1. Who we are
The Little Baker Kitchen (also called TLB Kitchen, “we”, or “us”) is responsible for the personal information collected through thelittlebakerkitchen.com and our related customer communications. This policy explains our use of that information for our bakery services in the Philippines.
For privacy questions or requests, email tlbk.kitchen@gmail.com.
2. Information we collect
- Account details: your email address, account identifier, sign-in information, and profile details you provide or share through Google.
- Orders: buyer and recipient names, email addresses, phone numbers, social-media contact details, delivery addresses, pickup or delivery preferences, products and variations, quantities, dates, instructions, and promo-code use.
- Payments: order amounts, payment status, payment references, and the information visible in proof-of-payment images you upload. Bank or e-wallet payments take place outside this website; we do not ask for your banking password, PIN, or one-time code.
- Messages and subscriptions: contact-form details, inquiries, correspondence, your newsletter email, subscription choices, and records of signup or unsubscribe requests.
- Technical information: browser and device details, IP addresses and service logs, public-page visits, and browser storage used for sign-in, checkout, and preferences. Newsletter abuse prevention also uses a hashed IP identifier.
If you order for someone else, share their details only with their permission or another lawful basis. Please provide only information relevant to your order or request.
3. Sign in with Google
If you choose Google sign-in, Google shares your name, email address, profile picture, and Google account identifier with our authentication service, Supabase. We use these details to create or authenticate your TLB account and connect you to your account features and order history. Eligible sign-in methods with the same verified email may be linked to one account.
We do not receive your Google password or request access to your Gmail messages, contacts, or Google Drive files. Google account information is used for these account services, not sold or used for advertising. Signing in with Google does not subscribe you to our newsletter.
You can remove TLB’s Google access through your Google Account connections. Removing that connection does not itself delete your TLB account or order records; contact us to request deletion.
4. How we use information
We use information to manage accounts; accept, prepare, and fulfill orders; review payments; arrange pickup or delivery; apply promotions; send account and order updates; answer questions; handle changes or refunds; prevent misuse; understand website traffic; and meet applicable recordkeeping or legal obligations.
Depending on the activity, we process information to provide the service you request, comply with legal obligations, protect legitimate business and security interests, or act on your consent. Newsletter marketing is optional. Without information needed for an order, payment review, or delivery, we may be unable to provide that service.
7. Cookies and browser storage
The website uses browser storage to maintain sign-in sessions, remember your cart and checkout details, return you to the right page after sign-in, and remember newsletter preferences or that an invitation has already been shown. Saved checkout information can include details you enter before placing an order.
Google Analytics uses cookies and technical information to help us understand visits to public pages. Our integration excludes private order links and authentication callbacks, removes URL queries and fragments from reported page addresses, and does not intentionally send names, email addresses, payment proofs, or form contents. Advertising personalization is disabled in our integration. Read how Google uses information from partner sites.
You can clear or restrict cookies and site storage through your browser, and use Google’s Analytics opt-out browser add-on where supported. Clearing or blocking storage may sign you out or remove saved checkout details and preferences.
8. Security and retention
We use HTTPS, authenticated access, and access restrictions for account records and payment proofs. Access is limited according to the task being performed. No online service or method of storage can guarantee absolute security.
We retain account information while providing your account, and order, payment, and correspondence records as needed to fulfill orders, handle support or disputes, and meet applicable accounting and legal obligations. Subscription records are retained to manage consent and unsubscribe choices. Technical and security records are retained for service operation and abuse prevention.
Retention depends on the purpose of each record and any legal requirement to keep it. If you request deletion, we review which information can be removed and explain any information that must be retained. Deletion from backups may follow the service provider’s backup cycle. We do not promise automatic deletion of all order records when you sign out, unsubscribe, or disconnect Google.
9. Your rights and requests
Subject to applicable law, including the Philippine Data Privacy Act, you may request information about our processing, access to or a copy of your personal information, correction, deletion or blocking, and data portability where applicable. You may also object to processing or withdraw consent where consent is the basis for that processing.
Email tlbk.kitchen@gmail.com with your request and the email used for your account or order. We may ask for enough information to verify your identity before releasing or changing records. Do not send passwords or one-time codes. We will explain any applicable limits on your request, such as records we must keep by law.
You may also raise a concern with the Philippine National Privacy Commission.
10. Policy updates
We may update this policy when our services or data practices change. We will post the revised policy here with an updated date and provide any additional notice or request for consent required by law.