Privacy notice
How Ovenlark collects and uses information when you visit this website, send us a form, or order from us. Last updated 2 November 2026.
Who we are
This website is run by Ovenlark, an independent bakery at Unit 3, Tinsmith Yard, Kelham Island, Sheffield S3 8RW. We are the controller for the personal information described here. You can contact us about privacy at privacy@ovenlark.co.uk or by post at the address above.
What we collect when you visit the site
Server logs. Like most websites, our web server keeps a log of every request it receives. Each entry includes your IP address, the date and time, the page or file requested, the address of the page that linked to it (if any), and the browser details your device sends (the user agent). We use these logs to keep the site running, to understand how it is used, and to spot misuse.
A first-party cookie. We set one small cookie of our own so we can tell visits from the same browser apart. It contains a random identifier, not your name or e-mail address, and it is not shared with advertising networks.
First-party analytics. Our pages include a short analytics script served from our own website. It records things like which pages you view, how long you stay and roughly how you move around the site, and sends that back to our own server. We do not use third-party analytics, advertising pixels or social media trackers.
What we collect when you use a form
When you send a collection order, a vending enquiry, a quote request or a message through our contact form, we store everything you enter in the form, together with the time it was sent and the technical details listed above. We use it to reply to you, to prepare and confirm your order, and to keep a record of what was agreed.
If you tick the box to receive our e-mail newsletter, we also keep your e-mail address on our mailing list until you unsubscribe. Every newsletter has an unsubscribe link.
Our lawful bases
- Contract, when we handle your order or a vending or catering agreement.
- Legitimate interests, for server logs, analytics, site security and replying to enquiries.
- Consent, for our newsletter. You can withdraw it at any time.
- Legal obligation, for business and tax records we must keep.
How long we keep it
Server logs and analytics data are kept for up to 13 months. Form submissions and order records are kept for up to six years for accounting purposes, or for two years if the enquiry did not lead to an order. Unsuccessful job applications are deleted after six months.
Who we share it with
We don’t sell your information. We share it only with the companies that help us run the business, such as our website host, e-mail provider, accounting software and, for posted gift orders, the courier who needs the delivery address. They may only use it to provide their service to us.
Payments
We never take card details through this website. Payments in the shop and at our vending machines are handled by our card terminal provider, and we only see a partial card number and the amount.
Your rights
Under UK data protection law you can ask for a copy of the information we hold about you, ask us to correct or delete it, object to how we use it, or ask us to restrict it. E-mail privacy@ovenlark.co.uk and we’ll respond within one month. If you’re unhappy with how we’ve handled your information, you can complain to the Information Commissioner’s Office.
Changes
If we change this notice we’ll update the date at the top of the page.