Privacy Policy

The short version: we collect only what we need to bake and deliver your order and reply to your messages, we never sell or share your details for marketing, and this website uses no tracking cookies. The full version is below — in plain English.

Who we are

This website is operated by Sammy's Brezels, a home-based bakery in Rangiora, New Zealand. For anything related to this policy or your personal information, please use the contact form.

What we collect, and why

  • Orders — your name, email address, phone number, delivery address (for delivery orders) and the details of what you ordered. We need these to bake your order, deliver or hand it over, and send you an order confirmation by email. Orders are stored securely in our order system.
  • Payments — handled entirely by Stripe, our payment provider. Your card details are entered on Stripe’s secure checkout and never touch this website. See Stripe’s privacy policy.
  • Custom order & quote requests — your contact details and what you’re planning, so we can reply with a quote.
  • Contact form — your name, email address and message, so we can reply.
  • Your cart — lives only in your own browser until you check out; it never leaves your device beforehand.
  • Technical information — when you submit a form, your IP address is used for spam protection and briefly held in a counter that limits automated submissions. These counters are purged automatically.

Cookies

This website sets no tracking or advertising cookies, which is why you won’t see a cookie banner.

Analytics

To understand how the site is used, we use Umami — a privacy-friendly analytics tool. It is cookieless, collects no personal information, anonymises visits, and cannot track you across other websites.

Third-party services

  • Stripe — payment processing (see above).
  • Cloudflare Turnstile — protects our forms from bots. It processes limited technical signals from your browser (such as your IP address) under Cloudflare’s privacy policy.
  • Email delivery — order confirmations and form messages reach us and you through a standard email provider.
  • Hosting — this website is hosted in New Zealand.

How long we keep it

Order records are kept as long as New Zealand business and tax record-keeping rules require. Messages from the contact and quote forms are kept as normal business records. Anti-spam counters holding IP addresses are purged automatically, typically within an hour.

Your rights

Under the New Zealand Privacy Act 2020 you may ask for a copy of the personal information we hold about you and ask for it to be corrected or deleted — just use the contact form. If you’re not happy with how we handle your information, you can complain to the Office of the Privacy Commissioner at privacy.org.nz.

Changes to this policy

If this policy changes, the updated version will be published on this page with a new date below.

Last updated: 7 July 2026