Privacy policy

What we collect

• Order information: your name, email address, optional phone number, the box you ordered, your chosen pickup location, day and time, and any gift note you write.
• Payment information: card payments are processed by Square. Your full card number goes directly to Square and never touches or is stored on our systems. We receive a confirmation and the last few digits only.
• Technical information: like most websites, our hosting provider (Vercel) logs basic technical data (such as IP address and browser type) to keep the site secure and running.

How we use it

• To bake, schedule, and hand over your order — including sending your confirmation emails (sent via our email provider, Resend).
• To respond when you contact us.
• To meet our bookkeeping and tax obligations.

We do not sell your personal information, and we do not send marketing email unless you separately sign up for it.

Where it is stored

Order records are stored in our order database (Neon) and with the service providers named above. Some of these providers store data in the United States. We keep order records for as long as needed for business and tax record-keeping, then delete or anonymize them.

Your choices

Email orders@softspotcookies.com to ask what information we hold about you, to correct it, or to ask us to delete it (subject to records we must keep by law). We respond within 30 days.

Questions

Soft Spot, Pickering, Ontario — orders@softspotcookies.com