Legal
Privacy Policy
What data we collect, how we use it, and how you can control it.
Last updated: August 2026
Who we are
Breadbox is an Australian marketplace platform. We take your privacy seriously and follow Australian Privacy Principles under the Privacy Act 1988.
What we collect
When you use Breadbox, we collect:
- Account info: name, email address, password (hashed)
- Location: suburb (customer) or business address (baker)
- Preferences: bread types, dietary values
- Order history: what you have ordered, from whom, when
- Payment info: handled by Stripe — we never see your card details
- Baker documents: Food Safety Supervisor certificate (bakers only)
- Communications: messages sent through order chat
How we use it
We use your data to run the platform: match customers with nearby bakers, process orders, facilitate payments, send order-related emails, and improve the service. We do not sell your data to third parties.
Who we share with
Data is shared with these service providers as needed:
- Supabase (database, authentication)
- Stripe (payments, subscription billing)
- Vercel (hosting)
- Resend (transactional emails)
When you order, we share your name, delivery address (if delivery), and order details with the baker. When bakers accept orders, we may share their contact info with you.
How we protect it
All data is encrypted in transit (HTTPS) and at rest. Passwords are hashed. Payment card data is never stored on our servers. Access to production data is limited to authorized personnel.
Your rights
You can:
- Access your data (email us for a copy)
- Update your account info at any time
- Delete your account (email hello@breadbox.com)
- Opt out of marketing emails
Cookies
We use essential cookies for authentication and site functionality. We do not use tracking cookies or third-party advertising cookies.
Data retention
We retain account data as long as your account is active. If you delete your account, we retain order history for 7 years to meet Australian tax and financial record-keeping requirements, then delete it.
Changes to this policy
We may update this policy occasionally. Material changes will be emailed to registered users. Continued use after changes constitutes acceptance.
Contact
Privacy questions? Email privacy@breadbox.com.