GDPR & Your Data

Your privacy rights

Cake Wonderland is based in County Sligo, Ireland. We respect your privacy and handle personal information in accordance with the General Data Protection Regulation (GDPR), the Data Protection Act 2018 and applicable Irish ePrivacy rules.

This page gives a plain-language summary of your European data protection rights. For full details about what we collect and why, please also read our Privacy Policy.

Who controls your information?

Cake Wonderland is the data controller for personal information collected through this store, our order forms and direct communications with you.

Contact: cakewonderland.tubbercurry@gmail.com
Postal address: 29 Cnoc Na Sí, County Sligo, F91 D5W6, Ireland

Why we use personal information

We only use personal information where we have a lawful reason to do so. This may include:

  • Contract: to process payments, prepare and fulfil orders, arrange collection or delivery, and respond to order questions.
  • Legal obligation: to maintain tax, accounting and transaction records, and to comply with lawful requests.
  • Legitimate interests: to operate, secure and improve our store, prevent fraud and provide customer service, provided those interests do not override your rights.
  • Consent: for optional marketing communications, non-essential cookies or other activities where consent is required. You may withdraw consent at any time.

Your GDPR rights

Depending on the circumstances, you may have the right to:

  • Ask whether we process your personal information and receive a copy of it.
  • Correct inaccurate or incomplete information.
  • Ask us to erase information that we no longer need, subject to legal and record-keeping requirements.
  • Restrict how we use your information in certain circumstances.
  • Object to processing based on legitimate interests and object at any time to direct marketing.
  • Receive certain information in a portable format or ask for it to be transferred where technically feasible.
  • Withdraw consent where consent is the legal basis for processing.
  • Ask for human review of a decision based solely on automated processing where applicable.

How to make a request

Email cakewonderland.tubbercurry@gmail.com with the subject line Data Protection Request. Tell us which right you wish to exercise and provide enough information for us to identify the relevant records. We may need to verify your identity before releasing or changing personal information.

We aim to respond without undue delay and normally within one month, although the GDPR allows extra time for complex or numerous requests.

Marketing choices

You can unsubscribe from promotional emails at any time using the unsubscribe link in the message or by contacting us. Unsubscribing from marketing does not prevent us from sending service messages about an order you have placed.

Cookies and similar technologies

Our store may use cookies and similar technologies needed for shopping-cart functions, checkout, security, analytics and selected integrations. Where required, non-essential cookies should only be used after you have made a choice through the store's cookie or privacy controls.

Service providers and international transfers

We use trusted service providers, including Shopify and payment, hosting, communication and delivery providers, to operate the store and fulfil orders. These providers process information only for relevant business purposes and under their own contractual and legal obligations.

Some providers may process information outside the European Economic Area. Where this occurs, appropriate safeguards may be used, such as an adequacy decision or approved contractual protections.

Complaints

Please contact us first so we can try to resolve any concern. You also have the right to lodge a complaint with Ireland's Data Protection Commission or, where applicable, another European supervisory authority.

Last updated: 23 July 2026