Privacy Policy

The short version

We collect only what we need to bake your order, run your class, and stay in touch about it — nothing more. We never sell your data, never share it for advertising, never build marketing lists, and use no third-party trackers or pixels. That is a promise, not a policy we plan to change.

Who we are

Freshy's Baking Club, 7 Santiluk Rd, Chang Phueak, Chiang Mai, 50300 Thailand. If you have any question about your data, email us at hello@freshysbakingclub.com. We handle personal data in line with Thailand's Personal Data Protection Act (PDPA).

What we collect, and why

When you place an order, request a custom cake quote, or book a class, we collect:

• Your name and email address — used to identify your order and send you confirmations, payment details, and order updates. Email is how you access your order page.
• A contact method you choose — a phone number or a messaging handle (LINE, Instagram, or Facebook), used only to reach you about your order. If you connect your LINE account, we store your LINE user ID solely to send your order updates through LINE.
• Delivery details — if you choose delivery: your address, map location, and any notes you add, used only to deliver that order.
• Order details— things like a name or age for a cake inscription, allergy notes, or a gift recipient's name and contact for a voucher. For birthday classes, the child's first name and age, provided by you, used only to run the class.
• Payment proof — we take payment by bank transfer / PromptPay, so we never see or store card numbers. If you upload a transfer slip, it is stored with your order so we can confirm your payment.

That is the complete list. We do not collect anything else.

Cookies

We use two first-party cookies, and no advertising cookies:

• A session cookie that keeps you signed in to your order while you use the site.
• A first-visit attribution cookie (expires after 30 days) that remembers which link brought you to us — for example a social post — so that if you order, we know which of our posts actually helped. It contains no personal information and is never shared with anyone.

Your cart is stored in your own browser, not on our servers. There are no cross-site tracking cookies, no Facebook pixel, and no Google Analytics anywhere on this site.

Analytics

We use anonymous, cookie-free analytics to count page visits: a self-hosted Umami instance running on our own infrastructure, plus our hosting provider's aggregate traffic metrics. Neither identifies you personally, builds a profile of you, or shares data with advertisers.

Who touches your data

We never sell or share your data for marketing. Like any online shop, we rely on a few infrastructure providers to run the service — website hosting, our database, image storage, and email delivery — and they process data only on our behalf. If you choose LINE, Instagram, or Facebook as your contact method, your order messages travel through that platform, subject to its own terms. We also keep IP addresses briefly for abuse prevention (rate limiting), and nothing else.

Class photos

We only ever photograph class participants — including children — if you have explicitly ticked the photo consent box when booking. No consent, no photos. You can withdraw consent at any time by contacting us.

How long we keep it

Your details are kept as part of our order history, which we retain for bookkeeping and so we can help you with past orders. You can ask us to correct or delete your information at any time (see below).

Your rights

Under the PDPA you can ask us what data we hold about you, ask us to correct it, or ask us to delete it. Just email hello@freshysbakingclub.com and we'll sort it out — no forms, no fuss.

Changes to this policy

If we ever change how we handle your data, we'll update this page and the date at the top. The core promise — order data only, never sold, never used for advertising — will not change.