Privacy Policy

1. Who We Are

Bakebutik ("we," "us," or "our") operates the Bakebutik platform at bakebutik.com. This Privacy Policy describes how we collect, use, and protect information when you use our services as a Seller (home baker) or Buyer (customer).

2. Information We Collect

From Sellers

• Name, email address, and password (for your account)
• Storefront name, description, and pickup address
• Product listings, pricing, and photos you upload
• Stripe account ID (we do not store your bank details; Stripe handles those directly)
• The date and time you accepted our Terms of Service

From Buyers

• Name, email address, and phone number provided at checkout
• Order details (items, quantities, pickup time)
• Payment is processed by Stripe; we do not store card numbers or financial data

Automatically Collected

• Standard server logs (IP address, browser type, pages visited)
• Cookies used for authentication sessions

3. How We Use Your Information

• To operate and provide the Bakebutik platform
• To process and fulfill orders between Sellers and Buyers
• To send transactional emails (order confirmations, invoices, receipts)
• To send platform-related communications (account updates, policy changes)
• To generate analytics for Sellers about their own storefront (orders, revenue, top items)
• To detect and prevent fraud or abuse

We do not sell, rent, or share your personal data with commercial food companies, advertisers, data brokers, or any third party for marketing purposes.

4. Data Sharing

We share data only in these limited cases:

• Stripe: Payment processing. Stripe receives customer payment and identity data directly. See Stripe's Privacy Policy.
• Seller ↔ Buyer: When a Buyer places an order, their name, email, and phone are shared with the Seller so the Seller can fulfill the order.
• Legal requirements: If required by law, court order, or to protect our legal rights.

5. Data Retention

We retain your account data for as long as your account is active. If you delete your account, we will delete or anonymize your personal data within 30 days, except where retention is required by law (e.g., financial records for tax purposes, which we retain for 7 years).

6. Your Rights

Depending on your location, you may have the right to:

• Access a copy of the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data ("right to be forgotten")
• Object to or restrict certain processing
• Data portability (receive your data in a machine-readable format)

To exercise any of these rights, email us at noreply@bakebutik.com. We will respond within 30 days.

7. Cookies

We use essential cookies only, specifically, JWT authentication tokens stored in your browser to keep you logged in. We do not use advertising or tracking cookies. We do not use third-party analytics services that track you across sites.

8. Security

We use industry-standard security practices including HTTPS encryption in transit, hashed passwords (never stored in plain text), and access controls. No system is perfectly secure, and we cannot guarantee absolute security.

9. Children's Privacy

Bakebutik is not directed to children under the age of 13. We do not knowingly collect personal information from children. If you believe we have inadvertently collected such information, contact us and we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users via email when we make material changes. The effective date at the top of this page will always reflect when the policy was last updated.