PRIVACY POLICY
The Dusty Knuckle Ltd and all TDK entities. Last updated 11 June 2026.
Who we are and what this is about
We are The Dusty Knuckle (TDK) - a group of bakeries and training programmes across London. This policy explains what personal information we collect from you, why we collect it, how we use it, and your rights.
If you have any questions about this policy or how we handle your data, email us at: enquiries@thedustyknuckle.com
What information do we collect?
We collect information in the normal course of business when you buy from us, attend a class, order online, or work with us. Here's what we collect, why, and how long we keep it.
When you order or buy from us
We collect your name, email, phone number, address, and payment method. We use this to process your order and send it to you. We keep this information for 3 years after your last purchase. If you don't order again during that time, we delete it.
When you book a Bakery School class
We collect your name, email, phone, class preferences, and any allergies or dietary requirements. We need this to run the class safely, contact you about it, and make sure we have the right food for you. We keep this for 1 year after your last class, then delete it.
If you're a wholesale customer
We collect your company name, contact details, payment terms, and order history. We use this to manage the business relationship and send you invoices. We keep this for 6 years - that's a legal requirement for tax purposes.
When you visit our website or app
We collect information about your visit: your IP address, which pages you looked at, how long you spent on them, and what device you used. We also use cookies (small files your browser stores). We use this to understand how people use the website and to improve it. We keep this data for up to 13 months.
If you sign up to our newsletter
We collect your email address. We use it to send you news about TDK and special offers - only if you ask us to. You can unsubscribe from any email, and we delete your email address when you do.
When you pay with a card
We do not store your full credit card details. When you pay online, your card information goes directly to our payment processor (Stripe, Square, Vita Mojo, GiftUp, or Slerp, depending on which site you're using). We may see the last 4 digits of your card for our records, but nothing more. We don't keep that either - your payment processor keeps your card data according to their privacy policy.
If you apply for a job with us
We collect your CV, contact details, application form, and references. We use this to assess your application. We keep this for 6 months after we make a hiring decision, then delete it.
Bakery School and classes
When you book a class with us, we collect your name, email, phone, and any dietary requirements or allergies. This is essential for your safety during the class. We don't use this information for marketing.
We do not collect personal information about anyone under 18. If you book a class for a young person, we ask a parent or guardian to provide and consent to their information.
Payment information
We do not store your full credit card details. When you pay online, your card information goes directly to our payment processor. We may see the last 4 digits of your card for reconciliation, but nothing more. Your payment processor's privacy policy governs how they handle your full card details.
Why we collect this information
Under UK data protection law, we need a legal reason to collect and use your data. These are our reasons:
• Contract: to provide you with goods, services, or classes you've asked for
• Legal obligation: to keep records for tax, health and safety, or other legal reasons
• Legitimate interest: to run our business well, keep things secure, improve our services, and send you information about us (only if you've asked or it's reasonable to expect)
• Your consent: when you ask us to do something, like add you to a newsletter
Who do we share your data with?
We keep your data private. We only share it with:
• Payment processors to process your payment
• Email providers - to send you emails you've asked for
• Accountants - to prepare accounts and handle payroll
• Cloud storage providers - to back up and secure data
• Law enforcement - only if we're legally required to
We never sell your data or share it with third parties for marketing. When we share data, we use contracts to make sure they keep it safe.
How we keep your data safe
We take the security of your data seriously. We have put in place appropriate technical and organisational measures to protect your personal information from being accidentally lost, accessed without permission, altered, or disclosed. Access to your data is limited to staff who have a business need to know. However, we can only be responsible for systems we control, and no online system is completely secure.
Website and cookies
When you visit our website, we collect information about your visit using cookies and similar tools. This helps us understand how people use the site and improve it. We use Google Analytics for this. You can opt out of cookies in your browser settings, but some site features may not work properly.
How long we keep your data
We don't keep data longer than we need it. The table above shows how long we keep each type of data. After that, we delete it or make it anonymous.
Your rights
Under UK data protection law, you have the right to:
• Ask us what data we hold about you
• Get a copy of your data
• Ask us to correct any mistakes
• Ask us to delete your data (right to be forgotten)
• Ask us to stop using your data in a certain way
• Opt out of marketing emails at any time
To exercise any of these rights, contact us at [email address above].
Children
We do not knowingly collect personal data from anyone under 18. If you book a class or service for a young person, a parent or guardian must provide their information and consent. If we discover we've collected data from a child without proper consent, we delete it immediately.
Changes to this policy
We may update this policy from time to time. If we make significant changes, we'll let you know through the website. Using our services after a change means you accept the new policy.
Complaints
If you're unhappy with how we handle your data, please contact us first. If we can't resolve it, you can complain to the Information Commissioner's Office (ICO), the UK data protection regulator. Visit ico.org.uk for more information.
Questions? Email enquiries@thedustyknuckle.com or write to us at the address on your receipt or invoice.