Privacy Policy

Mindarie Bakehouse is an invite-only, collection-only bakery. This policy covers the personal data we collect through our ordering site, wholesale enquiry form, and related account and order-management features.

• Account details: name, email address, and a securely hashed password (we never store your password itself).
• Order details: items ordered, collection date/time, order notes, phone number, and payment status (we do not process or store card details — payment is by bank transfer, reconciled manually).
• Wholesale enquiries: company name, contact name, phone, email, and the details of your enquiry.
• Operational analytics: which pages and menu items are viewed, added to a basket, or ordered, aggregated by day — used only to help us plan stock and understand demand.

We collect and use this data to create and manage your account, take and fulfil your orders, respond to wholesale enquiries, and communicate with you about orders you've placed (necessary to perform our contract with you). Where you've opted in, we also use your email to send occasional news about new menu items or specials (consent — see “Marketing” below). Aggregated analytics is used under our legitimate interest in running the bakery efficiently, and never leaves this operational use.

We only send marketing/newsletter emails to customers who have actively opted in — the checkbox is unchecked by default at signup, and it's entirely optional. You can change your mind at any time from your account page, or by using the unsubscribe link included in every marketing email — both take effect immediately. This is separate from transactional emails about orders you've actually placed, which we still need to send you regardless of this preference.

We do not sell your personal data, and we do not share it with any third party for their own marketing, advertising, or analytics purposes. We use a small number of infrastructure providers strictly to operate the site on our behalf — database hosting, transactional email delivery, and image storage — each bound to use your data only as we instruct, only for as long as needed to provide that service, and never for their own purposes.

We keep order records for as long as needed for bookkeeping and to resolve any disputes. If you delete your account, we anonymize your past orders (removing your name, phone number, email, and notes from them) rather than deleting the order records outright, so our financial records stay accurate — see “Your right to erasure” below for what is actually deleted versus anonymized.

• Access the personal data we hold about you.
• Correct inaccurate data (update your name any time from your account page).
• Withdraw marketing consent at any time via the unsubscribe link.
• Request erasure of your account and personal data — see below.

You can delete your account at any time from your account page. When you do:

• Your name, email, and password are permanently overwritten and cannot be recovered.
• Past orders are kept for our bookkeeping records, but with your name, phone, email, and notes removed and replaced with a generic placeholder — they can no longer be traced back to you.
• Every active session of yours is signed out immediately.
• Any wholesale enquiries submitted under your email address are permanently deleted.

This is a genuine deletion of your identifying data, not a hidden or reversible flag. A short-lived copy may still exist in encrypted database backups until they naturally cycle out, as is normal for any hosted database.

Passwords are hashed with Argon2id and never stored or transmitted in plain text. All traffic is encrypted in transit. Access to admin and staff tools is role-restricted, and every account-changing action is logged.

If we make a material change to this policy, we'll update the version above and ask existing accounts to review it again next time they sign in.

Questions about this policy or your data can be sent via our contact page.