Privacy Policy

This Privacy Policy explains how Tatte ("we," "us," "our," or "the Company") collects, uses, discloses, and protects your personal information when you visit our website at bakerytatte.click, place orders, interact with our services, or otherwise engage with us. We are committed to protecting your privacy and handling your personal data with transparency, integrity, and respect.

Please read this Privacy Policy carefully. By accessing or using our website and services, you acknowledge that you have read, understood, and agree to the practices described herein. If you do not agree with this Privacy Policy, please discontinue your use of our website and services immediately.

This Privacy Policy applies to all users of our website, customers, and individuals who interact with Tatte in the United States. We comply with applicable United States federal and state privacy laws, including the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), the Federal Trade Commission (FTC) Act regarding unfair or deceptive practices, and other relevant regulations.

1. Who We Are

Tatte is a food business operating in the United States. We operate through our website at bakerytatte.click and provide bakery and food-related products and services to our customers. For the purposes of this Privacy Policy, Tatte acts as the data controller responsible for your personal information.

2. Information We Collect

We collect various types of information from and about you depending on how you interact with our website and services. The categories of information we collect are described in detail below.

2.1 Personal Identification Information

When you create an account, place an order, subscribe to our newsletter, contact us, or otherwise interact with our services, we may collect personal identification information, including but not limited to:

• Full name — to identify you and personalize your experience
• Email address — to send order confirmations, communications, and marketing messages (where you have opted in)
• Phone number — to contact you regarding your orders or for customer service purposes
• Billing and shipping address — to process and deliver your orders
• Payment information — including credit card details, debit card numbers, or other financial information processed through our secure payment processors (we do not store full card numbers on our servers)
• Username and password — when you create an account on our website
• Date of birth — to verify age requirements where applicable
• Dietary preferences and food allergy information — to help us serve you better and ensure your safety

2.2 Usage and Behavioral Data

We automatically collect certain information about how you interact with our website and services. This may include:

• Pages visited and the order in which you visit them
• Time and date of your visits
• Duration of your session and time spent on individual pages
• Links clicked and buttons pressed on our website
• Search queries entered on our website
• Products viewed, added to cart, or purchased
• Referral URLs — the website or source that directed you to bakerytatte.click
• Error logs and crash reports

2.3 Device and Technical Information

We collect technical information about the device and browser you use to access our website, including:

• IP address — which may be used to approximate your general geographic location
• Browser type and version (e.g., Chrome, Firefox, Safari)
• Operating system (e.g., Windows, macOS, iOS, Android)
• Device type (e.g., desktop, laptop, smartphone, tablet)
• Screen resolution and display settings
• Language settings
• Unique device identifiers
• Network connection information
• Cookie identifiers and similar tracking technologies

2.4 Cookie and Tracking Data

We use cookies, web beacons, pixel tags, and similar tracking technologies to collect information about your browsing behavior on our website. Cookies are small text files placed on your device that help us recognize you, remember your preferences, and provide a better user experience. For detailed information about the specific cookies we use and how to manage your preferences, please refer to our Cookie Policy.

2.5 Communications Data

When you contact us via email, phone, or through our website's contact form, we collect and retain the content of your communications, including:

• Customer service inquiries and our responses
• Feedback, reviews, and ratings you submit
• Survey responses
• Social media interactions when you engage with our official accounts

2.6 Information from Third Parties

We may also receive information about you from third-party sources, including:

• Social media platforms when you connect your account or log in using social sign-on features
• Analytics providers that help us understand website traffic and user behavior
• Marketing partners and advertising networks
• Payment processors who confirm transaction details
• Delivery and logistics partners

3. How We Use Your Information

We use the personal information we collect for a variety of legitimate business purposes. Below is a detailed explanation of the purposes for which we use your data:

3.1 Service Provision and Order Fulfillment

• Processing and fulfilling your food orders and purchases
• Creating and managing your customer account
• Processing payments and preventing fraudulent transactions
• Coordinating delivery or pickup of your orders
• Sending order confirmations, receipts, and shipping or delivery updates
• Handling returns, refunds, and exchanges
• Providing customer support and responding to your inquiries
• Accommodating dietary restrictions and food allergy information you have provided

3.2 Analytics and Website Improvement

• Analyzing how users interact with our website to improve functionality and design
• Monitoring website performance and identifying technical issues
• Understanding which products and services are most popular
• Conducting market research and customer satisfaction surveys
• Developing new menu items, products, and services based on customer behavior and feedback
• Generating aggregate, anonymized statistical reports about our user base

3.3 Marketing and Communications

• Sending promotional emails, newsletters, and special offers where you have opted in to receive such communications
• Notifying you about seasonal promotions, new menu items, and limited-time offers
• Personalizing the content and recommendations you see on our website
• Running loyalty and rewards programs
• Displaying targeted advertisements on our website and third-party platforms (subject to your preferences)
• Conducting A/B testing to improve marketing effectiveness

You may opt out of marketing communications at any time by clicking the "unsubscribe" link in any marketing email or by contacting us at [email protected]. Please note that even if you opt out of marketing communications, we may still send you transactional emails related to your orders and account.

3.4 Legal Compliance and Safety

• Complying with applicable federal and state laws and regulations
• Responding to lawful requests from law enforcement and regulatory authorities
• Detecting, preventing, and investigating fraud, security breaches, and other illegal activities
• Enforcing our Terms of Service and other legal agreements
• Protecting the rights, property, and safety of Tatte, our customers, and others
• Resolving disputes and defending against legal claims

3.5 Business Operations

• Managing our internal business operations, including inventory and supply chain management
• Training our staff and improving our food safety practices
• Conducting internal audits and quality assurance processes
• Evaluating and completing potential mergers, acquisitions, or business transfers

4. How We Share Your Information

We do not sell your personal information to third parties. However, we may share your information with certain third parties in the following circumstances:

4.1 Service Providers and Business Partners

We share personal information with trusted third-party service providers who assist us in operating our business. These service providers are contractually required to use your information only for the purposes we specify and to implement appropriate security measures. Such service providers include:

• Payment processors — to securely handle payment transactions
• Delivery and logistics companies — to fulfill and deliver your orders
• Cloud hosting and IT service providers — to host and maintain our website and data infrastructure
• Email marketing platforms — to send newsletters and promotional communications
• Analytics providers (e.g., Google Analytics) — to help us understand website usage patterns
• Customer support platforms — to manage and respond to customer inquiries
• Fraud detection and security services — to protect against unauthorized transactions

4.2 Legal Requirements and Law Enforcement

We may disclose your personal information if required to do so by law or in response to valid legal process, including:

• Court orders, subpoenas, or legal proceedings
• Requests from law enforcement agencies or government authorities
• Compliance with mandatory reporting requirements under applicable federal or state law
• Protection of the legal rights and interests of Tatte in litigation or other legal proceedings

4.3 Business Transfers

In the event that Tatte undergoes a merger, acquisition, sale of all or a portion of its assets, reorganization, or bankruptcy proceeding, your personal information may be transferred as part of that transaction. We will notify you of any such change in ownership or control of your personal information, and the successor entity will be required to honor the commitments made in this Privacy Policy or provide you with notice of any material changes.

4.4 With Your Consent

We may share your personal information with other third parties when you have given us explicit consent to do so, such as when you participate in third-party promotions, sweepstakes, or collaborative events hosted with our partners.

4.5 Aggregated and Anonymized Data

We may share aggregated, anonymized, or de-identified information with third parties for research, marketing, analytics, and other business purposes. This type of data cannot reasonably be used to identify you personally.

5. Data Security

We take the security of your personal information seriously and implement a range of technical, administrative, and physical safeguards designed to protect your data from unauthorized access, disclosure, alteration, or destruction. Our security measures include, but are not limited to:

• SSL/TLS encryption — all data transmitted between your browser and our website is encrypted using industry-standard Secure Socket Layer (SSL) technology
• Secure payment processing — payment card information is processed through PCI-DSS compliant payment processors and is not stored on our servers in unencrypted form
• Access controls — access to personal information is restricted to authorized employees and contractors who need it to perform their job functions
• Regular security assessments — we conduct periodic security reviews and vulnerability testing of our systems
• Data minimization — we collect only the personal information necessary for the purposes described in this Privacy Policy
• Employee training — our staff receive regular training on data protection and privacy best practices
• Incident response plan — we maintain a documented plan for responding to data security incidents and breaches

6. Your Privacy Rights

Depending on your state of residence in the United States, you may have certain rights regarding your personal information. We are committed to honoring these rights and making it easy for you to exercise them.

6.1 Rights Under the California Consumer Privacy Act (CCPA/CPRA)

If you are a resident of California, you have the following rights under the CCPA as amended by the CPRA:

• Right to Know: You have the right to request information about the categories and specific pieces of personal information we have collected about you, the categories of sources from which we collected it, the purposes for which we collected it, and the categories of third parties with whom we have shared it.
• Right to Access: You have the right to obtain a copy of the specific personal information we have collected about you during the past 12 months.
• Right to Delete: You have the right to request that we delete personal information we have collected from you, subject to certain legal exceptions.
• Right to Correct: You have the right to request correction of inaccurate personal information that we maintain about you.
• Right to Opt-Out of Sale or Sharing: You have the right to opt out of the sale or sharing of your personal information for cross-context behavioral advertising. We do not sell your personal information, but you may opt out of certain sharing for advertising purposes.
• Right to Limit Use of Sensitive Personal Information: You have the right to limit our use of sensitive personal information (such as dietary restrictions and health-related data) to what is necessary to provide our services.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your privacy rights. You will not receive different prices, quality of service, or any other penalty for exercising your rights under the CCPA/CPRA.

6.2 General Privacy Rights for All US Residents

Regardless of your state of residence, we provide all users with the following rights:

• Right to Access Your Data: You may request a copy of the personal information we hold about you.
• Right to Rectification: You may request that we correct or update any inaccurate or incomplete personal information.
• Right to Erasure: You may request that we delete your personal information where there is no legitimate reason for us to continue processing it.
• Right to Data Portability: You may request that we provide your personal data in a structured, commonly used, machine-readable format so you can transfer it to another service provider.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to the withdrawal.
• Right to Opt-Out of Marketing: You may opt out of receiving marketing communications from us at any time.

6.3 How to Exercise Your Rights

To exercise any of the rights described above, please submit a verifiable request to us using one of the following methods:

• Email: [email protected]
• Website: bakerytatte.click (via our Contact Us page)

When you submit a request, we will need to verify your identity before processing it to protect your privacy and security. We may ask you to provide information that matches the records we have on file for you. We will respond to your request within 45 days of receipt. If we need additional time, we will notify you of the extension and the reasons for it.

You may designate an authorized agent to submit requests on your behalf. If you use an authorized agent, we may require written proof of the agent's authorization and may verify your identity directly with you.

7. Cookie Usage

Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyze website traffic, and deliver personalized content and advertising. Cookies are small text files stored on your device that help us recognize you when you return to our website.

We use the following types of cookies:

• Strictly Necessary Cookies: These are essential for the website to function properly, including enabling secure login, shopping cart functionality, and payment processing. These cookies cannot be disabled.
• Performance and Analytics Cookies: These help us understand how visitors interact with our website by collecting and reporting information anonymously.
• Functionality Cookies: These remember your preferences and settings to provide a more personalized experience.
• Marketing and Advertising Cookies: These track your online activity to help deliver more relevant advertising to you, with your consent.

You can manage your cookie preferences through your browser settings or through our cookie consent tool on the website. Please note that disabling certain cookies may affect the functionality of our website. For full details about the cookies we use, the purposes for which we use them, and how to control your cookie preferences, please read our Cookie Policy.

8. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes for which it was collected, to comply with our legal obligations, resolve disputes, and enforce our agreements. The specific retention periods vary depending on the type of information and the purpose for which it is used:

When your personal information is no longer needed for the purposes outlined above, we will securely delete or anonymize it. In some cases, we may retain anonymized data indefinitely for statistical and research purposes, as it can no longer be used to identify you.

9. Children's Privacy

We are committed to protecting the privacy of minors. Our website and services are not directed to children under the age of 18, and we do not knowingly solicit or collect personal information from children under 18 years of age without verifiable parental or guardian consent.

If you are a parent or guardian and believe that your child under the age of 18 has provided us with personal information without your consent, please contact us immediately at [email protected]. Upon receiving such a request, we will take appropriate steps to promptly delete the relevant information from our records.

If we discover that we have inadvertently collected personal information from a child under 18, we will delete such information as quickly as possible. We encourage parents and guardians to monitor their children's internet usage and to help enforce this Privacy Policy by instructing their children not to provide personal information on our website without parental permission.

10. International Data Transfers

Tatte is based in the United States and our services are primarily directed at users within the United States. Your personal information is collected and processed in the United States, where data protection laws may differ from those in your country of residence.

If you are accessing our website from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States. By using our website and services, you consent to the transfer of your information to the United States and acknowledge that your information will be subject to United States privacy laws.

We take appropriate steps to ensure that any international transfers of personal data are carried out in compliance with applicable laws and that adequate protections are in place to safeguard your personal information during such transfers. These protections may include:

• Entering into data processing agreements with our international service providers that include appropriate data transfer mechanisms
• Implementing Standard Contractual Clauses (SCCs) where required
• Ensuring that any third-party service providers outside the US provide equivalent levels of data protection

11. Third-Party Links and Services

Our website may contain links to third-party websites, applications, or services that are not owned or controlled by Tatte. We have no control over the privacy practices of these third-party sites and are not responsible for their content or privacy policies. When you click on a link to a third-party website, you will leave our website and be subject to that third party's terms and privacy policy.

We encourage you to review the privacy policies of any third-party websites you visit. This Privacy Policy applies solely to information collected by Tatte through our website at bakerytatte.click and our related services.

We may also integrate third-party services into our website, such as social media sharing buttons, embedded maps, payment gateways, and analytics tools. These third-party services may collect information about you when you interact with them, even if you do not directly interact with those features. We recommend reviewing the privacy policies of all third-party services we integrate.

12. Do Not Track Signals

Some browsers include a "Do Not Track" (DNT) feature that signals to websites that you do not want your online activity tracked. Currently, there is no universally accepted standard for how websites should respond to DNT signals, and our website does not currently respond to DNT browser signals in a standardized way.

However, you can control tracking through our cookie consent tool, your browser settings, and by opting out of specific advertising networks. We are committed to providing you with meaningful choices about how your data is used and will continue to evaluate and implement appropriate responses to user privacy preferences as industry standards evolve.

13. Your Choices and Opt-Out Options

We respect your ability to make choices about your personal information. You have the following options to control how we use your data:

• Marketing Emails: You can unsubscribe from our marketing emails by clicking the "Unsubscribe" link in any marketing email, or by contacting us at [email protected].
• Account Information: You can update or correct your account information by logging into your account on our website or by contacting our customer support team.
• Cookies: You can manage cookie preferences through your browser settings or our cookie consent tool. Disabling certain cookies may limit some features of our website.
• Advertising: You can opt out of interest-based advertising through the Digital Advertising Alliance (DAA) opt-out tool at optout.aboutads.info or the Network Advertising Initiative (NAI) opt-out at optout.networkadvertising.org.
• Data Deletion: You can request deletion of your personal information by contacting us using the information provided in this Privacy Policy.

14. How to File a Complaint

If you have concerns about how we handle your personal information and you are not satisfied with our response, you have the right to file a complaint with the appropriate regulatory authority.

14.1 California Residents

California residents may file a complaint with the California Privacy Protection Agency (CPPA), which is the regulatory body responsible for enforcing the CCPA/CPRA:

• California Privacy Protection Agency (CPPA)
• Website: cppa.ca.gov
• Email: [email protected]

14.2 Federal Complaints

For complaints related to deceptive or unfair business practices, including privacy violations, you may file a complaint with the Federal Trade Commission (FTC):

• Federal Trade Commission (FTC)
• Website: reportfraud.ftc.gov
• Phone: 1-877-FTC-HELP (1-877-382-4357)

14.3 State Attorney General Offices

Many states have attorney general offices that handle consumer privacy complaints. You may contact your state's attorney general office to file a complaint or seek guidance about your privacy rights under state law.

Before filing a complaint with a regulatory authority, we encourage you to contact us first so that we have the opportunity to address your concerns directly. We take all privacy complaints seriously and will make every effort to resolve your concerns promptly.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our business practices, legal requirements, or technological developments. When we make material changes to this Privacy Policy, we will:

• Post the revised Privacy Policy on our website at bakerytatte.click with a new "Last Updated" date
• Send an email notification to registered users if the changes are significant
• Display a prominent notice on our website for a reasonable period after the update

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of our website and services after any changes to this Privacy Policy constitutes your acceptance of the updated policy.

If you disagree with any changes to this Privacy Policy, you may close your account and discontinue use of our services. You may also exercise your rights to access, correct, or delete your personal information as described in this Privacy Policy.

16. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please do not hesitate to contact us. We are committed to addressing your privacy concerns promptly and transparently.

Our privacy team will respond to your inquiry within a reasonable timeframe. For requests related to your privacy rights under the CCPA/CPRA or other applicable laws, we will respond within 45 days as required by law.

When contacting us about privacy matters, please include your full name, email address, and a clear description of your request or concern so that we can process your inquiry efficiently and verify your identity where necessary.

This Privacy Policy was last updated on July 18, 2026, and is effective as of the same date.