This Privacy Policy explains how Golden Crust processes personal data through its website and related contact channels. It follows the data lifecycle from collection through use, disclosure, retention, and deletion.
Golden Crust processes contact details, inquiry content, order specifications, collection preferences, and any allergen information a user chooses to provide. The site also processes limited technical data needed to operate the website and respond to requests.
We receive data when a user completes the contact form, sends an email, calls, or places an order or preorder request. We also obtain server request metadata and browser or device information when the site is accessed.
The site uses essential cookies needed for basic operation and cookies that store privacy preferences. We do not confirm analytics or marketing cookies as active on this site.
We use cookies only for essential site operation and to remember privacy preferences. Users can manage cookies through their browser controls, and where a preference tool is available, they may update their selection there as well.
We use personal data to answer inquiries, manage contact form submissions, confirm order or collection details, handle preorder or subscription-related communications, maintain website security, and support the technical delivery of the site. Where a user provides allergen information or product preferences, we use it only to address that specific request and related service communication.
We may share data with service providers that help operate the website, deliver technical functions, or support communication handling. These recipients may process data only for the services they provide to us and are expected to handle it under appropriate confidentiality and security obligations.
We may disclose personal data to public authorities, courts, or other parties when required by law, to comply with a lawful request, or to protect the security and integrity of the website and records. Any such disclosure is limited to what is reasonably necessary for the stated purpose.
Privacy rights lifecycle
A person may ask whether we hold their data, request access to it, seek correction of inaccurate information, object to or restrict certain processing where the law allows, and request deletion when continued retention is not required. Some requests may be limited by legal duties, security needs, or the need to complete a transaction already in progress.
To process a rights request, we may need enough information to verify the requester and locate the relevant record. We will assess the request, respond through an appropriate service channel, and explain any limitation if the request cannot be fully satisfied.
We retain personal data for as long as it is needed to handle an inquiry, confirm an order, manage a collection or preorder request, maintain security, or meet legal and accounting obligations. When the relevant purpose ends, data is deleted, anonymized, or archived only where a continuing legal basis requires it.
If we make material changes, we will update the policy text on the website and use a reasonable method to draw attention to the revised version when appropriate. The effective date should be read together with the version then in force.
Use the contact channel that best matches the nature of the request, and include enough detail to identify the relevant interaction.
