website or using our services, you agree to the practices described in this policy.


1. Data Controller Information

  • Business Name: Crust Bakery Aberdeen Limited
  • Address: 242 North Deeside Road, Peterculter, Aberdeen, AB14 0UQ
  • Company Registration Number: SC791517
  • Contact: info@crustaberdeen.co.uk

2. Information We Collect

We collect and process personal data that is necessary for the operation of our business and provision of services. The types of data we may collect include:


  • - Personal Identification Data: Name, address, email address, phone number.
  • - Payment Data: Payment card details (processed securely by third-party payment providers).
  • - Order and Purchase Data: Details about orders you have placed, and items purchased.
  • - Communication Data: Messages, queries, or feedback provided through our website, email, or in-store communication.
  • - Website Data: IP addresses, browser types, time zone settings, location data, and other similar information collected via cookies.

3. How We Use Your Information

  • - Provision of Services: To fulfil your bakery orders, process payments, and deliver products.
  • - Customer Support: To respond to your enquiries, complaints, or requests for information.
  • - Marketing: To send you promotional material about our products, offers, and events (with your consent).
  • - Website Improvement: To improve our website's performance and tailor the user experience.
  • - Legal Obligations: To comply with any applicable legal and regulatory obligations.

4. Legal Bases for Processing

We process your personal data in compliance with UK data protection laws, relying on the following legal bases:


  • - Contractual Necessity: Processing is necessary to enter into or fulfil a contract, such as processing your order or payment.
  • - Legitimate Interests: To run and improve our bakery, enhance customer service, or protect our business (e.g., fraud prevention).
  • - Consent: For marketing communications, we will rely on your consent. You can withdraw consent at any time.
  • - Legal Obligation: To comply with applicable laws, such as tax, employment, and consumer protection regulations.

5. How We Share Your Information

We may share your personal information with third parties in the following situations:


  • - Service Providers: We use third-party providers (e.g., payment processors, delivery companies) to assist with business operations. These providers only process data on our behalf and in accordance with our instructions.
  • - Legal and Regulatory Requirements: We may disclose your personal information to governmental bodies or law enforcement if required by law.
  • - Business Transfers: In the event of a merger, sale, or reorganisation of our business, your data may be transferred as part of the transaction, subject to confidentiality requirements.

  • "We will not sell your personal data to third parties."

6. Data Retention

We will only retain your personal data for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, or reporting requirements. The retention periods are as follows:


  • - Order Information: Retained for up to 7 years for tax and financial record-keeping.
  • - Marketing Data: Retained until you opt out or withdraw your consent.
  • - Website Data: Retained for a maximum of 26 months for analytics purposes.

7. Your Rights

Under UK data protection laws, you have the following rights regarding your personal information:


  • - Access: Request a copy of the personal data we hold about you.
  • - Rectification: Request corrections to any inaccurate or incomplete data.
  • - Erasure: Request that we delete your data when there is no valid reason to retain it.
  • - Restriction: Request the limitation of processing your personal data.
  • - Portability: Receive your personal data in a structured, machine-readable format for transmission to another controller.
  • - Objection: Object to the processing of your data based on legitimate interests or for direct marketing purposes.
  • - Withdraw Consent: Where processing is based on consent, you may withdraw consent at any time.

To exercise any of these rights, please contact us using the details provided in section 1. We will respond to your requests within one month.



8. Data Security

We implement appropriate technical and organisational measures to protect your personal data from unauthorised access, alteration, disclosure, or destruction. These measures include secure servers, encryption of payment data, and restricted access to personal data.


However, no method of transmission over the internet or electronic storage is completely secure. While we strive to protect your personal information, we cannot guarantee its absolute security.


9. International Transfers

We do not transfer your personal data outside the UK or European Economic Area (EEA). If this changes, we will ensure that any such transfers comply with applicable data protection laws and that your data is protected by appropriate safeguards.


10. International Transfers

We use cookies and similar tracking technologies to enhance your experience on our website, including:


  • - Essential Cookies: Necessary for the website to function properly.
  • - Analytics Cookies: Help us understand how you use our website and improve its performance.
  • - Marketing Cookies: Used to deliver relevant ads and measure the effectiveness of marketing campaigns.

You can manage or disable cookies through your browser settings. However, disabling cookies may affect your ability to use certain features of our website.


11. Marketing Communications

With your consent, we may send you marketing communications about our products, services, or events. You can opt out of receiving such communications at any time by following the unsubscribe link in the email or contacting us directly.


12. Changes to This Policy

We reserve the right to update this privacy policy at any time. Any changes will be posted on our website, and, where appropriate, notified to you by email. We encourage you to review this policy regularly to stay informed about how we protect your personal data.


13. Contact us

If you have any questions or concerns about this Privacy Policy or your personal data, please contact us at:


Alternatively, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at www.ico.org.uk if you believe that your data protection rights have been violated.



This Privacy Policy is effective as of 25/09/2024


14. Ownership of Photos and Media

Any photos or media displayed on our website, including images of our bakery, products, and events, are the exclusive property of Crust Bakery Aberdeen Limited. These images may not be used, copied, distributed, or reproduced in any form without our explicit written consent.


Customer-Provided Photos


If you submit any photos, reviews, or other content that feature our products or premises (e.g., through social media, email, or direct uploads), you grant us a non-exclusive, royalty-free, worldwide license to use, modify, and display these materials on our website, social media platforms, and promotional materials. We will always give appropriate credit when using customer-provided content, if applicable.


If you wish to revoke this permission for any reason, you can contact us at the details provided in section 13. We will remove the media from our platforms within a reasonable timeframe.


This clause ensures that your ownership rights are protected and outlines how customer-submitted content may be used, while allowing users to request removal if necessary.