Privacy Policy
This Privacy Policy explains how we collect, use, and protect your personal data when you contact us through the bakery, place an order at the counter, or use this website. Personal data is handled in line with applicable data protection law, including the Brazilian General Data Protection Law (LGPD, Federal Law 13.709/2018).
1. Information we collect
We collect only what we need to serve you well:
- Name, email address, phone number, and message content when you contact us through the website form, by email, or by phone;
- Order details when you place a cake or special order, or reserve a loaf for pickup;
- Basic technical information from standard web server logs (IP address, browser type, referring page, timestamps) used to keep the website working and secure.
2. How we use your information
We use the information you share with us to:
- Reply to your questions and follow up on quotes or special orders;
- Prepare and hand over cake orders, weekend reservations, and other counter services;
- Keep an internal record of transactions for accounting and legal purposes.
We do not sell, rent, or trade personal data. We do not send unsolicited commercial messages.
3. Sharing of information
Personal data is only shared when strictly needed to serve you or to comply with the law:
- With service providers acting on our instructions (for example, hosting providers for this website, payment processors, and our accountants);
- With public authorities when required by court order or by applicable law.
4. Data retention
We keep personal data only for as long as needed to serve you and to meet any legal or tax retention requirement. When data is no longer needed for those purposes, it is deleted or anonymised.
5. Your rights under the LGPD
You may ask us to confirm whether we process your personal data, to give you access to it, to correct inaccurate data, to anonymise, block, or delete unnecessary or excessive data, to inform you of third parties with whom we have shared your data, and to withdraw consent where applicable. To exercise any of these rights, please contact us using the details in the site footer.
6. Security
We take reasonable technical and organisational measures to protect personal data against unauthorised access, loss, or misuse. Access to internal records is limited to the small team that runs the bakery, and any data stored electronically is kept on password-protected systems.
7. Cookies
This website uses only strictly necessary cookies to keep the pages working. It does not run third-party advertising cookies and does not track visitors across other websites.
8. Children
The website is a general-audience site for a neighborhood bakery. We do not knowingly collect personal data from children through the website form. Purchases at the counter by children accompanied by an adult are handled in the ordinary course of retail sales, without collecting personal data.
9. Changes to this Policy
We may update this Policy from time to time. The current version is always available on this page, and the date at the top will reflect the last update.
10. Contact
Questions about this Policy or requests concerning your personal data may be addressed to us using the contact details in the site footer.