This privacy notice explains how Sweet Artisan handles personal data when you visit the website, send a message, or place an order. It applies to the website and to contact and order handling connected with the bakery in Naples.
Depending on how you use the site, we may process your name, email address, phone number if you provide it, message content, order specifications, event date or collection preferences, and allergen information you choose to share. We also process basic technical data such as server request metadata and browser or device information.
We receive personal data when you contact us through the form, by email, by phone, or in person at the bakery counter. Some technical data is generated automatically when you visit the website or submit a form.
The site uses essential cookies for basic operation and cookies that store privacy choices. We do not confirm the use of analytics or marketing cookies on this website.
We use only essential cookies and cookies that remember privacy preferences. You can block or delete cookies in your browser, but some site functions may not work as intended if essential cookies are disabled.
We process personal data to answer enquiries, confirm orders, manage collection or delivery arrangements, handle production scheduling, provide ingredient and allergen information you request, support website security, and maintain technical delivery. We may also use data to meet legal, accounting, or recordkeeping duties.
Where we use outside support for hosting, technical maintenance, or similar operational tasks, those parties receive only the data needed to perform their role. They are expected to handle the data under appropriate confidentiality and security obligations.
We may share personal data with service providers that help us operate the website, manage technical delivery, or respond to enquiries. We may also disclose data if required by law, to protect our rights, or to address security or fraud concerns. We do not state that any marketing or analytics partner is active.
You may have rights to know what we hold, to correct inaccurate details, to ask for deletion in appropriate cases, and to object to or limit certain processing. If you believe a request has not been handled correctly, you may raise the issue again through the contact channels in this policy.
To exercise your rights, send a clear request using one of the contact channels listed below and describe the data or issue involved. We may ask for enough information to verify your identity and to locate the relevant record before we respond.
Enquiry records are kept for the time needed to respond and manage follow-up. Order and customer records are kept for the period needed to complete the service, handle accounting or legal obligations, and resolve disputes. When data is no longer needed, we delete it or make it anonymous where that is appropriate.
If we make material changes, we will update the policy on the website and use a suitable notice method when the change affects how we process personal data. The date of the latest version should be checked before you submit new information.
Where the GDPR applies, we process personal data only on a lawful basis and only for the purposes described in this policy. The relevant basis may depend on the type of request, the order, or the technical function involved.
Where the GDPR applies, you may ask to access, correct, delete, restrict, or object to certain processing, and you may request data portability where the law allows it. You may also withdraw consent where processing is based on consent, without affecting earlier lawful processing.
