
Privacy
Last updated August 6, 2026
We're a home bakery, not an advertising company. We collect what we need to get you your cookies, and nothing else.
What we collect
When you order: your name, email, phone number, pickup window, how many boxes, and any note you leave us.
When you join the notify list: just your email, and the date you joined.
Your card details
We never see them. Payment happens on Stripe's own checkout page, and your card number never reaches our systems. We only get back whether the payment succeeded and a reference for it.
Email and texts
The two opt-in boxes at checkout are separate on purpose. Ticking one doesn't tick the other, both start unticked, and we record which one you agreed to and when. If you don't tick either, we'll only email you about the order you placed.
Every marketing email has an unsubscribe link. You can also just reply and ask, and we'll take you off.
Who else touches it
Three companies, each doing one job: Stripe takes payments, Brevo sends email, and Supabase stores the orders. That's it.
We don't sell your information, we don't share it for advertising, and we don't hand it to anyone else unless the law requires it.
How long we keep it
Order records stay for as long as we're running, because that's our sales history. If you ask us to delete your details, we'll remove your name, email and phone from our records.
Asking for your data or its deletion
Email shopheysweets@gmail.com and we'll send you what we have, or delete it. No forms, no hoops.
Children
This site isn't aimed at children and we don't knowingly collect anything from under-13s.