Privacy Policy

Information We Collect

When you use the Site or place an order, we may collect:

• Contact and order details — your name, email address, phone number, pickup or delivery address, order items, and any notes you include. We use your phone number only to reach you about an active order; we do not send marketing text messages.
• Account information — if you create an account, your email, a hashed password, and your order history.
• Payment information — handled directly by Stripe. We receive a confirmation and the last four digits of your card, but we never see or store your full card number.
• Usage information — basic information your browser sends automatically, such as IP address, device type, pages visited, and referring site, used to keep the Site secure and working well.
• Cookies — small files used to keep you signed in, remember your cart, and understand how the Site is used.

How We Use Your Information

• To process, fulfill, and deliver your orders.
• To send order confirmations, receipts, and updates about your order.
• To respond to your questions and provide customer support.
• To send occasional marketing emails about new products, seasonal items, or markets, only if you have opted in. You can unsubscribe at any time.
• To keep the Site secure, detect fraud, and improve how it works.
• To comply with our legal and tax obligations.

Service Providers We Share With

We share limited information with trusted service providers who help us run the bakery. They are only allowed to use it to provide their service to us. These include:

• Stripe — to process payments.
• Vercel — to host the Site, store product images, and run the underlying database that holds your account and order data.
• Email delivery providers — to send you transactional emails like order confirmations.

We do not sell, rent, or trade your personal information. We may disclose information if required by law, to protect our rights, or in connection with a sale or transfer of the business.

Cookies

We use a small number of first-party cookies to keep you signed in and to remember your cart between visits. We do not use third-party advertising cookies, and we do not run third-party analytics or tracking pixels on the Site. You can disable cookies in your browser, but parts of the Site (like sign-in and checkout) may not work correctly without them.

How Long We Keep Data

We keep order and payment records for at least seven years to satisfy IRS and New York State tax recordkeeping requirements. Account information is kept while your account is active; you can ask us to delete your account at any time, and we will do so except where we are required to retain certain records (such as completed-order receipts) by law. Server logs and security data are kept for a short period and then deleted.

Your Choices

You can ask us to access, correct, or delete the personal information we hold about you by emailing info@eleven8thsbakery.com. We will respond within 30 days. We may need to verify your identity (for example, by confirming details of a recent order) before acting on your request, and we may retain some information when we are legally required to do so, such as for tax records.

You can unsubscribe from marketing emails at any time using the link at the bottom of those emails. Transactional emails about your orders will still be sent.

We are a small home bakery serving customers in Western New York. We do not knowingly target or sell to residents of California, the European Union, or the United Kingdom, and we are not currently structured to comply with the CCPA, GDPR, or UK GDPR. If you believe one of those laws applies to information we hold about you, contact us and we will work with you in good faith.

Children's Privacy

The Site is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us with information, please contact us and we will delete it.

Security

We use reasonable technical and organizational measures to protect your information, including HTTPS across the Site and payment handling through Stripe. No method of transmission or storage is 100% secure, so we cannot guarantee absolute security.

Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date above. Significant changes will be noted on the Site.

Contact

Questions about this Privacy Policy? Email us at info@eleven8thsbakery.com or use our contact page.