Privacy Policy for Delta Bakehouse

At Delta Bakehouse, we are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, place orders for our artisan bread, custom cakes, patisserie items, catering services, specialty coffee and tea, enrol in baking classes, or interact with our seasonal dessert menus. We respect your trust and are dedicated to handling your personal data responsibly and in compliance with applicable data protection laws, including the General Data Protection Regulation (GDPR) and Singapore's Personal Data Protection Act (PDPA).

1. Information We Collect

We collect various types of information from and about you depending on your interactions with our site and services.

1.1 Personal Information You Provide Directly To Us

We collect personal information that you voluntarily provide to us when you:

• Place an order for our baked goods, catering, or other products/services.
• Register for an account on our site.
• Sign up for our newsletters or promotional emails.
• Enrol in our baking classes.
• Contact us with inquiries or feedback.
• Participate in surveys, contests, or promotions.

This information may include your name, email address, postal address, phone number, payment information (processed securely by third-party payment processors), dietary preferences or allergies relevant to custom orders, and any other details you choose to provide.

1.2 Information Collected Automatically

When you visit our website, we may automatically collect certain information about your device and browsing actions. This may include your IP address, browser type, operating system, referring URLs, pages viewed, and the dates/times of your visits. This data helps us understand how our site is used and improve your experience.

1.3 Cookies and Tracking Technologies

Our website uses "cookies" and similar tracking technologies to enhance your browsing experience, personalize content, analyze site traffic, and for marketing purposes. You can control the use of cookies at the individual browser level.

2. How We Use Your Information

We use the information we collect for various purposes, including:

• To process and fulfill your orders for our baked goods, catering, and other services.
• To manage your registration for baking classes and communicate relevant details.
• To communicate with you about your orders, inquiries, and customer service requests.
• To send you marketing and promotional communications about our products, services, and special offers that may be of interest to you, in accordance with your preferences.
• To personalize your experience on our site and present tailored product offerings.
• To improve our website, products, and services, and to develop new offerings.
• To detect and prevent fraud or other malicious activity.
• To comply with legal obligations and enforce our terms and conditions.

3. Legal Basis for Processing Personal Data (for GDPR compliance)

If you are located in the European Economic Area (EEA), our legal basis for collecting and using the personal data described in this Privacy Policy depends on the personal data we collect and the specific context in which we collect it. We may process your personal data because:

• We need to perform a contract with you (e.g., to fulfill your order).
• You have given us explicit permission to do so (e.g., for marketing communications).
• The processing is in our legitimate interests and not overridden by your rights (e.g., for website improvement and fraud prevention).
• To comply with the law.

4. Disclosure of Your Information

We may share your personal information with third parties only in the following circumstances:

• Service Providers: We may share your information with third-party vendors and service providers who perform services on our behalf, such as payment processing, shipping, website hosting, data analysis, email delivery, and marketing assistance.
• Business Transfers: In the event of a merger, acquisition, or sale of all or a portion of our assets, your personal information may be transferred to the acquiring entity.
• Legal Requirements: We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court order or government agency).
• Protection of Rights: We may disclose information where we believe it is necessary to investigate, prevent, or take action regarding potential violations of our policies, suspected fraud, situations involving potential threats to the safety of any person, or as evidence in litigation in which we are involved.

We do not sell or rent your personal information to third parties for their marketing purposes.

5. Data Security

We implement appropriate technical and organizational measures designed to protect your personal information from unauthorized access, use, alteration, and disclosure. While we strive to protect your personal data, no method of transmission over the Internet or electronic storage is 100% secure. Therefore, we cannot guarantee its absolute security.

6. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. When we no longer require your personal information, we will securely destroy or de-identify it.

7. Your Rights

Depending on your location and applicable data protection laws, you may have the following rights regarding your personal data:

• Right to Access: You have the right to request copies of your personal data we hold.
• Right to Rectification: You have the right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete.
• Right to Erasure (Right to be Forgotten): You have the right to request that we erase your personal data, under certain conditions.
• Right to Restrict Processing: You have the right to request that we restrict the processing of your personal data, under certain conditions.
• Right to Object to Processing: You have the right to object to our processing of your personal data, under certain conditions.
• Right to Data Portability: You have the right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.
• Right to Withdraw Consent: Where processing is based on consent, you have the right to withdraw your consent at any time.

To exercise any of these rights, please contact us using the contact details provided below. We will respond to your request within the timeframes required by applicable law.

8. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at:

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will post any changes on this page and update the "last updated" date at the top of the policy. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.