Privacy Policy
How V’s Cookies and Treats collects, uses, and protects customer information and data from connected services.
Information We Collect
When you submit an inquiry or manage an order, we may collect your name, email address, phone number, event details, fulfillment preferences, venue information, design notes, and inspiration images. We also receive basic technical information needed to operate and secure the website.
How We Use Information
We use your information to review requests, prepare quotes, communicate about your order, coordinate pickup or delivery, provide customer support, maintain business records, and protect the website from misuse. We do not sell your personal information.
How Information Is Shared
Information may be shared with service providers that help us host the website, store submitted files, send communications, and operate the ordering process. We may also disclose information when required by law or when necessary to protect our rights, customers, or business.
Storage and Retention
We keep information only as long as reasonably needed to provide services, maintain order and tax records, resolve disputes, and meet legal obligations. Reasonable administrative, technical, and organizational safeguards are used, but no online system can guarantee absolute security.
Your Choices
You may ask to review, correct, or delete personal information we hold about you, subject to legal and recordkeeping requirements. You may also choose not to provide optional information, although some details are necessary for us to evaluate or fulfill an order.
Google Account Connection
The website includes a staff-only Gmail connection so authorized bakery staff can send business emails from the bakery’s chosen Google account. Customers do not need to connect a Google account to submit an inquiry or place an order. With the account holder’s permission, we access the connected Google account’s email address and request permission to send email on its behalf through the Gmail API. We use the email address to identify the sender and the sending permission to deliver inquiry responses, invoice links, order updates, pickup instructions, reminders, and staff-approved messages. This connection does not request permission to read the inbox or retrieve existing messages, contacts, or calendars. We never receive the Google account password.
Google Data Storage & Sharing
We store the connected sender’s email address, an encrypted authorization refresh token, and connection status information to maintain the approved email service. We also keep business correspondence and delivery records, including recipient addresses, message content, delivery status, and message identifiers, as needed to operate and support orders. Email content and recipient information are sent to Google for delivery. Our hosting and database providers process stored information to operate the website. We do not sell Google user data or transfer it for advertising, data brokerage, credit decisions, or lending. Access and sharing are limited to the authorized email service, necessary service providers acting on our behalf with the account holder’s consent, security purposes, or legal obligations. We do not use Google user data to train generalized artificial intelligence or machine-learning models.
Google API Limited Use
V’s Cookies and Treats’ use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is used only to provide or improve the email features described here. Human access to Google user data is limited to the account holder’s affirmative agreement for specific data, necessary security investigations, legal requirements, or aggregated and anonymized internal operations permitted by that policy.
Disconnecting & Deleting Google Data
Authorized staff can disconnect Gmail from the admin Email page, which removes the saved connection credentials from the website’s active database and stops its use of that connection. The account holder can also revoke the app’s permission in Google Account connections. Disconnecting or revoking access does not automatically erase existing orders, business correspondence, or delivery records. To request deletion of stored Google account information or associated records, contact us using the privacy contact option below. We review and remove information that is no longer needed, subject to applicable legal, accounting, security, and recordkeeping obligations. Copies held by Google are governed by Google’s own policies and account controls.
Text Messaging
Text messaging is optional. If you consent, V’s Cookies and Treats may send order-related texts and receive your replies through Twilio. We store your phone number, consent records, message history, delivery information, and opt-out status to operate this service. Twilio processes phone numbers and message content to deliver these communications. We do not sell or share mobile numbers or SMS consent data for third-party marketing. Reply STOP to opt out or HELP for help. Message frequency varies, and message and data rates may apply. You may still place an order without agreeing to text messages.
Questions About Privacy
For a privacy question or request, contact V’s Cookies and Treats through our inquiry form. Please do not include sensitive personal information that is not needed for your request.