Protection

1. Overview

At SweetRise Bakery, protecting your personal data is a fundamental responsibility we take seriously. This Data Protection Policy describes how we collect, use, disclose, and safeguard your personal information when you interact with our website, services, or communications. We adhere to all applicable data protection laws, including GDPR, CCPA, and other relevant regulations, to ensure your privacy rights are respected.

2. Information We Collect

We may collect a variety of personal data, either directly from you or through automated systems, including:

• Identifiers such as your full name, date of birth, and government-issued IDs
• Contact details including your postal address, email, and phone numbers
• Payment and financial information for transaction processing
• Account credentials like usernames, passwords, and security questions
• Technical details such as IP address, device information, browser type, and location data
• Interaction data, including communications, survey responses, and customer feedback
• Marketing preferences and consent status

Data is collected through voluntary submissions, automated tracking on our platforms, and authorized third-party sources.

3. How We Collect Your Personal Data

Personal data is gathered via:

• Forms and applications you complete on our website or mobile app
• Cookies, web beacons, and other tracking tools during your online activity
• Direct communications such as email, phone, and live chat
• Authorized third parties when you have given consent for data sharing

4. Purposes for Processing Personal Data

Your data is used to:

• Deliver products, services, and fulfill contracts with you
• Process payments securely and manage billing
• Provide customer support and respond to inquiries
• Send you important updates and promotional materials (when consented)
• Analyze site performance and improve user experience
• Detect, prevent, and respond to fraudulent or unauthorized activities
• Comply with legal and regulatory obligations

5. Legal Basis for Processing

We process your personal data based on:

• Your explicit consent where applicable
• Performance of a contract or pre-contractual measures
• Compliance with legal requirements
• Legitimate interests pursued by us or third parties, balanced with your rights

6. Sharing and Disclosure of Personal Data

We may disclose your data to:

• Service providers assisting with payments, marketing, analytics, IT services, and customer support
• Legal and regulatory authorities as required by law
• Potential business partners or acquirers during mergers or sales, subject to confidentiality safeguards

7. International Transfers

Where your personal data is transferred internationally, we ensure it is protected by appropriate safeguards like standard contractual clauses or other legal mechanisms that meet data protection standards.

8. Retention of Personal Data

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy or as required by law. After this period, data is securely destroyed or anonymized to prevent identification.

9. Security Measures

We implement technical and organizational measures to secure your personal data from unauthorized access, alteration, disclosure, or destruction. These include encryption, access controls, secure servers, regular security assessments, and staff training.

10. Your Rights

You have the right to:

• Access your personal data held by us
• Request corrections to inaccurate or incomplete data
• Request deletion of your data under certain conditions
• Object to or restrict processing of your personal data
• Withdraw consent where processing is consent-based
• Receive a copy of your data in a portable format
• Lodge a complaint with a supervisory authority if you believe your rights are violated

To exercise your rights, please contact us at [email protected].

11. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance functionality, analyze traffic, and personalize content. You can control cookie settings via your browser or our cookie management tool. Please refer to our Cookie Policy for details.

12. Protection of Minors

Our services are not intended for individuals under 16 years old. We do not knowingly collect personal data from minors and will promptly remove any such data if discovered.

13. Policy Updates

This policy may be updated periodically to reflect changes in legal, operational, or technological developments. We encourage you to review it regularly. Major changes will be communicated through our website or direct notifications.