This privacy policy explains how Sweet Artisan processes personal data on worldcaferice.click in connection with enquiries, orders, collection arrangements, and website use. It follows the data lifecycle from collection through use, disclosure, retention, and deletion.
This section outlines how information handling, individual rights, and support channels are addressed within this notice.
Depending on how you use the site, we may process your name, email address, phone number if you provide it, inquiry message, order specifications, event date or collection preferences, and allergen information you choose to share. We also process limited technical data such as server request metadata and browser or device information to keep the site functioning and secure.
We receive data from you when you submit a contact form, place or discuss an order, ask about collection or production timing, or provide allergen details for a specific request. Some technical data is generated automatically when you visit the website or interact with its pages.
The cookies we confirm are essential cookies for operation and cookies used to store privacy preferences. These support technical delivery, form handling, and the retention of your chosen settings. We do not confirm analytics or marketing cookies as active on this site.
We use cookies only for essential site operation and to remember privacy preferences. If your browser blocks cookies, some functions may not work as intended. Where a preference control is available, it should be used to manage non-essential settings, but we do not currently state that analytics or advertising cookies are active.
We use personal data to respond to enquiries, confirm order details, manage collection or delivery arrangements, review allergen information you choose to provide, support website security, and maintain technical delivery. We also use limited data to keep records of completed interactions and to handle follow-up communication where needed for the service.
We may share data with service providers that help us operate the website, manage communications, or support technical delivery. These recipients are expected to use the data only for the services they provide to us and to handle it under appropriate confidentiality and security obligations.
We may disclose personal data when required by law, when needed to protect our rights or the security of the website, or when necessary to complete a transaction or respond to a valid request. Any disclosure is limited to what is relevant for that purpose.
You may have rights to know what data we hold, to request correction of inaccurate details, to ask for deletion where appropriate, and to object to or limit certain processing. Some requests may not be available if we must keep information for legal, security, or transaction-related reasons. We assess each request in context and respond according to the applicable rules.
To exercise a privacy right, send a clear request through one of the contact channels listed in this policy and describe the data or activity concerned. We may ask for information needed to verify your identity and to locate the relevant records. If a request cannot be fully granted, we will explain the reason where the law requires us to do so.
We retain personal data according to its purpose and lifecycle. Enquiry records are kept while we are handling the request and for a reasonable period afterward for follow-up or recordkeeping. Order-related information is retained for production, collection, service, and accounting needs, then deleted or archived when it is no longer needed. Technical logs are kept only as long as necessary for security, troubleshooting, and operational review.
If we make material changes, we will update the policy text and use a reasonable method to draw attention to the revised version. The date or version reference may be adjusted so that the current notice remains clear and traceable.
Where GDPR applies, Sweet Artisan acts as the controller for the personal data described in this policy. Processing is based on operational needs, communication with customers, website security, and any legal obligations that apply to the handling of orders, enquiries, and related records.
Because the website serves users in the European Union context, GDPR principles are applied where they are relevant to the processing of personal data.
Where GDPR applies, you may ask for access, correction, deletion, restriction, objection, or portability of your personal data, subject to legal limits and the nature of the request. We may need to verify identity before acting on a request and may retain certain records where the law requires it or where they are needed to complete a transaction or resolve a dispute.
