Privacy notice

The data controller is HEKNO Ltd. HEKNO Ltd, registered in Scotland under company number SC895711. Registered office: Borthwick Farm Cottage, Gorebridge, EH23 4QZ, United Kingdom. Privacy enquiries: privacy@hekno.co.uk.

Analytics is enabled in this build. Nothing is recorded until you have been asked and have said yes.

BakeHQ has no accounts, no sign-in, no newsletter, no comments and no contact form. There is nowhere on this site to submit personal data, which is the most reliable form of data minimisation available.

BakeHQ measures usage through one governed event vocabulary of its own, and delivers those events to Google Analytics. It is a measurement destination rather than an advertising integration: advertising features, cross-site signals and personalisation are switched off explicitly, and the tag is not loaded at all unless you allow it. Measurement is anonymous by construction:

• No free text is ever collected, and none can be. Every event property is an enum or an identifier drawn from BakeHQ’s own catalogue. There is no field shaped to hold something you typed, so a search term or a formula you entered into a calculator cannot reach an analytics payload even by accident.
• Internal searches report a result count, not a query. “How often does search return nothing” is the useful question and it can be answered without recording what was asked.
• Route families, not paths. A path can carry state; a family cannot.
• No account identifier, no email, no name, no IP-based profile. The platform rejects any event carrying such a field, and BakeHQ checks for them on its own side first.
• A session identifier that dies with the tab. It is random, non-identifying, held in session storage, and only created after consent — a session identifier that survived for two years would be a pseudonymous identifier under a different name.

The events BakeHQ is able to emit are fixed in code and there are 17 of them, covering page views, searches, tool use, troubleshooting journeys, sharing, and empty states.

Because HEKNO Ltd is established in the United Kingdom, analytics storage requires your consent before it is set, not a notice afterwards. Nothing is dispatched until you have chosen.

Your choice is stored in your browser’s local storage and nowhere else — a consent cookie would be a cookie set before consent, which is the exact thing being consented to. It is not sent to any server and it identifies nobody. You can change it at any time on the cookies page, in either direction.

The lawful basis for anonymous analytics, where you allow it, is consent. The site works identically whether you allow it or not.

BakeHQ may in future display product recommendations resolved by HEKNO Monetisation. BakeHQ sends that service the page you are on and topic identifiers from its own catalogue. It does not send a reader profile, a browsing history or anything you have typed, and no advertising network receives data from this site.

No such recommendations are live at present. See commercial disclosure.

One third party receives data, and only after you allow analytics: Google, as the destination for the anonymous events described above. Its tag sets its own cookies and is loaded on the first event after consent is granted — never before, so declining or ignoring the banner means no contact with Google at all. See cookies for the specifics.

BakeHQ loads no other third-party scripts, fonts, images or embeds. Its content security policy permits Google’s analytics hosts and nothing else beyond BakeHQ’s own origin.

Server logs kept by the hosting provider may record IP addresses for security and operational purposes, as is standard for any website. Those are not used to build profiles and are not linked to analytics.

Under UK data protection law you have rights of access, rectification, erasure, restriction, objection and portability, and a right to complain to the Information Commissioner’s Office.

In practice, BakeHQ holds no personal data about you: anonymous analytics events cannot be traced back to an individual, which is a design decision rather than an oversight. If you believe otherwise, write to privacy@hekno.co.uk and it will be investigated.