Privacy Policy

What we collect

• Your first name and mobile number, when you join the text list.
• A record of your consent— the date and time, the exact wording that was on the screen when you agreed, the page you agreed on, your browser's user agent, and a one-way hashed form of your IP address. We keep this because US text-message law requires us to be able to show that you asked to hear from us. The hash cannot be turned back into your IP address.
• Your order details, once ordering from a drop goes live: what you ordered, the amount, and the name and number you gave for pickup.
• A record of messages we send you and whether they were delivered, so we can tell whether an announcement reached you.

We do not collect your location. We never see or store your card details: card payment is not live on this site yet, and when it is, Square will handle it on their own systems.

Why we collect it

To text you before a drop opens, to take and prepare your order, and to hand you the right box at pickup. That is all. We do not build profiles, run ads, or use your information to reach you about anything other than Sweets by Mariela.

We do not sell or share your information

We do not sell, rent, or share your phone number or any personal information with third parties for their own marketing purposes. Your consent to receive text messages is never shared with anyone else.

The only companies that handle your information are the ones we need to run the bakery, and each of them only sees what their job requires:

• Twilio — sends and receives the text messages.
• Square — will process payments once card checkout goes live. They handle your card details directly; we never receive them.
• Vercel and Neon — host the website and its database.

Text messages and how to stop them

Reply STOP to any message and we will stop texting you. It takes effect immediately and does not need a reason. Reply START if you ever want to come back, or HELP for help. Message and data rates may apply, and message frequency varies. The full message-program terms are on our Terms page.

How long we keep it

We keep your subscription and consent record for as long as you are on the list, and for a period afterwards if you opt out — an opt-out record is how we make sure we never text you again by mistake. Order records are kept for our own bookkeeping.

Getting a copy, or getting removed

Ask us for a copy of what we hold about you, or ask us to delete it, and we will. If you are a Connecticut resident, the Connecticut Data Privacy Act gives you the right to access, correct, delete and obtain a portable copy of your personal data, and to appeal if we turn a request down. We honour those rights for everyone who asks, wherever you live.

Email us at sweetsbymariela@gmail.com.

Children

This is not a service for children. We do not knowingly collect information from anyone under 13, and we will delete it if we find that we have.

Changes

If we change how any of this works, we will update this page and the date at the top. If the change is significant and affects the text messages you receive, we will tell you in a message first.