This Privacy Policy explains how Sweet Slice Bakery processes personal data through joyspadebone.digital in connection with website use, contact requests, and bakery-related inquiries. It describes the data lifecycle from collection and use to disclosure, retention, and deletion.
This section outlines how information handling, individual rights, and support channels are addressed within this notice.
We may collect name, email address, phone number if provided, inquiry messages, order specifications, event date or collection preferences, and allergen information voluntarily supplied by the user. We also process limited technical data such as server request metadata and browser or device information when the website is used.
Most personal data is provided directly through the contact form, by phone, by email, or at the bakery counter. Technical data is generated automatically when the website is accessed, and order-related details may be recorded when a customer confirms an order or subscription arrangement.
We use essential cookies needed for the website to function and cookies that store privacy preferences. We do not state that analytics or marketing cookies are active on the basis of the confirmed facts provided for this site.
The website uses cookies only for essential site operation and to remember privacy preferences. Where browser settings allow, users may block or delete cookies, but essential functions may not work as intended if those cookies are disabled.
We use personal data to respond to contact form submissions, manage order and subscription enquiries, confirm collection preferences, provide production schedule information, handle website security, and support technical delivery of the site. Where allergen information is provided, it is used only to address the specific order or enquiry, and customers should confirm current ingredients and handling conditions for their own order because recipes, ingredients, and handling conditions may change.
Personal data may be shared with service providers that support website delivery, contact handling, or technical maintenance, but only to the extent needed for those functions. Any such recipient is expected to use the data for the agreed purpose and to apply appropriate confidentiality and security measures.
We may disclose personal data when required by law, court order, or a lawful request from a public authority. Disclosure may also occur where it is necessary to protect website security, prevent misuse, or support the establishment, exercise, or defence of legal claims.
Individuals may have rights to know what data is processed, correct inaccurate information, object to certain processing, and request deletion where the law allows. The practical scope of each right depends on whether the data is needed for order handling, legal compliance, security, or another legitimate operational purpose.
To exercise a privacy right, a person should provide enough information for us to identify the relevant record and understand the request. We may ask for additional details to protect against unauthorised disclosure, and we may decline or limit a request where the law permits us to do so.
We retain personal data according to its purpose and lifecycle. Inquiry records are kept while the request is being handled and for any follow-up that is reasonably connected to it. Order and subscription records are kept for operational, accounting, or dispute-handling needs, then deleted or anonymised when those needs end and no further retention is required.
If the policy is updated, the revised version will apply from the stated effective date. Users should review it periodically, especially after changes to contact handling, cookie use, retention practices, or rights procedures.
Under the GDPR, personal data must be processed lawfully, fairly, and for specified purposes. For this website, that means using contact, order, technical, and security data only for the operational and legal purposes described in this policy, and keeping it no longer than needed for those purposes.
Because the business is established in Croatia and the website serves users in the European Union, GDPR principles apply to personal data processed through this site where the regulation is relevant.
Where the GDPR applies, individuals may request access, rectification, erasure, restriction, objection, or portability, subject to legal limits and the nature of the processing. Requests are reviewed to confirm identity, assess the scope of the request, and respond within the period required by law.
Use the listed channels for questions about this policy or the handling of personal data.
