This privacy notice explains how Sweet Haven handles personal data when you use the website, contact us, or place a preorder or subscription-related enquiry. It is written for a small artisan bakery and covers the information we need to respond, prepare orders, and keep the site secure.
This introduction summarizes the subjects addressed in the policy and points to related internal guidance.
Privacy data overview
We may process the name, email address, phone number if provided, inquiry message, order specifications, event date or collection preferences, and allergen information that you choose to share. We also process limited technical data such as server request metadata and browser or device information when you use the website.
We receive data from contact forms, email, phone calls, and scheduled consultations. Some technical data is generated automatically by the website and server when pages are requested or forms are submitted.
Essential cookies support core site functions such as page delivery and form handling. Preference cookies remember your privacy choices. We do not confirm analytics or advertising cookies as active on this site.
We use essential cookies for basic site operation and cookies that store privacy preferences. If your browser allows it, you can block or delete cookies, but some site functions may not work as intended.
We process personal data to answer enquiries, confirm order details, manage preorder or subscription arrangements, provide collection or delivery information, share storage guidance, maintain website security, and support technical delivery of the site. We also use limited data to keep records, handle legal obligations, and improve the reliability of our communications.
We may share data with service providers that help us operate the website, deliver technical functions, or support communication and record handling. Any such recipient should use the information only for the agreed service and under appropriate confidentiality or security obligations.
Personal data may be shared with authorities, courts, or other official bodies if we are required to do so by law, regulation, or a valid legal process. We may also disclose information when needed to establish, exercise, or defend legal claims.
You may have rights to know what we hold, ask for corrections, request deletion in some cases, and object to certain uses of your data. You can also ask us to limit processing where the law allows it. If we need to keep information for legal, security, or recordkeeping reasons, we will explain that limit.
To exercise a right, send a clear request through one of the contact channels listed in this policy and describe what you want us to do. We may ask for enough information to verify your identity and locate the relevant record. If we cannot fully comply, we will explain the reason in a direct reply.
Enquiry and order records are kept for the period needed to manage the request, maintain business records, and meet legal or accounting obligations. Technical logs are retained for a practical period needed for security, troubleshooting, and service continuity, then removed or anonymised when no longer required.
If we make material changes, we will update the policy text on the website and use a reasonable method to draw attention to the update when appropriate. The date of the latest version should be checked before you submit new information.
When GDPR applies, we process personal data on a lawful basis that fits the relevant activity, such as responding to enquiries, managing orders, meeting legal duties, and protecting the website. We keep the processing limited to what is needed for those purposes.
Where GDPR applies, you may ask to access, correct, delete, restrict, or object to certain processing, and you may request data portability where it is available. You may also withdraw consent where processing depends on consent. Some requests may be limited by recordkeeping, security, or legal obligations.
