Privacy Policy.
A short, honest description of what we collect, who handles it, and how to make us forget it. Last updated .
Who we are
Belvedere Cookies is a sole-proprietor bakery based in Brentwood, Los Angeles, California. The "we" / "us" / "our" in this policy means Belvedere Cookies. This policy covers belvederecookies.com, the email letters we send, and the few service providers listed below.
What we collect and why
| What | When | Why |
|---|---|---|
| Email address | You subscribe to the newsletter | To send The Bakery Journal on Friday mornings |
| Name, email, subject, message | You write through the contact form | To read your note and reply |
| IP address, browser, requested page, referrer and timestamp | You load a page | Deliver the website, protect it from abuse and measure aggregate performance |
| Page views, referrers, browser and device information, approximate location, visitor and session identifiers | You allow optional analytics | Understand website usage through Google Analytics 4 and Cloudflare Monitoring and improve the website |
| Name, email, phone, selected items, pickup date and market, order/payment references and payment status | You place an online order | To process payment, prepare your order, arrange pickup and handle refunds |
| Device fingerprint (Turnstile) | You submit a form | Spam and bot prevention only |
We do not request precise GPS location, biometrics or government IDs. Analytics providers may derive approximate location, such as a city or region, from your IP address. Payment-card details are entered directly into Square's payment form; our order database does not store full card numbers or CVV.
Service providers we use
We are a small operation. To run the website, ordering and email, we rely on the service providers below. They handle information under their own published privacy commitments; Square also processes information for its payment, fraud-prevention and legal obligations.
| Service | What it does | What it sees |
|---|---|---|
| Cloudflare Pages (hosting) | Serves the website from Cloudflare's global network. | IP address, browser type, requested page, timestamp. |
| Cloudflare Web Analytics | Cookieless aggregate traffic and performance measurements. | Country, browser, page view, referrer, performance metrics. |
| Cloudflare Zaraz and Monitoring | Manages analytics preferences, forwards permitted analytics events and measures website usage. | Your consent choice and, when analytics is allowed, visited pages, referrers, browser/device information, IP address and visitor identifiers. |
| Google Analytics 4 (via Cloudflare Zaraz) | Reports website visits and usage when you allow analytics. | Page URLs, referrers, browser/device information, visitor and session identifiers and approximate location. An IP address may be transmitted for processing; Google states that GA4 does not log or store individual IP addresses. See Google's Privacy Policy and Analytics data safeguards. |
| Cloudflare Turnstile (captcha) | Spam/bot filter on contact, newsletter and checkout forms. | IP, browser signals, a short-lived bot-score cookie. |
| Google Workspace | Hosts our [email protected] inbox. | The contents of incoming email and standard mail headers. |
| Resend (via Amazon SES) | Sends the newsletter and contact-form replies, and stores the subscriber list. | Email address, mail open/click events, basic delivery telemetry. |
| Square | Processes online and market payments, orders and refunds. | Payment details entered into Square’s secure form, buyer contact details, ordered items, pickup details and transaction information. See Square’s privacy notice. |
| Cloudflare D1 | Stores checkout reservations and order records. | Buyer contact details, ordered items, pickup information, payment references and payment status. No full card numbers or CVV. |
| Google Fonts | Loads typefaces. | Your IP address when the font CSS is requested. |
All of the above are headquartered in the United States. Where data is processed in other regions, the providers apply Standard Contractual Clauses or equivalent protections.
Office treats & corporate gifts
When you request a quote through Belvedere Cookies for Business, we receive your name, work email, company, occasion, preferred date (if provided), pastry preference, estimated quantity (if provided), and pickup or delivery preference. For a delivery request, we also ask for a ZIP code. You may include a budget and additional notes. These details are sent to us via Resend and used to reply, check availability, and prepare your quote.
If you proceed with an order, we may ask by email for the recipient and fulfilment details needed to prepare it. Please only share recipient information you are authorised to provide. An inquiry does not subscribe you to our newsletter. Order records may be retained where US tax law requires it.
Optional analytics and your choices
Google Analytics 4 and Cloudflare Monitoring are optional and are managed through Cloudflare Zaraz. The Analytics checkbox may initially appear selected, but this alone does not grant permission. Confirm saves the checkbox's current state; Reject declines optional analytics. Browsing, scrolling or closing the notice does not grant permission. You can place an order without allowing analytics.
Use Privacy settings here or in the footer to review your choice. To withdraw permission, select Reject, or uncheck Analytics and select Confirm. A saved choice applies to that browser; clearing cookies or using another browser may cause the notice to appear again. Withdrawal does not delete information already processed. Contact us about access or deletion requests.
If the preferences panel cannot load, you can block optional browser storage and clear existing site cookies in your browser settings. Our contact address below is available for privacy requests.
Cookies and similar technologies
We use essential storage for security, your cart, checkout and your privacy choice. If you allow analytics, Zaraz also sets first-party analytics cookies. The current storage includes:
| Cookie / item | Set by | Purpose | Duration |
|---|---|---|---|
zaraz-consent | Cloudflare Zaraz | Remembers whether you accepted or rejected optional analytics. | Up to 1 year; updated when you save a choice |
cfz_google-analytics_v4 | Cloudflare Zaraz for Google Analytics 4 | Remembers an analytics visitor identifier after permission. | Up to 1 year; expiry may renew with use |
cfzs_google-analytics_v4 | Cloudflare Zaraz for Google Analytics 4 | Maintains analytics session information after permission. | Browser session |
cfz_zaraz-analytics | Cloudflare Monitoring | Remembers an analytics visitor identifier after permission. | Up to 1 year; expiry may renew with use |
__cf_bm | Cloudflare | Distinguish humans from bots (anti-abuse). | 30 minutes |
cf_clearance | Cloudflare | Set only after passing a security challenge. | Up to 30 days |
belvedere_checkout | Belvedere Cookies | Securely connects your browser to your checkout and order status. | 24 hours |
belvedere-cart-v1 (local storage) | Belvedere Cookies | Remembers selected boxes and quantities, without contact or payment details. | Until the order completes or you clear browser storage |
belvedere-checkout (session storage) | Belvedere Cookies | Recovers an interrupted checkout using its reference. | Until completion or the browser tab closes |
| Turnstile in-page tokens | Cloudflare Turnstile | Single-use captcha proof for one form submission. | Cleared on submit |
Rejecting optional analytics does not disable essential cart, checkout or preference storage. Square may use additional payment-related browser storage when its payment form is loaded, as described in its privacy notice. Cookie lifetimes are separate from the retention of analytics records already sent to a provider.
Honor of Global Privacy Control
Our site treats the Global Privacy Control signal as a valid opt-out of sale or sharing under California law. We do not sell or share personal information in the first place, but if you send the GPC header we will respect it.
How long we keep things
- Newsletter subscribers: until you unsubscribe. Unsubscribed addresses are retained for a short period to honor the opt-out, then deleted.
- Online order records: retained for fulfilment, customer service, accounting and applicable legal obligations. You can contact us to request access or deletion; some transaction records may need to be retained.
- Contact-form messages: up to 24 months in our inbox, then deleted.
- Optional analytics: retained according to our configured Google Analytics and Cloudflare retention settings. Cookie expiry does not automatically delete previously collected reports; contact us with an access or deletion request.
- Server logs (IP, request): short-rolling retention at Cloudflare per their data-handling policy (typically less than 7 days for raw logs; anonymized analytics longer).
Your rights
Regardless of where you live, you can write to [email protected] and ask us to:
- Tell you what information we hold about you.
- Correct anything that is wrong.
- Delete your information.
- Send you a copy of your data in a portable format.
- Stop using your information for anything you have not asked for.
We respond within 30 days. Requests are free and we will not discriminate against you for making one.
For California residents (CCPA / CPRA)
Under California law you have the rights listed above plus:
- The right to know which categories of personal information we have collected, the sources, the purposes, and any third parties we shared them with (we summarise this in the tables above).
- The right to opt out of the sale or sharing of personal information. We do not sell or share personal information for cross-context behavioural advertising, monetary value, or otherwise.
- The right to limit the use of sensitive personal information. We do not knowingly collect sensitive personal information.
- The right to non-discrimination for exercising any privacy right.
- The right to designate an authorized agent to act on your behalf. Send a written authorization signed by you (a phone photo is fine).
To verify a request we may ask you to confirm an email address that matches the one we hold. We do not use the request itself for any purpose other than handling it.
Children
The site is not directed at children under 13 and we do not knowingly collect personal information from them. If you believe a child has subscribed, email us and we will remove the address right away.
Security
The site is served over HTTPS only. Newsletter subscriber data is stored encrypted at Resend and Pages secrets are encrypted at rest at Cloudflare. We use double opt-in for the newsletter so a stranger cannot sign you up without access to your inbox. We store order and payment references and payment status, but never full card numbers or CVV. Square handles card entry and processing.
International visitors
We operate in the United States. Our providers may process information in the United States and other countries, as described in their privacy notices and applicable contractual protections.
Changes
If we change anything material we will update the "last updated" date and, where appropriate, mention it in the next newsletter. Continued use of the site does not grant permission for optional analytics.
Contact
Questions, requests, complaints. Write to [email protected]. We read everything.