Privacy Policy

We collect information you provide directly, including your name, billing and shipping addresses, email address, phone number if supplied, order notes, and any support messages you send us.

When you place an order, our payment processor Stripe collects and processes your payment card details. We do not store full card numbers on our own servers.

We also collect technical and order-related data needed to run the storefront, such as cart contents, country selection, device and browser information, IP-derived location, and order history tied to your customer record.

We use your information to process and deliver orders, collect payment, prevent fraud, provide customer support, manage returns and exchanges, and send transactional messages about your order.

If you separately subscribe to marketing, we may use your email address to send promotional updates. We do not treat checkout as permission to send unrelated marketing.

We share personal information only with service providers and business partners that help us operate the store, including payment processors such as Stripe, shipping carriers, hosting providers, ecommerce infrastructure providers, and vendors that help us secure and maintain the site.

We may also disclose information when reasonably necessary to comply with law, respond to lawful requests, protect our rights, or investigate fraud or abuse.

We do not sell personal information for money.

We retain order and customer records for as long as reasonably necessary to fulfill purchases, manage returns, comply with tax, accounting, and legal obligations, resolve disputes, and enforce our agreements.

Support requests and fraud-prevention records may be retained for shorter or longer periods depending on the nature of the issue and our legal obligations.

Depending on where you live, you may have the right to request access to personal information we hold about you, request correction or deletion, ask for a portable copy of certain information, or object to certain processing.

California residents may have rights under the California Consumer Privacy Act, as amended by the CPRA. Visitors in the European Economic Area or United Kingdom may have rights under the GDPR or UK GDPR. We will review and respond to verified requests as required by applicable law.

To make a privacy request or opt out of marketing messages, contact us at noreply@breakfastbiscuit.com.

We use cookies and similar technologies that are necessary to keep carts, checkout state, storefront preferences, and fraud controls working properly.

With your permission, we also use Google Tag Manager and Google Analytics 4 to measure product views, cart activity, checkout progression, purchases, certain outbound link clicks, and media engagement. These analytics tools are optional and are not loaded until you accept analytics cookies through the storefront consent banner.

You can decline analytics cookies, or change your choice later using the Cookie Settings control in the storefront footer.

This storefront is intended for a general audience and is not directed to children under 13. We do not knowingly collect personal information directly from children under 13 through the storefront. If you believe a child has provided us personal information, contact us so we can review and delete it where appropriate.

Privacy questions, access requests, deletion requests, and marketing opt-out requests can be sent to noreply@breakfastbiscuit.com.

You may also message us on Instagram for general support, but email is the preferred channel for privacy matters.