Privacy
Privacy policy
Version 2026-10-01 · Effective Thursday, October 1
Notice at collection. When you place an order or send a message we collect your name, email address, optional phone number, what you ordered and any note you add, plus the IP address the form came from. We use it to fill your order, contact you about it, and keep a record of the sale. We do not sell or share it. Full detail below.
Who we are and what this covers
This policy covers Laosy Sweets, a home bakery in Rancho-Fontana, California, and the website at laosysweets.com. It covers the information this website collects. It does not cover Instagram, Facebook or any other platform you reach from a link here — those are separate services with their own policies, and we do not control what they collect.
What we collect
| Category | Examples | Where it comes from | Required? |
|---|---|---|---|
| Identifiers | Name, email address, phone number | You, via the order or contact form | Name and email yes; phone optional |
| Order information | Kit quantity, whether you collect or ask for drop-off, delivery address if you asked for drop-off, notes, allergies you mention | You, via the order form | Quantity yes; the rest optional |
| Marketing preference | Whether you opted in to drop announcements | You, via a checkbox that starts unticked | No |
| Technical data | IP address attached to a form submission, server logs | Automatically, from your request | Automatic |
We do not collect payment card numbers. Card details never reach this site — payments are arranged outside it, and if a card processor is used the card data goes directly to that processor under its own terms.
Allergy notes you send us can reveal health information. We collect it only so we can bake safely for you, we use it only for that, and it is not sold or shared.
Why we use it
- To hold, bake, confirm and hand over your order.
- To contact you about your order — confirmations, pick-up changes, payment arrangements.
- To send drop announcements, only if you ticked that box. Every email has a one-click unsubscribe.
- To keep a record of sales, which a small food business is expected to do.
- To keep the forms free of spam, and to protect the site.
We do not use your information for automated decision-making, and we do not build advertising profiles.
Who else sees it
| Who | What they get | Why |
|---|---|---|
| DreamHost (hosting) | The website and its data files, including the order records stored on their server | To serve the site and keep the records |
| Our email provider | Your email address and the contents of the notification | To send your confirmation and, if you opted in, drop announcements |
| A payment service, if one is used | Your contact details and amount due | To collect payment for your order |
| Instagram / Meta | Nothing from us — but if you follow a link here, they see you arrived and apply their own policy | Cross-promotion you choose to click |
We do not sell your personal information, and we do not share it for cross-context behavioural advertising. There is nothing to opt out of on that front, and we would rather say so plainly than bury it.
Cookies, analytics and tracking
This site sets no cookies of its own and needs none — the order and contact forms work without cookies, and the CSRF tokens in the forms are not cookie-bound. No analytics or advertising scripts run on this site. If that ever changes, this section will name the provider and this policy will be re-dated and re-versioned first. We honour browser Do Not Track and Global Privacy Control signals, which is straightforward when there is nothing to track.
How long we keep it
- Orders: kept for the current and following calendar year, then deleted. Sales records may be kept longer where tax or permit rules require it.
- Messages: kept for 12 months after the last reply, then deleted.
- Drop list: kept until you unsubscribe. Unsubscribing removes the address from the list.
- Server logs: rotated by the host on their standard schedule, typically within 30 days.
Security
Data is transmitted over HTTPS and stored in files on the hosting account, not in a public database; the order, message and subscriber files are blocked from the web by server rules. Nothing on the internet is perfectly secure. If a breach ever affects your information, we will notify you and the relevant authorities as California law requires (Civil Code §§ 1798.29 and 1798.82).
Your California privacy rights
California law gives you the right to know what personal information we hold, to see it, to have it corrected, to have it deleted, to limit the use of sensitive personal information, and to be free from discrimination for exercising any of those rights. There is no sale or sharing of personal information here, so there is nothing to opt out of. Sensitive information — an allergy note, for example — is used only to fulfil your order and for no other purpose.
To exercise any of these, use the contact form or email us at the address below. We will confirm within 10 business days and complete the request within 45 days. You may use an authorised agent; we may ask for proof of authorisation. We will ask for enough information to verify it is really you, and no more.
California's "Shine the Light" law (Civil Code § 1798.83) also gives you the right to ask about disclosure of personal information to third parties for their direct marketing. We do not disclose personal information for anyone else's direct marketing.
Children
This site is not directed at children, and we do not knowingly collect information from anyone under 13. Orders are placed by adults. If you believe a child has sent us information, contact us and we will delete it.
Changes to this policy
If this policy changes, the version number at the top and the effective date both change. Material changes will be noted on the drop list, and the changes will be live before they apply to new orders. The terms of service and pick-up and refund policy are separate documents.
Contact
Laosy Sweets
Rancho-Fontana, California
Privacy and data requests: contact form or anny@laosysweets.com
This policy is written in plain language and is not legal advice.