It is GAIL’s Limited’s policy to respect your privacy regarding any information we may collect while operating our website. Accordingly, we have developed a set of privacy notices in order for you to understand how we collect, use, communicate, disclose and otherwise make use of personal information. Our individual notices are listed at the bottom of this page.

  • We will collect personal information by lawful and fair means and, where appropriate, with the knowledge or consent of the individual concerned.
  • We do not use your personal information for marketing purposes unless you actively sign up for marketing by checking the relevant box at checkout, or you sign up in a clearly marked form. See our Newsletter Privacy Notice for more information.
  • We will collect and use personal information solely for fulfilling those purposes specified by us and for other ancillary purposes, unless we obtain the consent of the individual concerned or as required by law.
  • We collect your IP address and store it for 3 months for the prevention and protection against attacks to our website.
  • Personal data we collect is relevant to the purposes for which it is to be used, and, to the extent necessary for those purposes, we make all efforts to ensure the data is accurate, complete, and up-to-date. If this is not the case, please email and we will update your information.
  • We will protect personal information by using reasonable security safeguards against loss or theft, as well as unauthorised access, disclosure, copying, use or modification.
  • We will make readily available to customers information about our policies and practices relating to the management of personal information.
  • We will only retain personal information for as long as necessary for the fulfilment of those purposes unless required by law.

Covid-19 – NHS Test and Trace (updated 14th September 2020)

If you visit us in any of our bakeries at the moment, we are required by law to ask you to register your personal details with our Test and Trace provider, in accordance with Government guidance (published on 9/9/2020). Our Test and Trace provider is a 3rd party provider called Airship who are processing, storing and deleting your data on our behalf (data controller). The details you provide may be shared with the NHS on request. The personal data collected through this Test and Trace system is limited to that specified in the relevant Government guidance and will be retained for 21 days from the date of your visit. Should you return to the same bakery within 21 days of registering, the system should recognise your re-visit, not require you to re-register and extend the data retention period by a further 21 days. Your data will only be accessed by authorised GAIL’s personnel and will not be used for any purpose other than the NHS Test and Trace scheme unless explicit consent is given by you. Please speak to our team or if you have any questions email us at

 If you have any comments or concerns, please contact our Data Protection Officer at or write to them at:

Data Protection Officer
GAIL’s Bakery
4-6 Seymour Place

If you have a complaint about our use of your information, we would prefer you to contact us directly in the first instance so that we can address your complaint. However, you can also contact the Information Commissioner’s Office via their website at or write to them at:

Information Commissioner’s Office
Wycliffe House
Water Lane