This Privacy Policy explains how Changhua Confections handles personal data when people use the website, contact us, or place bakery-related requests. It follows the data lifecycle from collection and use through disclosure, retention, and deletion.
This section outlines how information handling, individual rights, and support channels are addressed within this notice.
We may process name, email address, phone number if provided, inquiry message, order specifications, event date or collection preferences, and allergen information voluntarily provided. We also process server request metadata and browser and device information when the website is used.
Most data is provided through the contact form, email, phone, or in person at the bakery counter. Technical data is generated automatically when the site is accessed, and order-related details may be recorded when a request is reviewed or confirmed.
Essential cookies support basic site functions such as page delivery and form handling. Preference cookies remember privacy choices. We do not confirm analytics or marketing cookies as active on this site.
We use cookies only for essential site operation and to remember privacy preferences. Browser settings may be used to block or remove cookies, but some site functions may not work as intended if essential cookies are disabled.
We use personal data to respond to contact requests, review order specifications, confirm collection or delivery preferences, manage production scheduling, provide storage guidance where relevant, maintain website security, and deliver the site technically. If allergen information is provided, it is used only to review the specific order and current handling context.
We may share data with parties that help us operate the website, process messages, maintain technical delivery, or support security functions. These parties are expected to use the information only for the assigned purpose and to handle it under appropriate confidentiality and security obligations.
We may disclose personal data when required to comply with law, a valid legal process, or a binding request from a public authority. We may also disclose information where necessary to establish, exercise, or defend legal claims, or to protect the security and integrity of the website and our records.
Subject to legal limits, individuals may ask whether we hold their personal data, request correction of inaccurate information, ask for deletion where the data is no longer needed, or object to processing in limited situations. We may need to verify identity before acting on a request.
To make a privacy request, provide enough detail for us to identify the information involved and the action requested. We may ask for additional information to verify the request, explain any legal basis for refusal or limitation, and respond through a reasonable service channel.
We keep personal data only for as long as it is needed to handle an inquiry, prepare or confirm an order, maintain website security, meet accounting or recordkeeping obligations, or resolve a dispute. When the relevant purpose ends, data is deleted or anonymized where appropriate, subject to any legal requirement to retain it longer.
When we update this policy, we will post the revised version on the website and apply it from the stated effective date. If a change materially affects how we handle personal data, we will use a reasonable method to draw attention to it.
