Privacy Policy

Information we collect

• Orders and bookings: your name, email address, phone number, the items or class you chose, your pickup date and time, order notes, and the amount paid.
• Custom order requests: the details you give us, such as your event date, design ideas, a delivery address if you ask for delivery, and any allergy or dietary needs (for example, gluten-free).
• App accounts: your email address, name, optional phone number, and your password, which is stored only in encrypted (hashed) form.
• Email updates: your email address and whether you've agreed to receive marketing emails.
• Payments: payments are processed by Stripe. We never see or store your full card number.
• Website usage: our website uses Google Analytics and PostHog to understand how visitors use the site — pages viewed, clicks, approximate location, and device and browser type. PostHog may record sessions (how you scroll and click); it masks what you type into form fields. The mobile app does not use analytics tools.

How we use it

• To make, prepare and hand off your order, and to send your receipt and pickup details.
• To quote, plan and confirm custom orders and class bookings, including allergy accommodations.
• To run your app account and keep you signed in.
• To send occasional emails about weekly drops and specials, only if you opted in.
• To understand how our website is used and improve it.

We do not sell your personal information.

Who we share it with

Only with services that help us run the bakery, and only what they need:

• Stripe — payment processing.
• Postmark — sending order receipts and other emails.
• Discord — private alerts to the baker about new orders (name, contact details and order details).
• Google Analytics and PostHog — website analytics.
• Our hosting and network providers — to store data and run the website, app and services securely.

We may also disclose information if required by law.

How long we keep it

App accounts are kept until you delete them. Records of orders and payments are kept for our business and tax records. Analytics data is kept according to Google's and PostHog's retention settings.

Your choices

• Delete your app account in the app under Account → Delete my account, or at lovebakedbycallie.com/account/delete.
• Unsubscribe from marketing emails at any time using the link in any email, or by contacting us.
• Access or deletion requests: email us to request a copy of your information or to have your order records removed where we're not required to keep them.

Children

Our website and app are not directed to children under 13, and we don't knowingly collect their information.

Security

We use encrypted connections (HTTPS), store passwords only in hashed form, and limit access to your information to what's needed to run the bakery. No method of storage or transmission is completely secure.

Changes and contact

If we change this policy, we'll update the effective date above. Questions? Email [email protected].