**Privacy Policy**
**Chef Connie Bakes**
**Effective Date: October 14, 2026**
**Last Updated: October 14, 2026**
Chef Connie Bakes (“we,” “us,” or “our”) operates the website https://chefconniebakes.com and related services for ordering and inquiring about our handcrafted baked goods, including Texas Gold and custom items. We are based in Fort Worth, Texas. This Privacy Policy explains how we collect, use, disclose, and protect personal information when you visit our site, contact us, or place an order.
By using our website or services, you agree to this Policy. If you do not agree, please do not use the site.
### 1. Categories of Data We Collect
We collect the following categories of personal information:
– **Identifiers and Contact Information**: Name, email address, phone number, mailing or shipping address, and similar details you provide via contact forms, order forms, email (chef@chefconniebakes.com), or social channels.
– **Commercial Information**: Order details, product preferences, quantities, special instructions, and transaction records (including limited payment-related data processed by third-party payment processors if applicable).
– **Internet or Electronic Network Activity**: IP address, browser type, device information, operating system, pages visited, referring URLs, and approximate location derived from IP.
– **Communication Data**: Messages, inquiries, and correspondence you send us.
– **Inferences**: Limited preferences or interests inferred solely to fulfill orders or respond to inquiries (we do not create detailed consumer profiles for advertising).
We do not knowingly collect sensitive personal information (such as precise geolocation, health data, or government IDs) beyond what is necessary for order fulfillment. We do not knowingly collect personal information from children under 16.
### 2. Legal Bases for Processing
We process personal information based on the following legal bases:
– **Contractual Necessity**: To fulfill orders, process payments, arrange shipping, and provide customer service.
– **Legitimate Interests**: To operate, secure, and improve our website; respond to inquiries; prevent fraud; and maintain business records.
– **Consent**: Where required (for example, for non-essential cookies or marketing communications). You may withdraw consent at any time.
– **Legal Obligation**: To comply with applicable laws, tax requirements, or legal process.
For users in the European Economic Area (EEA), United Kingdom, or Switzerland, we rely on these bases under the GDPR and equivalent laws.
### 3. Cookies and Similar Technologies
We and our service providers use cookies and similar technologies:
– **Strictly Necessary Cookies**: Required for site functionality, security (including bot protection), form submission, and load balancing. These cannot be disabled without impairing the site.
– **Analytics Cookies** (if used): To understand aggregate traffic and improve the site. Data is typically anonymized or aggregated.
– **Third-Party Cookies**: May be set by hosting, security, analytics, or embedded content providers.
You can control cookies through your browser settings. Blocking necessary cookies may limit site functionality. We do not use cookies for cross-site behavioral advertising.
### 4. How We Share Information (Third-Party Sharing)
We do not sell personal information. We share information only as follows:
– **Service Providers**: Hosting, security, email, shipping carriers, and payment processors (who handle payment data under their own terms and PCI-DSS standards). These parties process data only on our instructions and under confidentiality obligations.
– **Legal and Safety**: When required by law, court order, or to protect rights, property, or safety.
– **Business Transfers**: In connection with a merger, sale, or reorganization (with appropriate notice).
– **With Your Direction**: When you request us to share information (for example, with a gift recipient).
We do not share personal information with third parties for their independent marketing purposes.
### 5. Your Rights
Depending on your location, you may have the following rights:
– **Access**: Request a copy of the personal information we hold about you.
– **Correction**: Request correction of inaccurate or incomplete information.
– **Deletion**: Request deletion of your personal information, subject to legal exceptions (for example, tax or order records we must retain).
– **Portability**: Receive your information in a structured, commonly used format (where applicable under GDPR).
– **Restriction or Objection**: Restrict or object to certain processing.
– **Opt-Out of Sale/Sharing**: We do not sell personal information. California residents may opt out of any future “sharing” for cross-context behavioral advertising (we currently do not engage in this).
– **Non-Discrimination**: We will not discriminate against you for exercising rights.
To exercise rights, email chef@chefconniebakes.com with sufficient detail to verify your identity. We will respond within the timeframes required by applicable law (typically 45 days under CCPA, or one month under GDPR, extendable as permitted). Authorized agents may submit requests with proof of authorization.
### 6. Retention Periods
We retain personal information only as long as necessary:
– Order and transaction records: typically 3–7 years for tax, accounting, and legal compliance.
– Contact and inquiry data: until the inquiry is resolved plus a reasonable period, or until you request deletion.
– Technical logs and security data: generally 30–90 days, or longer if needed for security investigations.
– Marketing data (if any): until you unsubscribe or request deletion.
We delete or anonymize information when no longer needed.
### 7. Security Measures
We implement reasonable administrative, technical, and physical safeguards, including:
– Encrypted connections (HTTPS/TLS).
– Access controls limiting employee and vendor access to personal information.
– Secure hosting and regular security monitoring.
– Use of reputable third-party providers with their own security standards.
No method of transmission or storage is 100% secure. We cannot guarantee absolute security.
### 8. Breach Notification Procedures
If we become aware of a security incident that compromises personal information, we will:
– Investigate promptly and take steps to contain and mitigate the incident.
– Notify affected individuals and regulators as required by applicable law (for example, within 72 hours under GDPR where feasible, or as required by U.S. state laws).
– Provide information about the nature of the incident, data involved, and steps individuals can take.
### 9. International Transfers
Our operations are based in the United States. If you access the site from outside the U.S. (including the EEA/UK), your information may be transferred to and processed in the United States. We rely on appropriate safeguards such as Standard Contractual Clauses or equivalent mechanisms where required by GDPR or other laws. By using the site, you acknowledge such transfers.
California residents: We comply with the CCPA/CPRA. You have the rights described in Section 5. We do not sell or share personal information for cross-context behavioral advertising.
### 10. Contact Information
For privacy questions, requests, or concerns, contact:
**Chef Connie Bakes**
Email: chef@chefconniebakes.com
Mail: 5340 Trinity River Trail #2635, Fort Worth, TX 76114
### 11. Severability
If any provision of this Privacy Policy is found to be invalid or unenforceable, the remaining provisions will continue in full force and effect.
### 12. Jurisdiction and Governing Law
This Privacy Policy and any disputes arising from it are governed by the laws of the State of Texas, United States, without regard to conflict-of-law principles. Exclusive jurisdiction for disputes lies in the state or federal courts located in Tarrant County, Texas, except where prohibited by applicable consumer protection law.
### 13. Changes to This Policy and Revision History
We may update this Privacy Policy from time to time. Material changes will be posted on this page with an updated “Effective Date” and “Last Updated” date. Continued use of the site after changes constitutes acceptance of the revised Policy.
**Revision History**
– October 14, 2026: Initial publication.