Your information, handled with care.

Your ad choice

We use Meta’s tools to measure and improve our ads on Facebook and Instagram. You can turn that off for this browser here.

What we collect

When you order

• Your name, email address and, if you give it, your phone number.
• Your pickup day and location, what you ordered and the total.
• Payment details from Square: the card brand, the last four digits, the payment status and a link to your Square receipt. Your full card number, expiry date and security code go straight to Square and never reach us.
• If you pay with Apple Pay or Google Pay, the name, email and phone number you choose to share from your wallet.

When you browse

• The pages you visit, the bakes you look at or add to your order, when you start checking out, and when you complete a purchase.
• Your IP address, browser and device type, and the page that sent you to us.
• Identifiers stored in Meta’s cookies on breadz.us (named _fbp and _fbc), including the click ID added when you arrive from one of our ads.
• Visit statistics from Cloudflare Web Analytics: the page, the site that referred you, your browser, device type, country and how quickly the page loaded. It uses no cookies and doesn’t follow you to other websites. We only see totals, never individual visitors.

Stored on your device

• Your basket and any checkout in progress, kept in your browser’s storage so your order survives a reload.
• Meta’s cookies, described above, unless you opt out.
• A cookie remembering your ad choice, if you make one.

How we use it

• To bake your order, have it ready at pickup and contact you about it.
• To take payment, issue refunds and keep the records a business needs for accounting and taxes.
• To keep the site and checkout secure and prevent duplicate or fraudulent orders.
• To count visits and see which pages people use and how fast they load.
• To measure how our Facebook and Instagram ads perform and to show our ads to people likely to enjoy our bakes.

Advertising with Meta

breadz.us uses the Meta Pixel in your browser and Meta’s Conversions API from our server. Both send Meta the browsing and purchase activity listed above, together with your IP address, browser details and Meta’s cookie identifiers.

The pixel can also read the name, email and phone number you type into our order form. When you complete a purchase, our server sends Meta your email, phone number and name in hashed form. Hashing is a one-way scramble, so Meta can match the purchase to an account without receiving the plain text. We also send the items and the order value.

Meta uses this information to tell us which ads led to visits and orders, to help us reach people likely to be interested, and for the purposes described in Meta’s Privacy Policy. Virginia law calls this targeted advertising, and you can opt out of it.

Who we share it with

• Square, to process payments and refunds.
• Cloudflare, which hosts the website, counts visits, stores our order records and delivers our order emails.
• Meta, for advertising as described above.
• Apple or Google, if you choose to pay with their wallet.

We don’t sell your personal information for money. We may disclose information if the law requires it, or to protect our customers or our business from fraud.

Your choices

• Opt out of targeted advertising with the switch at the top of this page. It applies to this browser.
• Global Privacy Control. If your browser sends this signal, we treat it as an opt-out automatically.
• Meta settings. You can review how Meta uses activity from other websites in your Meta ad preferences.
• Cookies. You can block or delete cookies in your browser settings. The site still works, but your basket may not be remembered.

Your rights

You can ask us to confirm whether we have your personal information, give you a copy, correct it, or delete it. You can also opt out of targeted advertising. Email privacy@breadz.us from the address you used to order so we can confirm it’s you.

We’ll respond within 45 days. If we decline your request, you can appeal by replying with “Appeal” in the subject line, and we’ll answer within 60 days. If you’re still not satisfied, you can contact the Virginia Attorney General. We won’t treat you differently for using any of these rights.

We may still keep information we’re required to keep, such as records of a sale for tax purposes.

How long we keep it

We keep order and checkout records for as long as we need them to run the bakery, handle refunds and meet tax and accounting requirements, and then delete them. Information on your device stays until you clear it. Meta keeps what it receives under its own policy.

Security and children

The whole site runs over an encrypted connection. Card payments are handled entirely by Square, and our order dashboard is protected by a password. No website is perfectly secure, but we take care with what you share with us.

breadz.us is not meant for children under 13, and we don’t knowingly collect their information.

Changes and contact

If we change how we handle your information, we’ll update this page and the date at the top.

Questions? Email privacy@breadz.us.
Breadz · Zahrah Hafee · Oakton, Virginia