Last updated: 5 November 2026
1. Who we are
This privacy notice is provided by Polish Bakery Mazowsze Ltd ("we", "us", "our"), a wholesale bakery registered in England and Wales. We are the data controller responsible for your personal data.
Our registered address is: Unit 4 Bloxwich Lane, Bloxwich Industrial Estate, Walsall, West Midlands, WS2 8DL
If you have any questions about this privacy notice or how we handle your personal data, please contact us at: office@mazowszebakery.co.uk
2. What data we collect
We may collect and process the following categories of personal data:
- Identity data: first name, last name, job title, company name
- Contact data: email address, telephone number, business address
- Account data: username, password (encrypted) and account preferences
- Transaction data: details of orders, invoices and payments
- Technical data: IP address, browser type and version, time zone setting, operating system and platform
- Usage data: information about how you use our website
- Communication data: records of correspondence via email, our contact form or telephone
We do not collect any special categories of personal data (such as details about your race, ethnicity, religious beliefs, health data or biometric data).
3. Legal basis for processing
Under the UK General Data Protection Regulation (UK GDPR), we rely on the following lawful bases to process your personal data:
- Contract: where processing is necessary for the performance of a contract with you or to take steps at your request before entering into a contract (e.g. processing trade account applications and orders).
- Legitimate interests: where processing is necessary for our legitimate business interests, provided those interests are not overridden by your rights (e.g. maintaining business relationships, improving our website and services).
- Legal obligation: where processing is necessary to comply with a legal obligation (e.g. maintaining financial records for HMRC, food safety record-keeping).
- Consent: where you have given us clear consent to process your personal data for a specific purpose (e.g. subscribing to marketing communications, or allowing analytics and marketing cookies on our website). You may withdraw consent at any time.
4. How we use your data
We use your personal data for the following purposes:
- To process and manage trade account applications and enquiries
- To fulfil orders, process payments and manage our commercial relationship with you
- To communicate with you about your orders, account or enquiries
- To comply with food safety and traceability regulations
- To maintain and improve our website, products and services
- To send marketing communications where you have opted in or where we have a legitimate interest to do so (you may opt out at any time)
- To comply with our legal and regulatory obligations
5. Data sharing
We may share your personal data with the following categories of recipients where necessary:
- Service providers: IT hosting, payment processing, delivery logistics and email service providers who act as data processors on our behalf
- Analytics and advertising partners: Google (Google Analytics) and Meta Platforms Ireland Limited (Meta Pixel), only if you have consented to analytics or marketing cookies. Meta acts as a joint controller with us for the collection of pixel data and as an independent controller for its subsequent use.
- Professional advisers: accountants, auditors and legal advisers
- Regulatory bodies: HMRC, local authority environmental health officers, food safety auditors and other regulatory authorities where required by law
We do not sell your personal data to third parties. We require all third parties to respect the security of your personal data and to treat it in accordance with the law.
International transfers
Google and Meta may process data in the United States. Where personal data is transferred outside the UK, we rely on the UK Extension to the EU–US Data Privacy Framework or the International Data Transfer Addendum approved by the ICO, so that your data remains protected to UK standards.
6. Data retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy any legal, accounting or reporting requirements.
- Trade account data: retained for the duration of the business relationship plus 6 years thereafter (to comply with HMRC requirements)
- Enquiry and contact form data: retained for up to 2 years from the date of your last communication
- Marketing preferences: retained until you withdraw consent or unsubscribe
- Website analytics data: retained for up to 14 months in Google Analytics
7. Your rights
Under the UK GDPR, you have the following rights in relation to your personal data:
- Right of access: You have the right to request a copy of the personal data we hold about you (commonly known as a "subject access request").
- Right to rectification: You have the right to request that we correct any personal data that is inaccurate or complete any data that is incomplete.
- Right to erasure: You have the right to request that we delete your personal data in certain circumstances (sometimes known as the "right to be forgotten").
- Right to restriction of processing: You have the right to request that we restrict the processing of your personal data in certain circumstances.
- Right to data portability: You have the right to request that we transfer your personal data to you or to a third party in a structured, commonly used, machine-readable format.
- Right to object: You have the right to object to the processing of your personal data where we are relying on legitimate interests as our lawful basis, or where we are processing your data for direct marketing purposes.
To exercise any of these rights, please contact us at office@mazowszebakery.co.uk. We will respond to your request within one month.
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection. You can contact the ICO at ico.org.uk or by telephone on 0303 123 1113.
8. Cookies
Our website uses essential cookies to work properly and, only with your consent, analytics and marketing cookies. You can change your choice at any time via cookie settings. For full details about the cookies we use, please refer to our cookie policy.
9. Contact details
If you have any questions about this privacy notice, wish to exercise your data rights or have a concern about how we handle your personal data, please contact us:
- Polish Bakery Mazowsze Ltd
- Unit 4 Bloxwich Lane, Bloxwich Industrial Estate, Walsall, West Midlands, WS2 8DL
- office@mazowszebakery.co.uk