Privacy Policy

Information we collect

We only collect what we need to run the bakery and fulfill your orders:

• Account information. When you create an account, we store your name, email address, and (optionally) a phone number and saved delivery addresses. Your password is handled and stored securely by Google Firebase Authentication — we never see or store your raw password. If you sign in with Google, we receive your name, email address, and profile photo from your Google account.
• Order information. When you place an order we store the items and quantities, your name and email, your chosen fulfillment method (pickup location or delivery address), your requested date, any order notes you add, and the order total and payment status.
• Payment information. Card payments are processed directly by Stripe. Your full card number, CVC, and expiration are entered on Stripe's secure checkout and are never sent to or stored on our servers. We only receive and store a payment confirmation, the amount, the currency, and Stripe's transaction identifiers.
• Cart. Your shopping cart is saved both in your browser and, when you're signed in, in your account so it follows you across devices.
• Messages & newsletter. If you use our contact form we store your name, email, optional phone number, and your message. If you subscribe to our newsletter we store your email address.
• Usage & analytics. If you opt in via our cookie banner, we use Google Analytics (Firebase) to understand how the Site is used. Analytics is off by default until you accept. Our hosting and content-delivery providers also automatically process technical data such as your IP address and browser type to serve and secure the Site.

How we use your information

• To process, fulfill, and deliver or prepare your orders for pickup.
• To send you transactional emails about your order (confirmation, preparing, ready, completed, or cancelled).
• To manage your account and keep your cart in sync.
• To respond to messages you send us.
• To send our newsletter, if you subscribed (you can unsubscribe at any time).
• To understand and improve how the Site performs, if you opted into analytics.
• To protect the Site against fraud and abuse, and to comply with the law.

Payments

We use Stripe to process payments. When you pay, you're handed off to Stripe's secure, PCI-compliant checkout. Stripe collects and processes your card details under Stripe's Privacy Policy. We receive only the information needed to confirm and manage your order — never your full card number.

Cookies & similar technologies

We use a small number of cookies and local browser storage:

• Essential — required to keep you signed in, remember your cart, and secure the Site. These are always on.
• Analytics — Google Analytics (Firebase), used only if you opt in. Off by default.

You can change your choices any time using the Cookie Preferences link in our footer.

Who we share information with

We do not sell your personal information. We share it only with the service providers that help us operate the Site and fulfill orders, each acting on our behalf:

• Google Firebase & Google Cloud — authentication, database, file storage, analytics, and hosting.
• Stripe — payment processing.
• Twilio SendGrid — delivery of transactional order emails.
• Cloudflare — DNS, content delivery, and security/protection for the Site.

We may also disclose information if required by law, or to protect our rights, safety, or property and those of our customers.

Data retention

We keep account and order records for as long as your account is active and as needed to provide our services, meet tax and accounting obligations, resolve disputes, and enforce our agreements. You can ask us to delete your account and associated personal data (subject to records we're legally required to keep).

Security

We use reputable providers (Google Firebase, Stripe, Cloudflare) and industry-standard safeguards to protect your information. No method of transmission or storage is 100% secure, but we work to protect your data and limit access to it.

Your choices & rights

• Access & update — view and edit your account details and saved addresses from your account page.
• Delete — request deletion of your account and personal data by emailing us.
• Unsubscribe — opt out of the newsletter at any time.
• Cookies — opt in or out of analytics via Cookie Preferences.

Depending on where you live (for example, California), you may have additional rights over your personal information. To exercise any of these, email [email protected].

Children's privacy

The Site is intended for adults. We do not knowingly collect personal information from children under 13. If you believe a child has provided us information, contact us and we'll delete it.

Changes to this policy

We may update this Privacy Policy from time to time. When we do, we'll revise the “Last updated” date above. Significant changes will be reflected here on this page.

Contact us

Questions about your privacy? Email [email protected]. Le Hunter Co. operates in Northern California (San Francisco, Alameda, and Davis).