Privacy Policy
Last updated: May 2025
Bánh Bakery Co. operates this website, including all related information, content, features, products and services, in order to provide you with a curated shopping and ordering experience (the "Services"). Our website is hosted on Squarespace, we use Square and Hotplate for order capture and management, and we use Square for payment processing and email marketing. This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, or make a purchase using the Services or otherwise communicate with us.
Please read this Privacy Policy carefully. By using and accessing any of the Services, you acknowledge that you have read this Privacy Policy and understand the collection, use, and disclosure of your information as described here.
Personal Information We Collect
When we use the term "personal information," we mean information that identifies or can reasonably be linked to you. We may collect the following categories of personal information depending on how you interact with us:
Contact details including your name, email address, phone number, and shipping or billing address.
Financial information including payment card details and transaction information, processed securely through Square. Payment card data is considered sensitive personal information and is used solely to process your transactions.
Transaction information including items you purchase, order history, pickup or delivery preferences, and related order details captured through Square and Hotplate.
Communications with us including messages you send us through our website, email, or social media.
Device and usage information including your IP address, browser type, and how you interact with our website, which may be collected automatically by Squarespace.
How We Collect Personal Information
We may collect personal information:
Directly from you when you place an order, sign up for our email list, or contact us about catering or events.
Automatically through our website, including through cookies and similar technologies used by Squarespace, which may also support analytics or advertising features.
From Squarespace, Square, Hotplate, and other service providers who collect or process your information on our behalf.
How We Use Your Personal Information
We may use your personal information to:
Process and fulfill your orders, including sending order confirmations and updates through Square and Hotplate.
Send you marketing and promotional emails about new flavors, pop-up events, and other bakery news.
Respond to your questions and provide customer support.
Improve our website and shopping experience.
Comply with applicable legal obligations.
How We Disclose Personal Information
We may share your personal information in the following circumstances:
With Squarespace, Square, Hotplate, and other service providers who help us operate our business, host our website, process payments, manage orders, and send emails.
When required by law or to respond to valid legal process.
In connection with a business transaction such as a merger or acquisition.
When you direct or consent to us sharing your information with a third party.
We do not sell your personal information. We do not share your personal information for cross-context behavioral advertising purposes. However, Squarespace may use cookies or similar technologies on our website that could constitute "sharing" under California law. You may opt out of such tracking by adjusting your browser settings or using a cookie opt-out tool such as the Global Privacy Control (GPC).
Our Relationship with Squarespace, Square, and Hotplate
Our website is hosted by Squarespace, which may collect certain information about your visit automatically, including device and usage data. Both Square and Hotplate are used to capture and manage orders, and each may collect your contact details, payment information, and order information in order to facilitate fulfillment. Payment processing is handled securely through Square. Information you submit through our website or ordering platforms may be transmitted to and stored by these services. To learn more about how each handles your personal information, you can review their respective privacy policies at squarespace.com/privacy, squareup.com/privacy, and hotplate.com.
Third Party Websites and Links
Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of those sites. We encourage you to review the privacy policies of any third-party sites you visit.
Children's Data
Our Services are not intended for children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with their personal information, please contact us and we will delete it promptly.
Security and Retention
We take reasonable steps to protect your personal information, but no security measures are perfect. We retain your personal information for the following periods, or as long as necessary to fulfill the purposes described in this policy:
Contact details: Retained for as long as you remain subscribed to our mailing list or have an active customer relationship with us.
Financial and transaction information: Retained for a minimum of five years to comply with tax and accounting obligations.
Communications: Retained for up to two years from the date of your last communication with us.
Device and usage information: Retained for up to one year, as determined by Squarespace's data practices.
You may request deletion of your personal information at any time by contacting us using the details below, subject to any legal retention obligations.
Your Rights and Choices
Depending on where you live, you may have the following rights regarding your personal information:
Right to Access: Request access to the personal information we hold about you.
Right to Delete: Request that we delete your personal information.
Right to Correct: Request that we correct inaccurate information.
Right to Opt Out of Sale or Sharing: Request that we not sell or share your personal information. We do not sell personal information, and we do not share it for cross-context behavioral advertising. To opt out of any tracking by Squarespace on our website, you may use the Global Privacy Control or adjust your browser settings.
Right to Limit Use of Sensitive Personal Information: You may request that we limit the use of sensitive personal information, such as payment card data, to what is necessary to perform the services you have requested. We do not use sensitive personal information for any purpose beyond processing your transactions.
Right to Opt Out of Marketing Emails: Opt out of marketing emails at any time by clicking the unsubscribe link in any email we send. Opting out will not affect transactional emails related to your orders.
California Residents
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), including the rights described above. We do not sell or share your personal information as those terms are defined under California law. To submit a privacy request, please contact us at privacy@banhbakeryco.com. We will respond to verified requests within 45 days as required by law. We will not discriminate against you for exercising any of your privacy rights.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes to our practices or for legal or regulatory reasons. We will post the revised policy on this website and update the "Last updated" date.
Contact
For general questions about this Privacy Policy, please contact us at hello@banhbakeryco.com. To submit a privacy request, including requests to access, delete, or correct your personal information, please contact us at privacy@banhbakeryco.com.