Privacy Policy

Ruach Bakery (“we”, “our”, or “us”) operates the website ruachbakery.com and any associated order and contact forms. This Privacy Policy explains how we collect, use, disclose and safeguard your personal information when you visit our website or place an order inquiry with us. Please read this policy carefully. If you disagree with its terms, please discontinue use of our website.

1. Information We Collect

We may collect the following categories of personal information:

• Identification data: first name, last name, email address, and phone number provided when you submit an order inquiry or contact form.
• Event details: occasion type, event date, guest count, budget range, and special requests you share with us.
• Communication records: emails, WhatsApp messages, and any other correspondence you initiate with us.
• Technical data: IP address, browser type, device information, pages visited, and time spent on our website — collected automatically via cookies and analytics tools.
• Payment data: when you make a payment, our payment processor (Stripe) handles all card data directly. We do not store full card numbers on our servers.

2. How We Use Your Information

We use the information we collect for the following purposes:

• To respond to order inquiries and provide custom quotes tailored to your event.
• To communicate with you throughout the ordering and fulfillment process.
• To process payments securely through our payment provider.
• To send you relevant updates about your order, including confirmations and delivery or collection details.
• To improve our website, services, and customer experience.
• To comply with applicable legal obligations.

We will never sell, rent, or trade your personal information to third parties for their own marketing purposes.

3. Cookies

Our website uses cookies — small text files placed on your device — to enhance your browsing experience and collect analytics data. Types of cookies we use include:

• Essential cookies: necessary for core website functionality (e.g. session management).
• Analytics cookies: help us understand how visitors interact with our website (via Google Analytics).
• Preference cookies: remember your settings and preferences on return visits.

You may adjust your browser settings to refuse cookies at any time. Please note that disabling certain cookies may affect the functionality of our website.

4. Third-Party Services

We work with the following trusted third-party service providers:

• Stripe — our payment processing partner. All payment transactions are encrypted and handled by Stripe in compliance with PCI-DSS standards. Stripe's privacy policy is available at stripe.com/privacy.
• Google Analytics — we use Google Analytics to analyse website traffic and usage patterns. Google may store and process data in accordance with their privacy policy at policies.google.com/privacy. You can opt out via the Google Analytics opt-out browser add-on.
• Nodemailer / email service providers — used to send confirmation and inquiry emails. Emails are transmitted securely.

These service providers have their own privacy policies and we encourage you to review them. We are not responsible for the privacy practices of third-party websites linked from our site.

5. Data Retention

We retain your personal information only for as long as necessary to fulfil the purposes described in this policy, unless a longer retention period is required or permitted by law. Specifically:

• Order and inquiry records are retained for up to 3 years for business record-keeping and tax purposes.
• Marketing communications (if opted in) are retained until you unsubscribe.
• Analytics data is retained in aggregated, anonymised form indefinitely.

When your data is no longer required, we will securely delete or anonymise it.

6. Your Rights

Depending on your location and applicable law, you may have the following rights regarding your personal data:

• Right of access — to request a copy of the personal data we hold about you.
• Right to rectification — to request correction of inaccurate or incomplete data.
• Right to erasure — to request deletion of your personal data in certain circumstances.
• Right to restrict processing — to request that we limit how we use your data.
• Right to data portability — to receive your data in a portable format.
• Right to object — to object to processing based on legitimate interests or direct marketing.

To exercise any of these rights, please contact us using the details below. We will respond to your request within 30 days.

7. Data Security

We implement commercially reasonable technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

8. Children's Privacy

Our website is not directed to children under the age of 13. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately and we will take prompt action to delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will indicate the date of the most recent revision at the top of this page. We encourage you to review this policy periodically. Continued use of our website after any changes constitutes your acceptance of the updated policy.

10. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, please contact us: