Privacy policy

BakerVy is a one person Cottage Licensed Bakery located in Duvall, Washington. This policy states what we do with your information.

What we collect

We ask for what it takes to bake your order and get it to you, and nothing past that.

• Your name, so we can label the bag and hand it to the right person.
• Your email address, so we can send the receipt and tell you if a bake changes.
• Your phone number, so we can reach you on the day when email is too slow.
• What you ordered, and when you are collecting it. This is the order itself.
• Your address, when we bring the order to you. We use it to find you on the day and for nothing else.
• Anything you write in the notes box, such as an allergy or a birthday message.
• A custom order request: what you would like, the date you need it, and any photos you add. We keep the photos with the request so we can bake from them.
• Your email address on a waitlist, if you join one for something sold out: to tell you when one frees up, and to send you the next week's menu.
• An account, if you make one: your email address and a password, which we store scrambled so that nobody, us included, can read it back.

Payment

We never see or store your card number. Stripe takes the payment, and the card details go straight to them. We receive a confirmation that you paid, the amount, and the last four digits, which is what we need to match a payment to a bag. Stripe keeps a customer record with your name, email address, and phone number, under its own privacy policy.

Your pickup code

Your receipt carries a QR code. It holds a random code and nothing about you. When you collect, we scan it to find your order. Only we can open what it points to.

How we see what works

We use PostHog to learn how people use the shop: which pages they open, what they tap, and where they give up on an order, so we can fix whatever got in the way. It can record a visit as a replay of the page. Every form field is blurred in those replays, so your name, email, phone, address and notes never reach PostHog, and your card is on Stripe's page, which PostHog never sees. You stay anonymous there: PostHog gives your browser a random id and does not know who you are.

Cookies and what your browser keeps

No advertising tags, and nothing that follows you to other sites. The site keeps only what makes the shop work, and PostHog's random id:

• A cookie that holds your basket for fifteen minutes while you check out.
• A cookie that keeps you signed in, if you have an account.
• A cookie from an early access link, so the menu opens a day early for you.
• Your checkout form, kept in your browser until you finish, so a trip to the payment page and back does not empty it.
• Whether you picked the light or the dark look, kept in your browser.
• PostHog's random id for your browser, kept in a cookie and in your browser's storage.

Who else touches your information

We keep the list short, and everyone on it works for us rather than for themselves:

• Cloudflare hosts the site and the photos, and runs the check on the custom order form that tells a person from a bot.
• Neon hosts the database the orders live in.
• Stripe takes the payment.
• Resend sends our email.
• PostHog counts visits and records page replays with every form field blurred, as above.
• Google Fonts serves the typefaces on these pages, so your browser asks Google for them, and Google sees the request.

We do not sell your information. We do not rent it, trade it, or hand it to anyone for advertising. We will give it up if a court or the law requires it, and not otherwise.

Email about the bake

Once you have ordered from us, we email you when a new week opens and when there is something left to buy. Every one of those emails has an unsubscribe link, and one click is enough. Receipts, pickup details, and replies about a custom order are part of the order and come either way.

How long we keep things

Order records stay for as long as tax and business records need to be kept in Washington. Custom order photos stay with the request, and we delete them when you ask. Anything we no longer need, we delete.

What you can ask us to do

Write to hi@bakervy.com and ask us for a copy of what we hold on you, ask us to correct it, or ask us to delete it. We will answer within thirty days. If a record has to stay for tax reasons we will tell you which one and why.

Children

This is a bakery, not a service for children. We do not knowingly collect information from anyone under thirteen. If you think your child has given us something, write to us and we will remove it.

Changes

When this page changes, the date at the top changes with it. If the change affects what we do with information we already hold, we will email anyone it applies to rather than quietly editing the page.

Contact

BakerVy, Duvall, Washington. Email hi@bakervy.com.