This privacy notice explains how Sweet Artisan handles personal data in connection with the website and related order or inquiry processing. It follows the data lifecycle from collection through use, disclosure, retention, and deletion.
This introduction outlines how information is handled, what rights may apply, and where to direct policy-related questions.
Data handling overview
This section outlines the categories of personal information we may process, where that information comes from, the types of cookies used on the site, and the controls available to you.
We may collect your name, email address, phone number if you provide it, inquiry message, order specifications, event date or collection preferences, and allergen information you choose to share. We also process limited technical data such as server request metadata and browser or device information when you visit the site.
Most personal data is received directly from you through the contact form, email, phone, or a scheduled consultation. Technical data is generated automatically when the site is accessed and used for security, delivery, and basic service operation.
We use essential cookies needed for site operation and cookies that store privacy preferences. We do not state that analytics or advertising cookies are active on the basis of the confirmed facts provided for this site.
You can manage cookies through your browser controls and, where available, by adjusting privacy preferences on the site. Essential cookies support core functions, and preference cookies help remember your selected settings.
We use personal data to respond to contact requests, review order specifications, confirm collection or production preferences, provide written ingredient and allergen information when requested, maintain website security, and support technical delivery. We may also use data to keep records needed for administration, dispute handling, and compliance with applicable obligations.
We may share personal data with service providers that help us operate the website, process communications, support technical delivery, or manage related administrative tasks. These recipients are expected to use the data only for the services they provide to us and to handle it under appropriate confidentiality obligations.
We may disclose personal data to public authorities, courts, or other parties when required to comply with law, enforce our rights, protect the security of the website, or address a lawful request. Any disclosure is limited to what is reasonably necessary for the relevant purpose.
You may ask us to confirm whether we hold personal data about you, request access to it, and seek correction of inaccurate information. Where deletion, restriction, or objection is available under applicable law, we will review the request and respond through the appropriate process.
To protect privacy, we may ask for enough information to verify your identity and understand the scope of the request. Once verified, we will assess the request, apply any legal exceptions, and respond within the timeframe required by applicable law.
We retain personal data according to the needs of the relevant interaction, such as responding to an inquiry, managing an order, confirming a collection preference, or maintaining records needed for security and compliance. When the purpose ends and no further retention basis applies, the data is deleted or anonymized in line with our internal procedures.
If we make material changes, we will update the policy text on the website and use a reasonable method to draw attention to the revised version when appropriate. The updated notice applies from the effective date shown in the policy.
