This privacy policy explains how Sweet Harmony processes personal data in connection with its website, contact channels, and bakery-related services. It applies to visitors, customers, and other individuals who communicate with us through the site or related service channels.
We process personal data to respond to enquiries, confirm order details, manage collection or delivery preferences, handle written ingredient and allergen information requests, maintain website security, support technical delivery, and meet applicable legal obligations. Where relevant, data may also be used to administer subscriptions, schedule production, and communicate service-related updates.
Data may be shared with service providers that assist with website hosting, form handling, technical maintenance, or related operational support. These recipients are expected to process data only for the services they provide and under appropriate confidentiality and security obligations.
Personal data may be disclosed where required to comply with legal obligations, respond to lawful requests, protect rights and security, or support the technical delivery of the website and related communications. Any disclosure is limited to what is reasonably necessary for the relevant purpose.
We may process name, email address, phone number if provided, inquiry message, order specifications, event date or collection preferences, and allergen information voluntarily provided. We also process limited technical data such as server request metadata and browser and device information when the website is used.
Data is collected when you use the contact form, communicate by email or phone, place or discuss an order at the bakery counter, or otherwise provide information during service-related exchanges. Technical data is generated automatically when the site is accessed.
Essential cookies support basic site functions, security, and form handling. Preference cookies may store privacy choices. Analytics and advertising cookies are not confirmed as active and are not described as in use in this notice.
The website uses cookies for essential site operation and to remember privacy preferences. Where browser controls allow, you may block or delete cookies through your device or browser settings, but some site functions may not operate correctly if essential cookies are disabled.
Subject to applicable law, individuals may have rights to access their data, request correction of inaccurate information, ask for deletion in limited cases, object to certain processing, and request restriction or portability where those rights apply. Requests are reviewed in light of legal duties, security needs, and the practical operation of the service.
To exercise a privacy right, provide enough information to identify the relevant interaction and the nature of the request. Additional information may be needed to verify identity before a response is issued. If a request cannot be fully granted, the response will explain the legal or operational reason where appropriate.
Personal data is kept only for as long as necessary for the purpose for which it was collected, including handling enquiries, managing orders, maintaining security, and meeting legal obligations. When data is no longer needed, it is deleted or anonymised according to applicable retention rules and operational requirements.
We may update this privacy policy when our processing practices, website functions, or legal obligations change. The revised version applies from the date it is made available on the website unless a different effective date is stated.
Under the GDPR, personal data must be processed lawfully, fairly, and transparently. Sweet Harmony relies on limited operational, contractual, and legal grounds as relevant to the interaction, including handling enquiries, managing orders, maintaining website security, and meeting legal obligations.
Where GDPR applies, this notice describes how Sweet Harmony processes personal data for users in the European Economic Area and, where relevant, other individuals protected by EU data protection rules.
Where applicable, individuals may request access, rectification, erasure, restriction, objection, and data portability, subject to legal limits and the practical requirements of the service. If consent is used for a specific processing activity, it may be withdrawn for future processing without affecting prior lawful processing.
Use the listed channels for privacy questions, rights requests, or policy clarifications.
