Effective August 7, 2026
Breadiful CATastrophe is a small home bakery in Monrovia, Maryland. This policy explains what information we collect through breadifulcatastrophe.com and what we do with it.
Information we collect
- When you contact us, we receive your name, email address, subject, message, and anything else you choose to include.
- When you place an order, we receive the contact, billing, pickup or delivery, order, and transaction details needed to prepare and fulfil it. If you create an account, WordPress and WooCommerce also store the account details you provide.
- Our site and security providers automatically process technical information such as your IP address, browser and device information, requested pages, timestamps, cookies, and security signals.
How we use it
We use this information only to answer you; prepare, fulfil, support, cancel, or refund orders; send transactional messages; keep the site secure and reliable; maintain business and tax records; and comply with law. We do not sell or rent personal information, use contact or order information for behavioural advertising, or add you to a marketing list without asking.
Service providers
Cloudflare delivers and protects the site, and its Turnstile service processes signals such as IP address, browser information, and device or security characteristics to limit abuse. Google and Gmail deliver our email. PayPal and its payment partners process checkout and may receive billing, contact, device, transaction, and fraud-prevention information. We receive payment status and transaction identifiers, but do not intentionally store your full card number in WordPress. Each provider handles information under its own privacy terms.
Cookies
We use cookies and similar technology needed for site security, forms, customer sign-in, shopping carts, checkout, and payment. Payment and security providers may also set or read cookies when their features load. We do not currently run an advertising-cookie or newsletter-tracking programme.
Retention and security
We keep contact, order, and business records only as long as reasonably needed for customer service, fulfilment, accounting, tax, fraud prevention, disputes, and legal obligations. The site’s outgoing-mail log is configured to rotate after 14 days. Technical logs rotate, and encrypted backups expire on rolling schedules; deleted information may remain in a restricted backup until that backup expires and is used only for recovery. We use access controls, encryption in transit, limited administrative access, and encrypted backups, but no online system can be guaranteed perfectly secure.
Your choices
You may ask what personal information we hold about you or ask us to correct or delete it by emailing [email protected]. We may need to verify your identity, and we may retain information that law or legitimate business records require us to keep. You may use guest checkout if that option is available and manage cookies through your browser, although blocking necessary cookies can prevent forms or checkout from working.
Children
This site is not directed to children under 13, and we do not knowingly collect their personal information. A parent or guardian may contact us to request deletion.
Changes and contact
We may update this policy when the site or our practices change. The effective date above shows the latest revision. Questions or privacy requests: [email protected].