Order by 2pm for same day dispatch
Shopping Basket

Privacy Policy

About us

Sponge Cakes Ltd is a company registered in England and Wales (“we” or “us” in this policy).


At Sponge we take your privacy and data security seriously. The following describes how we collect and process your personal data.

The data we collect

We try to store only enough personal information to fulfil your order and to monitor the performance and health of our website.

This includes:

  • Your Name
  • Your Email address so we can send confirmation emails
  • A contact telephone number if we need to contact you about your order
  • Delivery details of the order (recipient’s name, address, delivery instructions)
  • Your order history and details of the items purchased
  • Any personalised messages or customisation related to your order
  • A hashed representation of your password (should you choose to create an account)
  • Any correspondence or communication with us.
  • Norfolk Passport number (if applicable)
  • Automated technologies or interactions. As you interact with our website, we may automatically collect Technical Data about your equipment, browsing actions and patterns. We collect this personal data by using cookies, server logs, website user tracking, session replay and other similar technologies.


Our website uses cookies to collect information. Cookies are small data files stored on your device in order to ‘remember’ you. We use cookies primarily to hold a reference to your ‘shopping basket’ as you move around the site, but also to enable you to log in to your account. Our website relies on the use of cookies in order to facilitate a purchase.

Google Analytics (more information below) also uses cookies for the delivery of its service. Details on their use of cookies is available here: https://developers.google.com/analytics/devguides/collection/analyticsjs/cookie-usage

Stripe, one of our payment processors, may also set cookies. Details on their use of cookies is available here: https://stripe.com/cookies-policy/legal.

Google Analytics

We use a third party service, Google Analytics, to log information and details of visitor behaviour. We do this to try and improve the website for our visitors and monitor the performance of our site. You can view Google Analytics’ privacy policy here: https://www.google.com/analytics/terms/gb.html.

You can revoke your consent for collection of this data by clicking here. If you clear your cookies you may need to re-enable this opt-out.

For further privacy protection, we also enable IP anonymisation. For more information about this visit the following link: https://support.google.com/analytics/answer/2763052?hl=en.

Google Adwords

We use a third party service, Google Adwords, to log information and details of the performance of our Google search and shopping advertisements.

You can view Google Adwords’ privacy policy here: https://policies.google.com/technologies/ads?hl=en-GB.


We occasionly use a third party service, Hotjar, to monitor how aspects of our site perform.

You can view Hotjar’s privacy policy here: https://www.hotjar.com/legal/policies/privacy and https://www.hotjar.com/privacy.

Facebook Pixel

We use a third party service, Facebook Pixel, to help us measure the effectiveness of our Facebook advertising. Facebook’s privacy policy is available here: https://www.facebook.com/about/privacy/.

If you wish to revoke your consent for this tracking you can visit the following link: https://www.facebook.com/ads/settings.

Email Marketing & Customer Relationship Management

We use a third party service, Mailchimp, to deliver our email newsletter and learn about our customer purchasing behaviour. We then use this information to send marketing emails. Mailchimp collects statistics around opening of email and link clicks to enable us to monitor and improve our email marketing. This is opt-in and only applies if you have joined our email mailing list.

Mailchimp’s privacy policy is available here: https://mailchimp.com/legal/privacy/.

If opted-in to our mailing list we will share your name, email address, order information (products purchased, discounts
used, time and date information, and aggregated information based on your order history, eg Favourite Product, Dietary preference) with Mailchimp.

You can opt out of our email marketing and this data sharing at any time using the unsubscribe link at the bottom of all messages or by getting in contact with us here.

Service Providers

We share only essential items of your personal data with carefully selected service providers in order to process your order. Order particulars will dictate which of these we will send your details to or not. Here is a breakdown of our providers, what personal data we share with them and why:


What information we share: Email address, contents of emails.

Why: To be able to reliably send you order related email.

Privacy Policy: https://sendgrid.com/policies/privacy/services-privacy-policy/

Royal Mail

What information we share: Recipient name, delivery address, email address, mobile phone number (if supplied)

Why: In order to fulfil your order and to send you delivery notifications.

Privacy Policy: https://www.royalmail.com/privacy-policy/

DHL Parcel (formerly UKMail)

What information we share: Recipient name, delivery address, email address, mobile phone number (if supplied)

Why: In order to fulfil your order and to send you delivery notifications.

Privacy Policy: https://send.dhlparcel.co.uk/parcel-delivery/privacy-policy

Access to your personal information

You are entitled to view, amend or delete the personal information that we hold. Please contact us here in order to make a request.

This policy was last updated 18/09/2020