Elizabete Artisan Bakery + Coffee Shoppe®
Elizabete Bakery Company LLC
Last Updated: September 25, 2026
Your privacy matters to us. This Privacy Policy explains what information we collect when you visit our website, place an order, interact with Maia our virtual assistant, or contact us, and how we protect it. It covers Elizabete Bakery Company LLC, operating as Elizabete Artisan Bakery + Coffee Shoppe® (“we,” “us,” or “our”), and applies to our website at www.elizabetebakery.com, our online ordering platform at order.elizabetebakery.com, our online cookie shop at shop.elizabetebakery.com, our virtual assistant Maia, our voice assistant, our SMS and WhatsApp customer care, and our email newsletter. By using our website or services, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use our services.
Elizabete Artisan Bakery + Coffee Shoppe® is a registered trademark of Elizabete Bakery Company LLC. The brand holds two USPTO trademark registrations filed April 28, 2023 under the same design mark: Registration No. 8043191 (Serial No. 97913629, Class 043, Restaurant and Hotel Services, registered November 25, 2025) and Registration No. 7755516 (Serial No. 97979657, Class 030, Bakery goods and confectionery, registered April 8, 2025). Both registrations are live and active on the USPTO Principal Register. Elizabete Bakery Company LLC is a Florida limited liability company (EIN: 92-3669765) with a registered mailing address at 11555 Heron Bay Blvd, Suite 200, Coral Springs, FL 33076. We operate as a Cottage Food operation under Florida Statute §500.80, serving the residential community of Parkland, Florida. You may contact us at info@elizabetebakery.com or www.elizabetebakery.com.
Name, email address, phone number, and delivery address when placing an order through our online ordering platform at order.elizabetebakery.com.
Name, email address, billing and shipping address, and phone number when placing an order through our online cookie shop at shop.elizabetebakery.com, operated on the Shopify platform. Payment data at the shop is processed exclusively by Shopify’s PCI-compliant checkout and is never stored on our servers.
Payment information entered during checkout. Payment data is processed exclusively by Toast, Inc. and is never stored on our servers.
Phone number when you voluntarily provide it to Maia, our virtual assistant, to receive a customer care response via SMS.
Messages and inquiries you send to Maia through our website chat, by SMS, on WhatsApp or on our voice line.
Email address when you sign up for our newsletter on our website or in our online cookie shop, or when you check the box at checkout to receive news and offers.
Website usage data including pages visited, time spent, browser type, and referring URLs, collected through Jetpack (WordPress.com analytics) and Google Analytics 4 (see Section 9.3).
Cookie and tracking data as described in our Cookie Policy at www.elizabetebakery.com/cookie-policy.
Voice call data when you call our voice assistant at +1 (561) 246-6945. Nothing you say is transcribed unless and until you press 1 to accept the notice described in Section 4.2. If you do accept, the audio of your call is processed in real time by VAPI Inc. and Deepgram Inc. solely to produce a written transcript and is not recorded or stored as audio, and the resulting transcript and call logs are retained as described in Sections 4.2 and 11.
Connection identifiers, such as your IP address, when you use the website chat, used only to limit the rate and length of messages and to protect the service from abuse.
We use the personal information we collect for the following purposes:
To process and fulfill your orders, including scheduling delivery and communicating about order status.
To respond to customer service inquiries and escalate requests to our team via SMS.
To operate and improve Maia, our AI-powered virtual assistant.
To send you service communications related to your orders and inquiries.
To reply by SMS to the customer-care inquiries you have agreed to receive replies about.
To analyze website traffic and improve our online presence.
To comply with applicable legal obligations under Florida law and federal law.
To enforce our Terms and Conditions and protect our legal rights.
To protect our services from abuse, including limiting the rate and length of messages sent to Maia.
To review the quality of Maia’s answers and to follow up on conversations where a customer still needs help.
To send our email newsletter to people who have signed up for it.
Before you send your first message, the chat shows you a notice and asks you to accept it. When you open the chat window on www.elizabetebakery.com, the widget displays a notice telling you three things: that Maia is an artificial intelligence assistant and not a person; that what you write is processed by an external provider, Anthropic, PBC, which automatically deletes it within 30 days unless it must keep it longer to enforce its Usage Policy or to comply with the law; and that a member of our team may read your conversation when your inquiry needs a human answer and to review the quality of our service. The message box stays disabled until you accept. After you accept, the chat first asks you to choose what you need, and the message box becomes available once you choose. If you do not accept, no message is sent and no conversation data is created. When you accept, we record the acceptance in our durable consent record with the date and time, your IP address, your browser user agent, the page you were on, the language shown to you, and the version identifier of the notice you were shown, so that we can establish which text you agreed to.
Maia is embedded on our website at www.elizabetebakery.com and powered by the Anthropic Claude API. When you interact with the chatbot, your messages are processed by the commercial API of Anthropic, PBC, under Anthropic’s Commercial Terms of Service and Data Processing Addendum. Under those terms, Anthropic may not train its models on the content of these conversations, and it may access that content for safety and security purposes. Anthropic automatically deletes conversation data within 30 days of receipt, except where it must keep it longer to enforce its Usage Policy or to comply with the law, in which case it may keep it for up to two years, and the trust and safety classification scores associated with a flagged conversation for up to seven years.
Maia keeps the most recent messages of your conversation, up to ten, in temporary memory on our own server so that it can follow the thread. On SMS and WhatsApp this memory is linked to your phone number, and on the website chat to your chat session. It is not saved to any database and is lost whenever the server restarts. Separately, we keep a short log of each conversation, with what you wrote, Maia’s reply, the channel, the time, your phone number or chat session identifier, and your name if you gave it, for up to 7 days, so that our team can review the quality of our service and follow up where you still need help. Twice a day that log is summarized through the same Anthropic API described above, and the summary is sent to our team by text message. The log is stored in our Upstash database and is deleted automatically after 7 days. Our automation software also keeps a technical record of each processing step, which can include message content and phone numbers, for 14 days so that we can diagnose errors, and then deletes it automatically.
When a customer inquiry requires escalation to our team, Maia requests the customer’s phone number. That information (your phone number and, where provided, your name, email, and a copy of your recent chat messages) is temporarily stored in a managed Upstash Redis database, whose account is owned and operated by Elizabete Bakery Company LLC, with connections encrypted in transit. It is automatically deleted after 7 days and used solely to deliver our team’s response. Our database provider also keeps a daily backup, which is replaced after one day.
Maia is available as a voice assistant at +1 (561) 246-6945.
Your call is not answered by Maia. It is answered first by Twilio Inc., our telephony provider. Before you are connected to Maia, and before any part of your call is transcribed, Twilio asks you to choose a language and then plays you a notice in the language you chose.
Step one, the language menu. As soon as the call connects, Twilio says, in English: “Thank you for calling Elizabete Artisan Bakery and Coffee Shoppe. For English, press 1.” If you do not press a key, it then says, in Spanish, “Para español, marque 2,” and then, in Portuguese, “Para português, prima 3.” You may press 1, 2 or 3 at any point during this menu; you do not have to wait for your own language to be offered. If you press nothing at all, or press a key that is not 1, 2 or 3, the call continues in English.
Step two, the notice, in the language you chose. Twilio then plays the following notice, in that one language only:
English, if you pressed 1: “This call will be answered by Maia, an automated virtual assistant, not a person, and it will be transcribed for quality and service purposes. To accept and continue, press 1.”
Spanish, if you pressed 2: “Esta llamada será atendida por Maia, una asistente virtual automatizada, no una persona, y será transcrita. Para aceptar y continuar, marque 1.”
Portuguese, if you pressed 3: “Esta chamada será atendida pela Maia, uma assistente virtual automatizada, não uma pessoa, e será transcrita. Para aceitar e continuar, prima 1.”
While the language menu and the notice are playing, nothing you say is transcribed, analyzed, stored, or sent to any speech recognition service. Speech recognition is switched off for the whole of this part of the call: Twilio listens only for a tone from your telephone keypad. We do not record call audio at any point of the call.
You give your consent by pressing 1 at the notice. If you press 1, you consent to being served by an automated assistant and to the transcription described in the notice, and only then is your call connected to Maia.
If you do not press 1 at the notice, Maia is never connected. If you press any other key, press nothing at all, or hang up while the notice is playing, the call ends after a short closing message, in the same language as the notice you heard, inviting you to write to us at info@elizabetebakery.com, where a person will reply. In that case no transcript of any kind is created.
After you press 1. Your call is connected to Maia through VAPI Inc. (voice AI infrastructure, SOC 2 Type II), which in turn uses Deepgram Inc. (speech-to-text transcription), Hume AI Inc. (voice synthesis), and GPT-4o (OpenAI’s model, provided through VAPI; Elizabete Bakery Company LLC holds no direct account or contract with OpenAI). From that moment your call is transcribed. We do not record call audio.
Our voice service does not use Zero Data Retention. Under our current VAPI configuration, VAPI retains call transcripts and call logs for 14 days and then deletes them. VAPI’s privacy policy, at vapi.ai/privacy, states that transcripts may also be retained to help improve its AI models, and the speech providers it uses process audio under their own terms. Customers wishing to request deletion of their call data may contact us at info@elizabetebakery.com, and we will arrange the deletion with VAPI on their behalf.
If our voice system is unavailable because of a technical failure, Twilio plays a short apology, in English, Spanish and Portuguese, and invites you to write to us at info@elizabetebakery.com, where a person will reply. Maia is not involved in those calls and no transcript is created.
We operate a two-way SMS customer-care system. Customers may reach us by texting our number, +1 (561) 246-6945, directly, or by providing their number to Maia during a website chat or voice call. We deliver responses to inquiries that require human follow-up. When a customer contacts Maia and needs a team response, Maia requests the customer’s phone number and asks whether our reply may be sent by SMS. The customer consents to exchange customer-care SMS messages about their inquiry only by answering yes; providing a phone number without saying yes is not consent. Customer-facing messages are delivered by SMS through Twilio Inc. When you text our number directly, your message is answered by the same Maia assistant that powers our website chat, so the content of that SMS conversation is processed by Anthropic, PBC under the terms described in Section 4.1. We use the WhatsApp Business API (Meta Platforms, Inc.) in two ways. First, you may message Maia directly on WhatsApp at +1 (561) 246-6945; those conversations are processed by Maia in the same way as our website chat, described in Section 4.1, except that WhatsApp has no accept button: Maia’s first reply tells you that you are writing to an AI assistant. WhatsApp messages are carried by WhatsApp LLC, part of Meta, which may keep them for up to 30 days under its own terms, and Meta’s business tools may keep a contact list of the numbers that write to us. Second, when your inquiry needs a person, Maia forwards it to our team’s internal number so a team member can prepare the answer, and Maia then delivers that answer to you on the same channel you wrote from. A member of our team may therefore read the content of your message. Replies from our team are signed “Elizabete Artisan Bakery + Coffee Shoppe team.” After a member of our team answers you, for the next 24 hours your replies go directly to our team instead of Maia: they are forwarded by text message to our team’s internal number, and you receive a short confirmation that your message was passed on. Our team may close the conversation earlier, after which Maia answers again. Meta acts as our processor for WhatsApp messages under the data processing terms that apply to the WhatsApp Business Platform. No marketing or promotional SMS messages are sent through this system. If you decline to receive text messages, we do not send you any, and our team replies by email if you gave us one. Phone numbers collected for escalations are automatically deleted within 7 days. Twilio, which delivers our SMS, keeps its own records of the messages it delivers, including the phone number and message content, until we ask it to delete them. Separately from that, when you give consent to receive SMS we keep a durable consent record that includes your mobile number, the channel through which consent was given, and the date and time. That record is retained as described in Section 11 and is not deleted after 7 days, because it is the evidence that your consent existed.
Important: We will never sell, share, rent, or disclose the mobile phone number you give us for SMS customer care to any third party for marketing purposes. Your mobile number is used solely to respond to your customer care inquiry. No mobile information will be shared with third parties for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with, sold to, or purchased by any third parties or affiliates for any purpose.
Message frequency varies with your customer-care conversation, typically one reply per inquiry. Message and data rates may apply. To stop receiving messages, reply STOP to any message. To request help, reply HELP or contact us at info@elizabetebakery.com.
We work with the following third-party service providers who process personal data on our behalf. Each provider is bound by its own privacy policy and, where applicable, by data processing agreements with us.
Toast, Inc., Online ordering, payment processing, e-gift cards. Processes names, emails, phone numbers, addresses, and payment data, pos.toasttab.com/privacy. Toast also uses some data for its own purposes, as described in its Privacy Statement.
Shopify Inc., Online cookie shop at shop.elizabetebakery.com. E-commerce platform and checkout: processes names, emails, billing and shipping addresses, and payment data (PCI DSS Level 1), shopify.com/legal/privacy. Because we have enabled Shopify Network Intelligence, Shopify also uses shop data for its own services, as described in Section 7.1.
Anthropic, PBC, Provider of the Claude API, under its Commercial Terms of Service and Data Processing Addendum. Our assistant Maia runs on that API on the website chat, SMS and WhatsApp, and we also use it to summarize conversation logs for our team. Under those terms Anthropic may not train its models on this content. It retains the content for up to 30 days and may access it for safety and security purposes; flagged content may be kept longer, as described in Section 4.1, anthropic.com/legal/commercial-terms.
VAPI Inc., Voice assistant infrastructure, on a pay-as-you-go plan. Transcribes calls and retains call transcripts and logs for 14 days under our configuration; call audio is not recorded (Zero Data Retention not enabled). SOC 2 Type II, vapi.ai/privacy.
Deepgram Inc., Speech-to-text transcription for voice calls, deepgram.com/privacy.
Hume AI Inc., Voice synthesis (text-to-speech) for voice assistant, hume.ai/privacy.
OpenAI, Inc., AI language model for voice assistant (GPT-4o), provided through VAPI; no direct account or contract with Elizabete Bakery Company LLC, openai.com/policies/privacy-policy. OpenAI may keep content it processes for up to 30 days under its own terms.
Twilio Inc., Telephony: inbound voice calls and SMS delivery. Answers incoming calls to our published number, plays the automated-assistant and transcription notice, and collects the keypad confirmation before connecting the call to our voice assistant; Twilio does not transcribe speech while that notice is playing. Also processes customer phone numbers to deliver customer care messages, twilio.com/en-us/legal/privacy. Twilio acts as our processor under its Data Processing Addendum and, for limited purposes such as security, fraud and abuse prevention and improving its services, as an independent controller. It keeps records of delivered messages until we ask it to delete them.
Automattic, Inc. (Jetpack), Website statistics and site features. To produce statistics, Automattic receives your IP address and other technical information, which it keeps in its logs for up to 28 days; we see only aggregated statistics, automattic.com/privacy.
Google LLC, Website analytics (Google Analytics 4, Measurement ID G-2HR5J85SMG; analytics cookies load only after Statistics consent) and bot/spam protection for website forms (Google reCAPTCHA). Processes usage, device, and form-interaction data, policies.google.com/privacy. Google also hosts, through Google Sheets, the durable archive of our SMS consent and opt-out records described in Sections 5 and 11; that archive is stored in a private spreadsheet owned by Elizabete Bakery Company LLC and is not accessible to the public. Google Analytics 4 and Google reCAPTCHA are also active on our ordering subdomain order.elizabetebakery.com, where the Google Maps API is additionally used to confirm that a delivery address falls within our delivery area.
Bluehost / Newfold Digital, Web hosting and VPS server provider, newfold.com/privacy-center. Our website and our automation server run on Bluehost. Bluehost keeps backups of the website, and its support staff, including staff located outside the United States, may access the servers to provide technical support. We also keep our own backups of the website, which can include messages sent through website forms.
Adobe Inc. (Adobe Fonts, formerly Typekit), Web font delivery. Some of the typefaces used on our website are served directly from Adobe’s servers. When your browser requests a font file, Adobe receives your IP address together with the basic technical information that accompanies any web request, such as your browser type and the page requesting the font. These font requests are made when the page loads, before any cookie choice, because they are needed to display the site. Adobe receives this data as a consequence of serving the font and we do not receive it, adobe.com/privacy/policy.html.
Google LLC (Google Fonts), Web font delivery. Some of the typefaces used on our website are served from Google’s font servers. When your browser requests a font file, Google receives your IP address together with the basic technical information that accompanies any web request. As with Adobe Fonts, these requests are made when the page loads, before any cookie choice. This is a separate service from Google Analytics and Google reCAPTCHA described elsewhere in this section, policies.google.com/privacy.
Upstash, Inc., Managed serverless Redis (Upstash Inc. Delaware; region us-east-1, USA; connections encrypted in transit via TLS). It stores customer escalation data (phone, name, email, recent chat messages), deleted automatically after 7 days; the conversation log described in Section 4.1, deleted automatically after 7 days; the 24-hour open-conversation marker described in Section 5; our durable SMS consent and opt-out records and our records of acceptances of the chat notice, which are stored without an expiration period as described in Sections 5 and 11; and a daily backup kept for one day. Account owned by Elizabete Bakery Company LLC, upstash.com/trust/privacy.pdf.
Meta Platforms, Inc. and WhatsApp LLC (WhatsApp Business Platform). Process your phone number and message content to deliver and receive customer-care messages via WhatsApp. Meta may keep messages for up to 30 days, and its business tools may keep a contact list of the numbers that write to us, facebook.com/privacy/policy.
n8n (self-hosted), Workflow automation software that runs on our own VPS server, hosted by Bluehost / Newfold Digital as listed above. It routes messages between Maia’s channels and the providers in this section, keeps up to the ten most recent messages of each conversation in memory until the server restarts, and keeps a technical record of each processing step for 14 days. It is not operated by any third party.
Our online ordering system is operated by Toast, Inc. and accessible at order.elizabetebakery.com. When you place an order, Toast collects and processes your personal information including your name, email address, phone number, delivery address, and payment details in accordance with Toast’s Privacy Statement at pos.toasttab.com/privacy. Elizabete Bakery Company LLC has entered into Toast’s Merchant Data Processing Addendum, which governs how Toast processes customer personal data on our behalf. Payment information is processed through PCI-compliant systems operated by Toast. We do not store, access, or retain your full payment card information at any time. Cookie and tracking consent on order.elizabetebakery.com is managed by Toast’s own consent manager, not by the Cookie Consent Manager on elizabetebakery.com. In addition to its own systems, Toast loads third-party services it has selected on that subdomain, including Amplitude (product analytics), Datadog (performance monitoring), Sift (payment fraud prevention), Google reCAPTCHA (bot protection), and the Google Maps API (used to confirm that your delivery address falls within our delivery area). Those providers are engaged by Toast under Toast’s Privacy Statement and not by Elizabete Bakery Company LLC. Separately, and by our own choice, we enable the Meta Pixel and Google Analytics 4 on this subdomain as described in Section 9.
Our New York Cookie online shop is operated on the Shopify platform (Shopify Inc.) and accessible at shop.elizabetebakery.com. When you place an order at the shop, Shopify collects and processes your name, email address, billing and shipping address, and payment information under its own privacy policy and PCI DSS Level 1 certified infrastructure. We receive your order details and shipping address to prepare and ship your order. Cookie shop orders ship only within the State of Florida. To deliver your order, we share your name, shipping address, and, where required, phone number with the shipping carrier solely for delivery purposes.
Our online cookie shop is hosted by Shopify. When you visit or make a purchase in the shop, Shopify processes your information to operate the store. Because we have enabled Shopify Network Intelligence, Shopify also uses your information, together with information from your interactions with other merchants and with Shopify, to provide services to us and to you, such as personalization, store performance and advertising. No other merchant can access your information. To provide these services, your information may be shared with Shopify and other third parties, which may be located in other countries. Some of these uses may be considered “sharing” or “targeted advertising” under the privacy laws of certain U.S. states. You can opt out at any time through the “Your Privacy Choices” page at shop.elizabetebakery.com/pages/data-sharing-opt-out, by turning on the Global Privacy Control signal in your browser, or directly through Shopify’s privacy portal at privacy.shopify.com. To learn how Shopify processes your information, see Shopify’s Consumer Privacy Policy at shopify.com/legal/privacy/app-users.
Elizabete Artisan Bakery + Coffee Shoppe offers e-gift cards. E-gift cards are issued by Elizabete Bakery Company LLC and are sold, delivered and redeemed through the gift card platform of our point-of-sale provider, Toast, Inc., which provides the technology and processes the payment but is not the issuer. E-gift cards are delivered by email from no-reply@toasttab.com or by text message from Toast’s gift card number. E-gift cards have no expiration date and are subject to no fees of any kind, including no dormancy fees or service fees, in full compliance with Florida Statute §501.95 and the federal Credit CARD Act of 2009 (15 U.S.C. §1693l-1, implemented by Regulation E at 12 CFR §1005.20). E-gift cards are redeemable exclusively through our online ordering platform at order.elizabetebakery.com and are not redeemable at any physical retail location, as no physical retail location currently exists. Balance inquiries may be made by contacting us at info@elizabetebakery.com. Personal information provided during gift card purchase is processed by Toast in accordance with their privacy policy.
Our website uses Jetpack, provided by Automattic, Inc., which produces visitor statistics such as page views, traffic sources and approximate location. To produce them, Automattic receives your IP address and other technical information, which it keeps in its logs for up to 28 days. We see only aggregated statistics and do not use them to identify individual visitors.
We run advertising campaigns on Facebook and Instagram (Meta Platforms, Inc.). We use the Meta Pixel tracking tool (Pixel ID 914755081584926) on our website to measure the effectiveness of our advertising campaigns. The Meta Pixel collects information about your visit to our website and may associate it with your Facebook or Instagram account for advertising purposes, subject to your consent through our Cookie Consent Manager. You may opt out of Meta advertising tracking by adjusting your preferences in our Cookie Consent Manager, by visiting facebook.com/settings/ads, or by using an industry opt-out tool. Meta’s data practices are governed by Meta’s Privacy Policy at facebook.com/privacy/policy. On our Shopify cookie shop, when it is connected, Meta’s official sales channel integration with Enhanced data sharing shares website events with Meta both through the browser and through Meta’s Conversions API (server-to-server), linked to the same Pixel ID 914755081584926, to measure ad performance and improve ad delivery. The same Meta Pixel (ID 914755081584926) is also enabled on our online ordering site at order.elizabetebakery.com, operated by Toast. There it records page views on the ordering and checkout pages and, through Meta’s automatic event detection feature, the text of buttons you click, which may include an order total shown on a checkout button. The Meta Pixel is not present on the Toast order confirmation page. Because that subdomain is operated by Toast on its own infrastructure, consent for these technologies is managed by Toast’s consent manager rather than by our Cookie Consent Manager.
We use Google Analytics 4, provided by Google LLC, to understand how visitors use our website (for example, pages viewed, session duration, approximate geographic region, and traffic sources). Our Google Analytics property uses Measurement ID G-2HR5J85SMG. Google Analytics sets analytics cookies (such as _ga and _ga_2HR5J85SMG) that load only after you grant Statistics consent through our Cookie Consent Manager; until then these cookies are blocked and Google Consent Mode is set to deny analytics storage. Google’s handling of this data is governed by Google’s Privacy Policy at policies.google.com/privacy. You may opt out of Google Analytics on all websites using Google’s browser add-on at tools.google.com/dlpage/gaoptout. Google Analytics 4 is also active on our online cookie shop at shop.elizabetebakery.com (same Measurement ID G-2HR5J85SMG), where it measures shop activity such as product views, add-to-cart, checkout, and purchase events. Google Analytics 4 is also active on our online ordering site at order.elizabetebakery.com (same Measurement ID G-2HR5J85SMG), where it measures page views and session activity on the ordering and checkout pages. As with the Meta Pixel, consent on that subdomain is managed by Toast’s consent manager rather than by our Cookie Consent Manager.
We may add additional advertising tools in the future, such as Google Ads (paid advertising campaigns). Any such additions will be reflected in an updated version of this Privacy Policy and our Cookie Policy. On www.elizabetebakery.com, all advertising cookies require your consent through our Cookie Consent Manager before activating.
If you sign up for our newsletter on our website or in our online cookie shop, or check the box at checkout to receive news and offers, we use your email address to send you news, offers and updates about our products. You can unsubscribe at any time using the link included in every one of these emails. Newsletter sign-ups on our website are managed with the Noptin plugin on our own WordPress site; sign-ups in our online cookie shop are managed by Shopify. We do not send marketing text messages.
Our website uses cookies and similar tracking technologies to improve your browsing experience and analyze website traffic. A Cookie Consent Manager (WPConsent) is available on our website allowing you to accept, reject, or customize your cookie preferences by category. It presents three consent groups: Essential (always active and cannot be disabled), Statistics, and Marketing. Non-essential groups load only after you consent, tracking scripts are blocked until then, and we honor the browser Global Privacy Control (GPC) signal as an opt-out. If you reject a group, or withdraw a consent you had previously given, the tracking cookies belonging to that group are deleted from your browser, including any that had already been set: this covers the Meta advertising cookies _fbp and _fbc, and the Google Analytics cookies _ga and _ga_2HR5J85SMG. You may change or withdraw your choices at any time by reopening the Cookie Consent Manager. For complete information about the cookies we use and how to manage your preferences, please see our Cookie Policy at www.elizabetebakery.com/cookie-policy.
We retain personal information for as long as necessary to fulfill the purposes described in this policy and to comply with our legal obligations.
Order data (name, address, email, order history), Duration of account plus minimum 7 years (Florida tax law), Toast platform.
Payment data, Not stored by us, managed by Toast (PCI compliant), Toast platform.
Chat conversation content, Up to 30 days; flagged content may be kept longer as described in Section 4.1, Anthropic Claude API.
Conversation memory (up to the ten most recent messages), Until our server restarts; not saved to any database, n8n on our own VPS server.
Conversation log (your message, Maia’s reply, channel, time, phone number or chat session identifier, name if given), 7 days, then automatically deleted, Upstash.
Technical processing records of our automation software (may include message content and phone numbers), 14 days, then automatically deleted, n8n on our own VPS server.
Open-conversation marker after a team reply (phone number, case reference, name, language), 24 hours, then automatically deleted, Upstash.
Chat notice acceptance records (date and time, IP address, browser, page, language, notice version), Stored without an expiration period, as evidence of the notice you accepted, Upstash.
Database backup, 1 day, Upstash.
Message records held by our messaging providers, Until we ask Twilio to delete them; up to 30 days at Meta, Twilio / Meta (WhatsApp).
Newsletter subscription (email address), Until you unsubscribe, our website (Noptin) / Shopify.
Connection identifiers used to limit message rate (website chat), Up to 1 hour, then discarded, n8n on our own VPS server.
Customer escalation data (phone, name, email, recent chat messages), Maximum 7 days, then automatically deleted.
Voice call transcripts and call logs (call audio is not recorded), 14 days under our VAPI configuration, then deleted by VAPI; earlier deletion available on request to us at info@elizabetebakery.com.
Website statistics, Aggregated; Automattic keeps IP logs for up to 28 days, Jetpack.
SMS consent and opt-out records (mobile number, name and email if given, channel, date and time), Stored without an expiration period; minimum 4 years (aligned with the 4-year federal statute of limitations for TCPA claims, 28 U.S.C. §1658), Twilio / Upstash / our records / a private Google Sheets archive owned by us.
E-gift card data, Duration of card validity plus applicable legal retention, Toast platform.
Cookie shop order data (name, shipping address, email, order history), Duration of account plus minimum 7 years (Florida tax law), Shopify platform.
Payment data at the cookie shop, Not stored by us, managed by Shopify (PCI compliant), Shopify platform.
Elizabete Bakery Company LLC implements appropriate technical and organizational measures to protect personal information against unauthorized access, disclosure, alteration, or destruction, consistent with our obligations under the Florida Information Protection Act (FIPA, Fla. Stat. §501.171). These measures include encrypted data transmission (HTTPS/SSL), PCI-compliant payment processing through Toast and Shopify, encrypted credential storage for system integrations, and access controls limiting data access to authorized personnel. In the event of a data breach, we will notify affected individuals as expeditiously as practicable and no later than 30 days after discovery, and, where a breach affects 500 or more individuals in Florida, we will also notify the Florida Department of Legal Affairs, as required by FIPA §501.171. While we take reasonable steps to protect your information, no method of internet transmission is completely secure and we cannot guarantee absolute security.
We do not sell or rent your personal information, and we do not share it with third parties for their own independent marketing purposes, except as described in Section 7.1 for our online cookie shop. We may share your information only in the following circumstances:
With our service providers listed in Section 6, solely for the purpose of providing services to you on our behalf, under written agreements requiring them to protect your data.
With Toast, Inc. to process your orders and payments.
With Shopify to process your cookie shop orders and payments, and for the Shopify Network Intelligence services described in Section 7.1.
With shipping carriers (for example, USPS or UPS) to deliver cookie shop orders, limited to the information needed for delivery.
With Twilio Inc. to deliver SMS messages you have requested or consented to receive.
With law enforcement, government agencies, or courts when required by applicable law.
In connection with a merger, acquisition, or sale of substantially all of our business assets, with appropriate notice to you.
Important: We will never sell or share the mobile phone number you give us for SMS customer care, or your SMS opt-in data, with any third party for their own marketing or promotional purposes. This is an unconditional commitment.
You may have the following rights regarding your personal information:
Right to Access, Request a copy of the personal information we hold about you.
Right to Correction, Request correction of inaccurate or incomplete information.
Right to Deletion, Request deletion of your personal information, subject to legal retention requirements.
Right to Opt Out of SMS, Reply STOP to any SMS message to immediately stop receiving messages.
Right to Restrict Processing, Request that we limit how we use your information in certain circumstances.
Right to Data Portability, Request your information in a structured, commonly used format.
Right to Opt Out of Targeted Advertising, On our online cookie shop, use the “Your Privacy Choices” page or the Global Privacy Control signal described in Section 7.1.
Right to Unsubscribe from Email, Use the unsubscribe link included in every newsletter email.
To exercise any of these rights, contact us at info@elizabetebakery.com. We are responsible for honoring your request, and where the data is held by one of our service providers, we will instruct that provider to act on your behalf, including instructing VAPI to delete your voice call data or Toast to delete your ordering data, as applicable. We will respond to verifiable requests within 30 days and will not discriminate against you for exercising any of these rights.
Our website, services, and virtual assistant are intended for adults and are not directed to anyone under the age of 18. We do not knowingly collect personal information from anyone under 18. If you believe we have collected information from a person under 18, please contact us immediately at info@elizabetebakery.com.
Our website may contain links to third-party websites, including our ordering platform at order.elizabetebakery.com (operated by Toast), our cookie shop at shop.elizabetebakery.com (operated by Shopify) and our social media profiles. This Privacy Policy applies to the services listed at the top of this page. Toast and Shopify also have their own privacy policies, described in Sections 7 and 7.1, and other third-party websites have their own privacy policies; we are not responsible for their data practices.
We may update this Privacy Policy to reflect changes in our operations, technology, or applicable law. We will notify you of material changes by updating the Last Updated date at the top of this policy. Your continued use of our website or services after any changes constitutes your acceptance of the updated policy.
This Privacy Policy is governed by the laws of the State of Florida, United States of America. Any disputes shall be resolved in the courts of Broward County, Florida. This policy is designed to comply with the Florida Information Protection Act (FIPA, Fla. Stat. §501.171), the Florida Deceptive and Unfair Trade Practices Act (FDUTPA, Fla. Stat. §501.201), the federal FTC Act Section 5, the Telephone Consumer Protection Act (TCPA, 47 U.S.C. §227), and the federal CAN-SPAM Act.
For any questions, concerns, or requests regarding this Privacy Policy, please contact us:
Email: info@elizabetebakery.com
Mail: Elizabete Bakery Company LLC, 11555 Heron Bay Blvd, Suite 200, Coral Springs, FL 33076
Website: www.elizabetebakery.com
