Privacy Policy

Herlinda's (“we,” “us,” “our”) operates herlindas.com. This policy explains what information we collect from customers, how we use it, who helps us run the site, and the choices you have.

Information we collect

• Name, email address, and (optionally, at checkout) phone number.
• Delivery address, only if you choose local delivery.
• Order history, order contents, and any notes you add to an order.
• Payment card details are entered directly with Stripe, our payment processor — we do not receive or store your full card number.
• If you choose reminders: which reminders you chose, the email address you chose them with, and a record of when and how you turned each one on or off (in your account, from an unsubscribe link, or from your device). We also keep a record of the reminders we sent you (the type, the week, and whether it was delivered to the email or notification service).
• If you turn on notifications on a phone or computer: the notification address and encryption keys your browser gives us for that device, and when it last worked. We do not store your device name or model.

How we use it

• To take, prepare, and fulfill your order (pickup or local delivery).
• To send you order confirmations, pickup/delivery updates, and receipts. These are part of your order and are sent whether or not you choose reminders.
• To let you sign in and view your order history if you create an account.
• Only if you choose them: to send you the reminders you picked (see “Optional reminders” below).
• We do not sell your personal information, and we do not use it for advertising by other companies.

Optional reminders

Reminders are off unless you turn them on, in your account under “Reminders.” You can choose any of:

• An email when the weekly menu is live (about once a week).
• A phone or computer notification when the menu is live.
• A “last call” notification on the day orders close for the week — up to three that day (morning, late afternoon, and evening).
• A re-order email if it has been a while since your last order — at most about once a month.

How we decide when to send:

• For re-order emails we look at the date of your last paid order. That is the only use of your order history for reminders. We do not build profiles about you, and we do not combine it with anything from outside our site.
• We do not send a last call or re-order reminder for a week in which you have already placed an order, and last-call notifications stop as soon as you order.
• We send reminders at daytime hours, Central Time: the menu email or notification and the re-order email around 9:30 AM, and the last-call notifications around 9:30 AM, 5:00 PM, and 9:30 PM on the day orders close. We never send them overnight.
• Reminder emails say why you are receiving them, include our pickup address, a link to manage your reminders, and an unsubscribe link.

Stopping reminders (unsubscribe)

• Email: the “Unsubscribe” link in any reminder email (or your mail app’s unsubscribe button) stops all reminder emails — both the weekly-menu email and the re-order email. You can also change it any time in your account.
• Notifications on a device: these are managed separately. Turn them off in your account’s Reminders page (“Turn off on this device”), or in your browser’s or phone’s notification settings. Unsubscribing from emails does not turn off notifications, and turning off notifications does not unsubscribe you from emails.
• Unsubscribing never affects order confirmations, receipts, or account emails (such as a sign-in link).
• We keep a record of your choice so that we honor it.

Service providers who process your information on our behalf

Running this website means some of your information passes through the providers we use to operate it:

• Stripe — processes your payment.
• Supabase — hosts our customer database and handles account sign-in, including sending account-related emails (such as a sign-in link) and, if you choose it, signing in with your Google account.
• Resend — sends our emails: transactional emails such as order confirmations and pickup/delivery updates, and, only if you opted in, reminder emails. Resend receives your email address and the content of the message in order to deliver it.
• Browser and phone notification services — if you turn on notifications on a device, the notification is delivered through the service run by your browser’s or phone’s maker (for example Google, Apple, Mozilla, or Microsoft). Notifications are encrypted for your device; the service delivers them and sees delivery information such as your device’s notification address, not who you are. Our notifications never contain your name or order details.
• Google — if you choose “Continue with Google” to sign in, Google shares your name and email address with us to create or match your account. We never see or store your Google password.
• Google Maps — to plan the driving route for local deliveries, we send the delivery street address (only the address, not your name or contact details) to Google’s routing service.
• Vercel — hosts the website itself; standard web request data (like your IP address) passes through it to load the site, as with any website.
• Vercel Web Analytics and Speed Insights — privacy-friendly measurement of which pages are visited and how fast they load. They do not use cookies and do not collect your name, email address, or any account or order information. We do not record visits to your account, order, or unsubscribe pages or to staff pages, and we remove everything after the “?” in page addresses before they are recorded.

We do not sell your information, and we don’t share it with anyone beyond what’s needed to run the site, fulfill your order, and send the messages you asked for, and as required by law. We do not use a third-party delivery service — local delivery is fulfilled directly by Herlinda's.

Our pickup address

Our pickup address is published on our Pickup & Delivery page and appears in reminder emails (the law requires a physical address in marketing email). Pickup is for orders that have been placed; we are a home bakery, not a walk-in shop.

How long we keep it

• Orders and account records: for as long as reasonably necessary for order fulfillment, accounting, legal, fraud-prevention, and other business-record purposes.
• Reminder choices, consent history, device notification information, and the record of reminders sent: for as long as your account exists. When your account is deleted, they are deleted with it.
• A do-not-email record: if an email address bounces permanently or reports one of our messages as unwanted, we keep that address (and only the address) on a do-not-email list so we do not keep emailing it. This is kept even if an account is deleted, so the block stays in place.
• When you delete your account, we delete your profile, saved addresses, product requests, reminder choices, and device notification information. Your past orders are kept as business records (the items, amounts, and dates, and the city and ZIP code of a delivery) with your name, email address, phone number, delivery street address, and any note you added removed, and the copies of the order emails we stored are cleared. Menu suggestions you sent are kept, without your name or email. Any store credit or reward points are lost with the account. We ask you to finish or cancel any order in progress, and to cancel any Bake Club membership, before you delete your account.
• Our email provider keeps its own delivery records under its own policy.

Your choices

• You can update your account information, and change or stop any reminder, at any time by signing in.
• You can unsubscribe from reminder emails with the link in any of them.
• You can delete your account yourself in your account’s security settings, or ask us to delete it, or ask for a copy of your data, by contacting us at hello@conamorbyher.com.

Changes to this policy

If we change how we use your information we will update this page and the date above. We will not start sending you reminders you did not choose.

Contact

Questions about this policy: hello@conamorbyher.com.