Privacy Policy

• When you place an order: your name, phone number, email address, what you ordered, the pickup or delivery day and time you chose, any notes you write (for example allergies or an occasion), and the language you used.
• If you ask for delivery: your delivery address.
• When you join the fresh-batch list: the phone number or email you type in.
• When you tap “I paid”, “On my way” or “I'm here”: the time you tapped it.
• To stop abuse such as repeated attempts: a scrambled (hashed) version of your internet address, not the address itself, kept for about two days.

We do not take payment on this website, so we never see or store card or bank details.

• To prepare, confirm, and hand over or deliver your order.
• To email you updates about your order, and to text or call you about it if we need to.
• To show your orders and points on your account page.
• To send fresh-batch updates, only if you joined the list.
• To keep the website safe and working.

We do not use advertising cookies, tracking pixels or analytics. Your browser saves a few things on your own device so the site is easier to use: the name, phone and email you typed (to fill in the order form next time), private links to the orders you placed on that device (so “My account” can show them), and your light or dark theme choice. “Sign out” on the account page clears the saved details. The only cookie this site sets is a sign-in cookie for the bakery owner's admin area.

• Vercel hosts this website. Like any web host, it handles technical data such as your internet address in order to show you the pages.
• Supabase stores our order records (the details listed above) and our photos.
• Resend sends our emails. It receives your email address and the content of those emails, such as your name and order details. Fresh-batch sign-ups are also sent to the bakery by email through Resend.
• The U.S. Census Bureau geocoder and OpenStreetMap (Nominatim) receive only the delivery address you type, so we can measure the distance and quote delivery. They do not receive your name, phone or email.
• Venmo and Zelle: if you choose to pay with them, you pay in their own apps under their own terms and privacy policies. We only see the payment and the name or note they show us.

We do not sell your information and we do not share it for advertising. We may share it if the law requires us to.

Order records stay in our files until we delete them; there is no automatic deletion schedule at this time. The scrambled internet addresses used to stop abuse are removed after about two days. If you joined the fresh-batch list, we keep your contact until you ask to leave.

Email contact@docendulce.com or text (385) 269-1357 to see, correct or delete the information we hold about you, or to leave the fresh-batch list. Tell us the phone number or email you ordered with so we can find your records. We will delete them from our order records as soon as we reasonably can. Copies may remain for a limited time in our email inbox and in our providers' backups.

Your orders open from a private link that we email to you, or automatically on the device you ordered from. A phone number alone does not open an account. Anyone who has your private link can see that order, so please do not forward it.

This website is not meant for children under 13, and we do not knowingly collect information from them.

If we change this policy we will update this page and the date at the top. Questions: contact@docendulce.com or (385) 269-1357.