Privacy Policy

At Elwood Bakery & Cafe (“we”, “us”, “our”), we are committed to protecting your personal information in accordance with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). This policy explains what information we collect, how we use it, and your rights regarding that information.

1. Information We Collect

When you place an order or make an enquiry through our website, we may collect the following personal information:

• Full name and contact details (email address, phone number)
• Order details (products, quantities, pickup date, special instructions)
• Payment information — processed securely by Stripe; we do not store your card details
• Communications you send us via our contact or enquiry forms

We also collect non-personally identifiable information automatically through cookies (see Section 6).

2. How We Use Your Information

We use your personal information to:

• Process and fulfil your order, including sending order confirmation and pickup reminders
• Respond to your questions and enquiries
• Comply with our legal and taxation obligations (we retain order records for 7 years as required by Australian tax law)
• Improve our website and services

We do not sell, rent, or share your personal information with third parties for their marketing purposes.

3. Third-Party Service Providers

We use trusted third-party services to operate our website and process payments. These providers may receive your personal information only to the extent necessary to perform their services:

• Stripe — secure payment processing. Subject to Stripe’s own Privacy Policy.
• SendGrid / WP Mail SMTP — transactional email delivery (order confirmations, enquiry responses)
• WooCommerce / WordPress — e-commerce and website platform, hosted on our own server

4. Data Storage and Security

Your data is stored on our privately managed server within Australia. We implement reasonable technical and organisational measures to protect your personal information from unauthorised access, disclosure, or loss. Payment card data is never stored on our servers — it is handled entirely by Stripe.

5. Cookies

Our website uses cookies to enable core functionality:

• WordPress session cookies — to keep you logged in if you have an account
• WooCommerce cart cookies — to remember items in your cart between page visits

These cookies do not track you across other websites and are not used for advertising. You can disable cookies in your browser settings, but this may prevent the cart and checkout from working correctly.

6. Accessing and Correcting Your Information

You have the right to access the personal information we hold about you and to request corrections. To make a request, contact us using the details below. We will respond within a reasonable time and at no charge.

7. Complaints

If you believe we have not handled your personal information in accordance with the Australian Privacy Act, you may lodge a complaint with us first. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

8. Changes to This Policy

We may update this Privacy Policy from time to time. The current version is always available on this page with the date of last update shown at the top.