This privacy policy explains how Sweet Flour Bakery handles personal data when you visit pumpkinhutbee.top, contact us, or place an order. It is written to help you understand what we collect, why we use it, and how you can exercise your privacy rights.
You have practical control over your personal data, including the ability to ask what we hold, request corrections, and raise concerns about processing that affects you. Where a right cannot be fulfilled in full, we will explain the reason to the extent permitted by law.
To protect your data, we may need to confirm your identity and understand the scope of your request before we respond. Once verified, we will review the request and handle it within the time allowed by applicable law, unless an extension is justified by complexity or volume.
Contact and order records are retained for the period needed to manage the request, maintain business records, resolve issues, and meet legal or accounting obligations. When data is no longer needed, it is deleted or anonymized in line with our retention practices.
If we make material changes, we will update the policy text on the website and may use a suitable notice where the change affects how your data is handled. The version in force is the one published at the time you use the site.
Privacy data overview
Depending on how you use the site, we may process your name, email address, phone number if you provide it, inquiry message, order specifications, event date or collection preferences, and allergen information you choose to share. We also process limited technical data such as server request metadata and browser or device information needed for security and delivery of the website.
We receive personal data when you submit a contact form, send an email, call us, place or discuss an order at the counter, or provide details needed for collection, delivery, or subscription planning. Technical data is generated automatically when you visit the website.
The cookies used on this site are limited to essential cookies that support basic website operation and preference cookies that store your privacy choices. We do not confirm the use of analytics or marketing cookies on the basis of the current site setup.
We use cookies only where needed for essential site operation and to remember privacy preferences. You can manage cookies through your browser settings, and you may block or delete them, although some site functions may not work as intended if essential cookies are disabled.
Data processing overview
This section outlines the primary purposes for processing personal data, the categories of recipients involved in service delivery, and the legal context that may govern disclosure.
We use personal data to respond to inquiries, confirm orders or collection preferences, manage written order and allergen summaries, support website security, and deliver the technical functions needed for the site to operate. Where relevant, we also use data to maintain records connected with subscriptions, collection planning, and legal compliance.
We may share limited data with service providers that help us operate the website, deliver technical functions, or manage communications such as form handling. These recipients are expected to use the data only for the services they provide to us and to keep it protected.
We may disclose personal data if we are required to do so by law, court order, or another binding legal process. We may also share information when necessary to establish, exercise, or defend legal claims, or to protect the security and integrity of our website and records.
Where the GDPR applies, we process personal data on a lawful basis that fits the relevant activity, such as responding to inquiries, managing orders, meeting legal obligations, or protecting the website and our records. We keep the scope of processing limited to what is needed for those purposes.
Where applicable, you may request access, correction, deletion, restriction, objection, or portability of your personal data. You may also withdraw consent where processing relies on consent. Some requests may be limited by recordkeeping duties, security needs, or other legal obligations.
