Take the Biscuit


Privacy Policy

This Privacy Policy describes how your information is collected, used and shared when you visit or make a purchase from www.takethebiscuitshortbreadshapes.co.uk (the ‘Website') or when you contact us at Take the Biscuit (trading name of Rachel Kitchen and Tobias Showan).

Information we collect

When you make a purchase, or attempt to make a purchase, through our website we collect certain information from you, such as your name, email address, phone number, billing address, shipping address, payment information and the product you have chosen. This information is ‘order information' and is submitted by you when placing an order or if you sign up for marketing information.

We may also collect information such as your name and your contact details if you contact us via email with a query or for any other purpose that relates to Take the Biscuit and may involve us corresponding with you.

We automatically collect some information about you when you visit the website. This includes information about your web browser, IP address, time zone, frequency with which you access the website and the way in which you interact with it.

Why we need this information and how we use it

We use the order information that we collect from you in order to process and fulfil any orders you place through the website (including processing payments, arranging shipping and providing confirmation if required) and to provide customer support.

If you sign up for marketing communications or newsletters then we will also use your name and email address in order to send you this information.

Information that is automatically collected about your device may be used to help us screen for potential risk and fraud and to help us understand how to improve and optimise our site.

Sharing of Personal Information

We will share your order information with a third party payment provider (see below) who process payments made over the internet, to enable the processing of a user's order, payment and refund.

Our Online Store is hosted by Ecwid which allows our users to make purchases and submit data in a secure manner. Ecwid is always run using a secure HTTPS connection and is PCI DSS Level One Certified, which is the highest international standard for secure data exchanges for online stores and payment systems. All payments are processed using WePay using a secure protocol. Ecwid does not store your financial information.

Any third party providers used by us will only collect, use and disclose your information to the extent necessary to allow them to perform the services they provide to us and which allow us to fulfil the processing of your order and your receipt of it.

Any third party providers will have their own privacy policies and we direct you to their websites and policies in order for you to understand how they might use that data.

In addition, we may also share your information to comply with applicable laws and regulations, and if we have good reason to believe that it is necessary to: a) respond to legal process and to government requests; b) enforce our agreements, terms and policies; c) prevent, investigate and address fraud or other illegal activity; or d) protect the rights, property and safety of our customers or others.

We may store and process you information through third-party hosting services in the US and other jurisdictions. As a result, we may transfer your personal information to a jurisdiction with different data protection and government surveillance laws than your jurisdiction. If we are deemed to transfer information about you outside of the EU, we rely on Privacy Shield as the legal basis for the transfer as Google Cloud is Privacy Shield Certified.

Data Retention

When you place an order through our website we will maintain your order information for our records for the length of time necessary to fulfil your order. We may require to keep this information longer for legal and regulatory obligations. We will retain it as long as necessary for this purpose unless you ask us to delete it. If you want us to delete your information please contact us using the details below.

Links to other websites:

Our site, from time to time, may show links to other websites. We have no control over what these other websites show and are not responsible for the content of other sites. Our privacy policy does not extend to the use of these other websites and we suggest you refer to the privacy policies of other websites prior to using them.

Your rights

If you reside in certain territories, including the EU, you have a number of rights in relation to your personal information. You have the right to access the information we hold about you and to ask that this information be corrected, updated or deleted. If you would like to exercise these rights you should contact us using the contact details below.


We may update this privacy policy from time to time in order to reflect changes to our practices or for other operational, legal or regulatory reasons.

Contact Us

For purposes of EU Data Protection Laws, Rachel Kitchen and Tobias Showan (T/A Take the Biscuit) is the data controller of your personal information.

If you have questions or concerns, would like to exercise any of your rights as stated above or require any more information, please contact us by email or post using the address you will find on our Contact Us page. (You will need Javascript running on the page to display these addresses.)

This Privacy Policy was updated on 15th August 2018.