This notice explains how Sweet Artisan processes personal data when you use the website, contact us, or place bakery-related inquiries and orders. It follows the data lifecycle from collection through use, disclosure, retention, and deletion.
Depending on how you use the site, we may process your name, email address, phone number if you provide it, inquiry message, order specifications, event date or collection preferences, and allergen information you choose to share. We also process limited technical data such as server request metadata and browser or device information to keep the site functioning and secure.
We receive personal data when you submit a contact form, send an email, call us, place or discuss an order, or provide details at the bakery counter. Technical data is collected automatically when you access the website, and cookie-related preferences are recorded when you set them.
Confirmed cookies are used for essential site operation and for storing privacy preferences. We do not confirm the use of analytics or marketing cookies on the basis of the current facts provided.
We use essential cookies for site operation and cookies that remember privacy preferences. If you disable cookies in your browser, some site functions may not work as intended, but the site should remain usable for basic browsing.
We use personal data to answer contact requests, review order or subscription details, confirm collection or delivery preferences, manage production scheduling, provide storage or serving guidance where relevant, maintain website security, and support technical delivery of the site. Where you provide allergen information voluntarily, we use it only to help handle your specific request and to confirm current details for that order.
We may share data with service providers that support website delivery, message handling, technical maintenance, or order-related administration. Any such recipient should process the data only for the assigned purpose and under appropriate confidentiality and security obligations.
We may disclose personal data if required to comply with applicable law, a lawful request from a public authority, or a legal process. We may also disclose information where necessary to protect the security of the website, prevent misuse, or establish, exercise, or defend legal claims.
Privacy rights lifecycle
You may have rights to know what data we hold, correct inaccurate information, request deletion in appropriate cases, object to certain processing, or ask for a copy of data that is processed under applicable law. Some requests may be limited where we must keep information for legal, security, or operational reasons.
To exercise a privacy right, send a clear request through one of the contact channels listed in this policy and describe the data or activity concerned. We will assess the request, confirm whether any exceptions apply, and respond through a reasonable process based on the nature of the request.
We retain personal data for the period needed to respond to inquiries, manage orders, confirm production details, maintain business records, resolve disputes, and meet legal or accounting duties where applicable. When the relevant purpose ends, data is deleted, anonymized, or archived in a limited form if a legal basis requires continued storage.
If we make material changes, we will update the policy text on the website and may use an appropriate service channel to draw attention to the revision where practical. The version in force is the one published on the site at the time you review it.
Where GDPR applies, Sweet Artisan acts as the controller for the personal data described in this notice. The processing is based on operational needs such as responding to inquiries, managing orders, maintaining website security, and delivering technical functions. Where consent is used for non-essential cookies or similar preferences, it may be withdrawn through the available controls.
Because this website serves users in the European Economic Area, GDPR principles are relevant where the regulation applies to the processing activity and the user’s location.
Where GDPR applies, you may request access, rectification, erasure, restriction, objection, or portability, subject to legal limits and the nature of the processing. If processing is based on consent, you may withdraw that consent without affecting prior lawful processing. We may ask for information needed to verify your identity before acting on a request.
Use the listed service channels for privacy questions, requests, or clarifications about this notice.
