Privacy

What we collect

When you place an order, we collect:

• Your name — to identify your order at pickup.
• Your email address — to send you an order confirmation.
• Your phone number — to contact you about your order and pickup.
• Your chosen pickup day — to schedule your order.
• Your order contents (items, quantities, and prices) — to prepare and price it.
• Your language preference — to communicate with you in the right language.
• Your marketing preference — only if you opt in at checkout, we record your consent to receive emails about our breads, offers, and workshops, including when you agreed and the wording you saw.

If you use our Telegram bot to request a free download, we also collect:

• Your Telegram profile — your first name, your username if you have one, and your Telegram chat ID — so we can reply and send what you asked for.
• Your email address — which you type into the chat — to send you marketing, with your consent.

We do not collect or store:

• Card or bank details — you enter these directly on Mollie's secure payment page; they never reach our servers. We only store an opaque payment ID.
• Tracking profiles or analytics.

Why we're allowed to use it

We use your name, email, phone, and order details to fulfil the order you placed with us. Under the GDPR this is the legal basis of "performance of a contract" (Article 6(1)(b)), so no separate consent is needed to place an order.

Marketing

If you tick the optional consent box at checkout, we use your name and email address to send you occasional marketing about our breads, offers, and workshops. The legal basis is your consent (GDPR Article 6(1)(a)). Marketing is completely optional — you can place an order without agreeing to it. You can withdraw your consent at any time using the unsubscribe link in any email or by emailing us, and we keep your name and email for marketing only until you unsubscribe or ask us to delete them.

We also offer free downloads through our Telegram bot. When you use the bot, you consent to marketing by tapping "I agree" (GDPR Article 6(1)(a)): messages on Telegram such as recipes and occasional offers, and marketing emails. You can withdraw at any time: send /stop to the bot or block it to stop Telegram messages, and use the unsubscribe link in any email (or email us) to stop emails. We keep these details only until you opt out or ask us to delete them.

Who we share it with

We share your data only with the service providers that help us run the bakery, and only as far as they need it:

• Mollie (payments) — processes your payment. You enter your card or bank details directly on Mollie's secure page.
• Northflank (hosting) — stores our order database, encrypted at rest.
• Vercel (website) — runs this site and passes your order through to our system.
• Telegram (messaging) — we use Telegram two ways. For orders, our staff receive a new-order alert containing only the order reference, items, total, and pickup day — no name or phone. If you use our Telegram bot, your messages, the email you type, and your Telegram profile pass through Telegram to reach us. Telegram is a third-party platform with its own privacy policy.
• Resend (email) — sends your order confirmation after payment. It receives your email address and order details so the message can be delivered. It does not receive your name or phone number.

How long we keep it

• Your contact details (name, email, and phone) are automatically deleted about 90 days after your order — unless you opted into marketing emails, in which case we keep your name and email address until you unsubscribe or ask us to delete them.
• The order's financial record (amount, items, reference, and dates) is kept longer, as required by Dutch tax law.
• If you joined our marketing through the Telegram bot, we keep your Telegram profile and any email you gave until you opt out (send /stop or block the bot, or unsubscribe from emails) or ask us to delete them.

Your rights

You can ask us to access, correct, or delete your personal data, or to receive a copy of it. To make a request, email us at [email protected]. If you opted into marketing emails, you can unsubscribe at any time via the link in any email or by emailing us, and we will delete your details from our marketing list. Contact details for orders without marketing consent are removed automatically at the 90-day mark described above. For our Telegram bot, send /stop or block the bot to withdraw consent there.

How we protect your data

• All data sent to and from this site is encrypted with HTTPS/TLS.
• Stored data is encrypted at rest by our hosting provider.
• Card and payment data is handled entirely by Mollie, a PCI-compliant provider, and never reaches our systems.
• Access to customer details is restricted to staff through secure, authenticated, non-public tools.
• Order references are random and non-guessable, so orders cannot be looked up by guessing.

Cookies & tracking

This website does not use tracking scripts or analytics. The only cookie we set is a small preference cookie (PARAGLIDE_LOCALE) that remembers your chosen language between visits. It contains only a language code (e.g. "en" or "ru") and is set when you use the language switcher.

Hosting

This website is hosted on Vercel. When you visit, Vercel may automatically collect technical information such as your IP address, browser type, and access times in server logs. This data is processed by Vercel to operate and secure the service.

Contact

If you have questions about this privacy statement, you can reach us through the details on our contact page.