Privacy
Privacy Policy
Last Updated: March 2026
At Cecilia Bakery, your privacy matters to us. This policy explains what information we collect when
you use our website and place an order, how we use it, and how we keep it safe. We believe in transparency
and keeping things simple.
Section 01
Information We Collect
When you place an order or create an account, we may collect the following information:
- Personal details — your name, email address, and phone number
- Order information — the items you order, order total, pickup date and time, and any special notes you include
- Payment information — processed securely by Clover. We never see or store your raw credit or debit card numbers. All card data is tokenized by Clover before reaching us.
- Account information — if you sign in with Google or email via Clerk, we receive your name, email, and profile photo
- Basic usage data — general information about how you interact with our website to help us improve the experience
Section 02
How We Use Your Information
We use the information we collect for the following purposes:
- To process and fulfill your orders
- To send you order confirmations and status updates
- To manage your account and provide customer support
- To improve our website, menu, and overall service
What we don't do:
- We do not use your personal data for advertising purposes
- We do not sell, rent, or share your data with third parties for marketing
- We will never spam you — we only contact you about your orders
Section 03
How We Store Your Data
We take the security of your data seriously and use industry-standard services to protect it:
- Order and account data is stored securely via Supabase, which provides enterprise-grade database security with encryption at rest and in transit
- Payment data is handled entirely by Clover's PCI-compliant payment infrastructure — your raw card details never touch our servers
- Authentication is managed by Clerk, which uses industry-standard security practices including encrypted sessions and secure token management
We retain your order data for business and accounting purposes. You may request deletion at any time (see Your Rights below).
Section 04
Third-Party Services
We rely on trusted third-party providers to deliver a secure and reliable experience. Each of these services has their own privacy policy governing how they handle data:
We only share the minimum data necessary with each provider to deliver our service to you.
Section 05
Your Rights
You have the right to understand and control how your data is used. Specifically, you can:
- Request access — ask us for a copy of the personal data we hold about you at any time
- Request deletion — ask us to delete your account and all associated personal data
- Request correction — ask us to update or correct any inaccurate information
To make any of these requests, please contact us through our website. We will respond to all requests within 30 days.
Section 06
Cookies & Tracking
We believe in minimal data collection. Here's our approach to cookies and tracking:
- We use only the minimal cookies required for authentication and session management (keeping you signed in)
- We do not use advertising cookies or tracking pixels
- We do not use Google Analytics or similar third-party analytics tools
- We do not track you across other websites
Section 07
Children's Privacy
Our website and ordering service are not directed at children under the age of 13. We do not knowingly collect personal information from children under 13.
If you believe we have inadvertently collected information from a child under 13, please contact us immediately and we will take steps to delete that information.
Section 08
Contact Us
If you have any questions or concerns about this privacy policy or how we handle your data, we'd love to hear from you. Please reach out through our website.
You can also visit us in person at:
📍 6101 Park Ave, West New York, NJ