Elizabete Artisan Bakery + Coffee Shoppe®
Elizabete Bakery Company LLC
Last Updated: August 26, 2026
Your privacy matters to us. This Privacy Policy explains what information we collect when you visit our website, place an order, interact with Maia our virtual assistant, or contact us, and how we protect it. It covers Elizabete Bakery Company LLC, operating as Elizabete Artisan Bakery + Coffee Shoppe® (“we,” “us,” or “our”), and applies to our website at www.elizabetebakery.com, our online ordering platform at order.elizabetebakery.com, our virtual assistant Maia, our voice assistant, and our SMS customer care system. By using our website or services, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use our services.
Elizabete Artisan Bakery + Coffee Shoppe® is a registered trademark of Elizabete Bakery Company LLC. The brand holds two USPTO trademark registrations filed April 28, 2023 under the same design mark: Registration No. 8043191 (Serial No. 97913629, Class 043, Restaurant and Hotel Services, registered November 25, 2025) and Registration No. 7755516 (Serial No. 97979657, Class 030, Bakery goods and confectionery, registered April 8, 2025). Both registrations are live and active on the USPTO Principal Register. Elizabete Bakery Company LLC is a Florida limited liability company (EIN: 92-3669765) with a registered mailing address at 11555 Heron Bay Blvd, Suite 200, Coral Springs, FL 33076. We operate as a Cottage Food operation under Florida Statute §500.80, serving the residential community of Parkland, Florida. You may contact us at info@elizabetebakery.com or www.elizabetebakery.com.
Name, email address, phone number, and delivery address when placing an order through our online ordering platform at order.elizabetebakery.com.
Name, email address, billing and shipping address, and phone number when placing an order through our online cookie shop at shop.elizabetebakery.com, operated on the Shopify platform. Payment data at the shop is processed exclusively by Shopify’s PCI-compliant checkout and is never stored on our servers.
Payment information entered during checkout. Payment data is processed exclusively by Toast, Inc. and is never stored on our servers.
Phone number when you voluntarily provide it to Maia, our virtual assistant, to receive a customer care response via SMS.
Messages and inquiries submitted through our website chatbot or voice assistant.
Website usage data including pages visited, time spent, browser type, and referring URLs, collected through Jetpack (WordPress.com analytics) and Google Analytics 4 (see Section 9.3).
Cookie and tracking data as described in our Cookie Policy at www.elizabetebakery.com/cookie-policy.
Voice call data when you call our voice assistant at +1 (561) 246-6945. Nothing you say is transcribed unless and until you press 1 to accept the notice described in Section 4.2. If you do accept, the audio of your call is processed in real time by VAPI Inc. and Deepgram Inc. solely to produce a written transcript and is not recorded or stored as audio, and the resulting transcript and call logs are retained as described in Sections 4.2 and 11.
We use the personal information we collect for the following purposes:
To process and fulfill your orders, including scheduling delivery and communicating about order status.
To respond to customer service inquiries and escalate requests to our team via SMS.
To operate and improve Maia, our AI-powered virtual assistant.
To send you service communications related to your orders and inquiries.
To send SMS updates and notifications you have consented to receive.
To analyze website traffic and improve our online presence.
To comply with applicable legal obligations under Florida law and federal law.
To enforce our Terms & Conditions and protect our legal rights.
Before you send your first message, the chat shows you a notice and asks you to accept it. When you open the chat window on www.elizabetebakery.com, the widget displays a notice telling you three things: that Maia is an artificial intelligence assistant and not a person; that what you write is processed by an external provider, Anthropic, PBC, which retains it for a maximum of 30 days; and that a member of our team may read your conversation when your inquiry needs a human answer. The message box stays disabled until you accept. If you do not accept, no message is sent and no conversation data is created. When you accept, we record the acceptance in our durable consent record with the date and time, your IP address, your browser user agent, the page you were on, the language shown to you, and the version identifier of the notice you were shown, so that we can establish which text you agreed to.
Maia is embedded on our website at www.elizabetebakery.com and powered by the Anthropic Claude API. When you interact with the chatbot, your messages are processed by Anthropic Inc.’s commercial API. Under Anthropic’s Commercial Terms of Service, API data is never used to train Anthropic’s AI models. Conversation data is retained by Anthropic for a maximum of 30 days before automatic deletion.
Within a single chat session, Maia retains conversation context using session-only memory that is automatically cleared when the session ends. No persistent storage of chat content occurs after the session concludes. When a customer inquiry requires escalation to our team, Maia requests the customer’s phone number. That information, your phone number, and where provided your name, email, and the conversation memory of your chat, is temporarily stored in an encrypted managed Upstash Redis database, whose account is owned and operated by Elizabete Bakery Company LLC. It is automatically deleted after 7 days and used solely to deliver our team’s response.
Maia is available as a voice assistant at +1 (561) 246-6945.
Your call is not answered by Maia. It is answered first by Twilio Inc., our telephony provider. Before you are connected to Maia, and before any part of your call is transcribed, Twilio plays the following notice, in English, Spanish and Portuguese, as the first thing you hear when the call connects:
“Thank you for calling Elizabete Artisan Bakery and Coffee Shoppe. This call will be answered by Maia, an automated virtual assistant, not a person, and it will be transcribed for quality and service purposes. To accept and continue, press 1. Esta llamada será atendida por Maia, una asistente virtual automatizada, no una persona, y será transcrita. Para aceptar y continuar, marque 1. Esta chamada será atendida pela Maia, uma assistente virtual automatizada, não uma pessoa, e será transcrita. Para aceitar e continuar, disque 1.”
While that notice is playing, nothing you say is transcribed, analyzed, stored, or sent to any speech recognition service. Speech recognition is switched off for the duration of the notice. Twilio listens only for a tone from your telephone keypad. We do not record call audio at any point of the call.
You give your consent by pressing 1. If you press 1, you consent to being served by an automated assistant and to the transcription described in the notice, and only then is your call connected to Maia.
If you do not press 1, Maia is never connected. If you press any other key, press nothing at all, or hang up while the notice is playing, the call ends after a short closing message inviting you to write to us at info@elizabetebakery.com, where a person will reply. In that case no transcript of any kind is created.
After you press 1. Your call is connected to Maia through VAPI Inc. (voice AI infrastructure, SOC 2 Type II), which in turn uses Deepgram Inc. (speech-to-text transcription), Hume AI Inc. (voice synthesis), and GPT-4o (OpenAI’s model, provided through VAPI’s enterprise infrastructure; Elizabete Bakery Company LLC holds no direct account or contract with OpenAI). From that moment your call is transcribed. We do not record call audio.
Because our voice service does not use Zero Data Retention, VAPI retains call transcripts and call logs in accordance with their data retention policy at vapi.ai/privacy. Customers wishing to request deletion of their call data may contact us at info@elizabetebakery.com, and we will arrange the deletion with VAPI on their behalf.
If our voice system is unavailable because of a technical failure, Twilio plays a short apology, also in English, Spanish and Portuguese, and offers to connect you with a person by telephone or invites you to write to us at info@elizabetebakery.com. Maia is not involved in those calls and no transcript is created.
We operate a two-way SMS customer-care system. Customers may reach us by texting our number, +1 (561) 246-6945, directly, or by providing their number to Maia during a website chat or voice call. We deliver responses to inquiries that require human follow-up. When a customer contacts Maia and needs a team response, Maia requests the customer’s phone number and explains that our reply will be sent by SMS. The customer voluntarily provides their phone number, consenting to exchange customer-care SMS messages about their inquiry. Customer-facing messages are delivered by SMS through Twilio Inc. When you text our number directly, your message is answered by the same Maia assistant that powers our website chat, so the content of that SMS conversation is processed by Anthropic Inc. under the terms described in Section 4.1. We use the WhatsApp Business API (Meta Platforms, Inc.) in two ways. First, you may message Maia directly on WhatsApp at +1 (561) 246-6945; those conversations are handled the same way as our website chat, described in Section 4.1. Second, when your inquiry needs a person, Maia forwards it to our team’s internal number so a team member can prepare the answer, and Maia then delivers that answer to you on the same channel you wrote from. A member of our team may therefore read the content of your message. Meta Platforms, Inc. acts as our processor for these messages under the WhatsApp Business Data Processing Terms. No marketing or promotional SMS messages are sent through this system. Phone numbers collected for escalations are automatically deleted within 7 days. Separately from that, when you give consent to receive SMS we keep a durable consent record that includes your mobile number, the channel through which consent was given, and the date and time. That record is retained as described in Section 11 and is not deleted after 7 days, because it is the evidence that your consent existed.
Important: We will never sell, share, rent, or disclose your mobile phone number to any third party for marketing purposes. Your mobile number is used solely to respond to your customer care inquiry. No mobile information will be shared with third parties for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with, sold to, or purchased by any third parties or affiliates for any purpose.
Message frequency: one message per customer care inquiry. Message and data rates may apply. To stop receiving messages, reply STOP to any message. To request help, reply HELP or contact us at info@elizabetebakery.com.
We work with the following third-party service providers who process personal data on our behalf. Each provider is bound by their own privacy policy and, where applicable, by data processing agreements with us.
Toast, Inc, Online ordering, payment processing, e-gift cards. Processes names, emails, phone numbers, addresses, and payment data, pos.toasttab.com/privacy.
Shopify Inc, Online cookie shop at shop.elizabetebakery.com. E-commerce platform and checkout: processes names, emails, billing and shipping addresses, and payment data (PCI DSS Level 1), shopify.com/legal/privacy.
Anthropic, Inc, Provider of the Claude API. Our assistant Maia runs on that API, both on the website chatbot and on inbound SMS conversations. Anthropic acts as our processor and never uses this data for its own purposes. Commercial API, data never used for AI training. 30-day retention, anthropic.com/legal/privacy.
VAPI Inc, Voice assistant infrastructure. Transcribes and retains call transcripts and logs; call audio is not recorded (ZDR not enabled). SOC 2 Type II, vapi.ai/privacy.
Deepgram Inc, Speech-to-text transcription for voice calls, deepgram.com/privacy.
Hume AI Inc, Voice synthesis (text-to-speech) for voice assistant, hume.ai/privacy.
OpenAI, Inc, AI language model for voice assistant (GPT-4o), provided THROUGH VAPI; no direct account or contract with Elizabete, openai.com/policies/privacy-policy.
Twilio Inc, Telephony: inbound voice calls and SMS delivery. Answers incoming calls to our published number, plays the automated-assistant and transcription notice, and collects the keypad confirmation before connecting the call to our voice assistant; Twilio does not transcribe speech while that notice is playing. Also processes customer phone numbers to deliver customer care messages, twilio.com/en-us/legal/privacy.
Automattic, Inc. (Jetpack), Basic website analytics. Processes anonymized visitor data, automattic.com/privacy.
Google LLC, Website analytics (Google Analytics 4, Measurement ID G-2HR5J85SMG; analytics cookies load only after Statistics consent) and bot/spam protection for website forms (Google reCAPTCHA). Processes usage, device, and form-interaction data, policies.google.com/privacy. Google also hosts, through Google Sheets, the durable archive of our SMS consent and opt-out records described in Sections 5 and 11; that archive is stored in a private spreadsheet owned by Elizabete Bakery Company LLC and is not accessible to the public. Google Analytics 4 and Google reCAPTCHA are also active on our ordering subdomain order.elizabetebakery.com, where the Google Maps API is additionally used to confirm that a delivery address falls within our delivery area.
Bluehost / Newfold Digital, Web hosting and VPS server provider, newfold.com/privacy-center.
Adobe Inc. (Adobe Fonts, formerly Typekit), Web font delivery. Some of the typefaces used on our website are served directly from Adobe’s servers. When your browser requests a font file, Adobe receives your IP address together with the basic technical information that accompanies any web request, such as your browser type and the page requesting the font. These font requests are made when the page loads, before any cookie choice, because they are needed to display the site. Adobe receives this data as a consequence of serving the font and we do not receive it, adobe.com/privacy/policy.html.
Google LLC (Google Fonts), Web font delivery. Some of the typefaces used on our website are served from Google’s font servers. When your browser requests a font file, Google receives your IP address together with the basic technical information that accompanies any web request. As with Adobe Fonts, these requests are made when the page loads, before any cookie choice. This is a separate service from Google Analytics and Google reCAPTCHA described elsewhere in this section, policies.google.com/privacy.
Upstash, Inc, Managed serverless Redis (Upstash Inc. Delaware; region us-east-1, USA; connections encrypted in transit via TLS) storing customer escalation/session data (phone, name, email, conversation memory), automatically deleted by TTL, and separately storing our durable SMS consent and opt-out records (mobile number, channel, date and time), which are stored without an expiration period as described in Sections 5 and 11. Account owned by Elizabete Bakery Company LLC, upstash.com/trust/privacy.pdf.
Meta Platforms, Inc. (WhatsApp), WhatsApp Business API. Processes your phone number and message content to deliver and receive customer-care messages via WhatsApp, facebook.com/privacy/policy.
Our online ordering system is operated by Toast, Inc. and accessible at order.elizabetebakery.com. When you place an order, Toast collects and processes your personal information including your name, email address, phone number, delivery address, and payment details in accordance with Toast’s Privacy Statement at pos.toasttab.com/privacy. Elizabete Bakery Company LLC has entered into Toast’s Merchant Data Processing Addendum, which governs how Toast processes customer personal data on our behalf. Payment information is processed through PCI-compliant systems operated by Toast. We do not store, access, or retain your full payment card information at any time. Cookie and tracking consent on order.elizabetebakery.com is managed by Toast’s own consent manager, not by the Cookie Consent Manager on elizabetebakery.com. In addition to its own systems, Toast loads third-party services it has selected on that subdomain, including Amplitude (product analytics), Datadog (performance monitoring), Sift (payment fraud prevention), Google reCAPTCHA (bot protection), and the Google Maps API (used to confirm that your delivery address falls within our delivery area). Those providers are engaged by Toast under Toast’s Privacy Statement and not by Elizabete Bakery Company LLC. Separately, and by our own choice, we enable the Meta Pixel and Google Analytics 4 on this subdomain as described in Section 9.
Our New York Cookie online shop is operated on the Shopify platform (Shopify Inc.) and accessible at shop.elizabetebakery.com. When you place an order at the shop, Shopify collects and processes your name, email address, billing and shipping address, and payment information under its own privacy policy and PCI DSS Level 1 certified infrastructure. We receive your order details and shipping address to prepare and ship your order. Cookie shop orders ship only within the State of Florida. To deliver your order, we share your name, shipping address, and, where required, phone number with the shipping carrier solely for delivery purposes.
Elizabete Artisan Bakery + Coffee Shoppe offers e-gift cards processed through the Toast platform. E-gift cards are issued and processed by Toast, Inc. on our behalf. E-gift cards have no expiration date and are subject to no fees of any kind, including no dormancy fees or service fees, in full compliance with Florida Statute §501.95 and the federal Credit CARD Act of 2009 (15 U.S.C. §1693l-1, implemented by Regulation E at 12 CFR §1005.20). E-gift cards are redeemable exclusively through our online ordering platform at order.elizabetebakery.com and are not redeemable at any physical retail location, as no physical retail location currently exists. Balance inquiries may be made by contacting us at info@elizabetebakery.com. Personal information provided during gift card purchase is processed by Toast in accordance with their privacy policy.
Our website uses Jetpack, provided by Automattic, Inc. which collects basic, anonymized visitor statistics including page views, traffic sources, and geographic location data. This data does not personally identify individual visitors.
We run advertising campaigns on Facebook and Instagram (Meta Platforms, Inc.). We use the Meta Pixel tracking tool (Pixel ID 914755081584926) on our website to measure the effectiveness of our advertising campaigns. The Meta Pixel collects information about your visit to our website and may associate it with your Facebook or Instagram account for advertising purposes, subject to your consent through our Cookie Consent Manager. You may opt out of Meta advertising tracking by adjusting your preferences in our Cookie Consent Manager, by visiting facebook.com/settings/ads, or by using an industry opt-out tool. Meta’s data practices are governed by Meta’s Privacy Policy at facebook.com/privacy/policy. On our Shopify cookie shop, we use Meta’s official sales channel integration with Enhanced data sharing, which shares website events with Meta both through the browser and through Meta’s Conversions API (server-to-server), linked to the same Pixel ID 914755081584926, to measure ad performance and improve ad delivery. The same Meta Pixel (ID 914755081584926) is also enabled on our online ordering site at order.elizabetebakery.com, operated by Toast. There it records page views on the ordering and checkout pages and, through Meta’s automatic event detection feature, the text of buttons you click, which may include an order total shown on a checkout button. The Meta Pixel is not present on the Toast order confirmation page. Because that subdomain is operated by Toast on its own infrastructure, consent for these technologies is managed by Toast’s consent manager rather than by our Cookie Consent Manager.
We use Google Analytics 4, provided by Google LLC, to understand how visitors use our website (for example, pages viewed, session duration, approximate geographic region, and traffic sources). Our Google Analytics property uses Measurement ID G-2HR5J85SMG. Google Analytics sets analytics cookies (such as _ga and _ga_2HR5J85SMG) that load only after you grant Statistics consent through our Cookie Consent Manager; until then these cookies are blocked and Google Consent Mode is set to deny analytics storage. Google’s handling of this data is governed by Google’s Privacy Policy at policies.google.com/privacy. You may opt out of Google Analytics on all websites using Google’s browser add-on at tools.google.com/dlpage/gaoptout. Google Analytics 4 is also active on our online cookie shop at shop.elizabetebakery.com (same Measurement ID G-2HR5J85SMG), where it measures shop activity such as product views, add-to-cart, checkout, and purchase events. Google Analytics 4 is also active on our online ordering site at order.elizabetebakery.com (same Measurement ID G-2HR5J85SMG), where it measures page views and session activity on the ordering and checkout pages. As with the Meta Pixel, consent on that subdomain is managed by Toast’s consent manager rather than by our Cookie Consent Manager.
We may add additional advertising tools in the future, such as Google Ads (paid advertising campaigns). Any such additions will be reflected in an updated version of this Privacy Policy and Cookie Policy. All advertising cookies require your consent through our Cookie Consent Manager before activating.
Our website uses cookies and similar tracking technologies to improve your browsing experience and analyze website traffic. A Cookie Consent Manager (WPConsent) is available on our website allowing you to accept, reject, or customize your cookie preferences by category. It presents three consent groups: Essential (always active and cannot be disabled), Statistics, and Marketing. Non-essential groups load only after you consent, tracking scripts are blocked until then, and we honor the browser Global Privacy Control (GPC) signal as an opt-out. If you reject a group, or withdraw a consent you had previously given, the tracking cookies belonging to that group are deleted from your browser, including any that had already been set: this covers the Meta advertising cookies _fbp and _fbc, and the Google Analytics cookies _ga, _ga_2HR5J85SMG, _gid and _gat. You may change or withdraw your choices at any time by reopening the Cookie Consent Manager. For complete information about the cookies we use and how to manage your preferences, please see our Cookie Policy at www.elizabetebakery.com/cookie-policy.
We retain personal information for as long as necessary to fulfill the purposes described in this policy and to comply with our legal obligations.
Order data (name, address, email, order history), Duration of account plus minimum 7 years (Florida tax law), Toast platform.
Payment data, Not stored by us, managed by Toast (PCI compliant), Toast platform.
Chat conversation content, Maximum 30 days, then automatically deleted, Anthropic Claude API.
Session memory (chatbot context), Session duration only, cleared automatically on close, n8n Simple Memory (self-hosted workflow software running on our own VPS server; the hosting provider is listed in Section 6).
Customer escalation data (phone, name, email, conversation memory), Maximum 7 days, then automatically deleted.
Voice call transcripts and call logs (call audio is not recorded), Per VAPI configuration, Retained by VAPI (ZDR not enabled), deletion available on request to us at info@elizabetebakery.com.
Website analytics data, Anonymized, per Jetpack/Automattic policy, Jetpack.
SMS consent and opt-out records (mobile number, channel, date and time), Stored without an expiration period; minimum 4 years (aligned with the 4-year federal statute of limitations for TCPA claims, 28 U.S.C. §1658), Twilio / our records / a private Google Sheets archive owned by us.
E-gift card data, Duration of card validity plus applicable legal retention, Toast platform.
Cookie shop order data (name, shipping address, email, order history), Duration of account plus minimum 7 years (Florida tax law), Shopify platform.
Payment data at the cookie shop, Not stored by us, managed by Shopify (PCI compliant), Shopify platform.
Elizabete Bakery Company LLC implements appropriate technical and organizational measures to protect personal information against unauthorized access, disclosure, alteration, or destruction, consistent with our obligations under the Florida Information Protection Act (FIPA, Fla. Stat. §501.171). These measures include encrypted data transmission (HTTPS/SSL), PCI-compliant payment processing through Toast, encrypted credential storage for system integrations, and access controls limiting data access to authorized personnel. In the event of a data breach, we will notify affected individuals as expeditiously as practicable and no later than 30 days after discovery, and, where a breach affects 500 or more individuals in Florida, we will also notify the Florida Department of Legal Affairs, as required by FIPA §501.171. While we take reasonable steps to protect your information, no method of internet transmission is completely secure and we cannot guarantee absolute security.
We do not sell, rent, trade, or share your personal information with third parties for their own marketing purposes. We may share your information only in the following circumstances:
With our service providers listed in Section 6, solely for the purpose of providing services to you on our behalf, under written agreements requiring them to protect your data.
With Toast, Inc. to process your orders and payments.
With Shopify Inc. to process your cookie shop orders and payments.
With shipping carriers (for example, USPS or UPS) to deliver cookie shop orders, limited to the information needed for delivery.
With Twilio Inc. to deliver SMS messages you have requested or consented to receive.
With law enforcement, government agencies, or courts when required by applicable law.
In connection with a merger, acquisition, or sale of substantially all of our business assets, with appropriate notice to you.
Important: We will never sell or share your mobile phone number with any third party for their own marketing or promotional purposes. This is an unconditional commitment.
You may have the following rights regarding your personal information:
Right to Access, Request a copy of the personal information we hold about you.
Right to Correction, Request correction of inaccurate or incomplete information.
Right to Deletion, Request deletion of your personal information, subject to legal retention requirements.
Right to Opt Out of SMS, Reply STOP to any SMS message to immediately stop receiving messages.
Right to Restrict Processing, Request that we limit how we use your information in certain circumstances.
Right to Data Portability, Request your information in a structured, commonly used format.
To exercise any of these rights, contact us at info@elizabetebakery.com. We are responsible for honoring your request, and where the data is held by one of our service providers, we will instruct that provider to act on your behalf, including instructing VAPI to delete your voice call data or Toast to delete your ordering data, as applicable. We will respond to verifiable requests within 30 days and will not discriminate against you for exercising any of these rights.
Our website, services, and virtual assistant are not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately at info@elizabetebakery.com.
Our website may contain links to third-party websites, including our ordering platform at order.elizabetebakery.com (operated by Toast), our cookie shop at shop.elizabetebakery.com (operated by Shopify) and our social media profiles. This Privacy Policy applies only to elizabetebakery.com. Third-party websites have their own privacy policies and we are not responsible for their data practices.
We may update this Privacy Policy to reflect changes in our operations, technology, or applicable law. We will notify you of material changes by updating the Last Updated date at the top of this policy. Your continued use of our website or services after any changes constitutes your acceptance of the updated policy.
This Privacy Policy is governed by the laws of the State of Florida, United States of America. Any disputes shall be resolved in the courts of Broward County, Florida. This policy is designed to comply with the Florida Information Protection Act (FIPA, Fla. Stat. §501.171), the Florida Deceptive and Unfair Trade Practices Act (FDUTPA, Fla. Stat. §501.201), the federal FTC Act Section 5, the Telephone Consumer Protection Act (TCPA, 47 U.S.C. §227), and the federal CAN-SPAM Act.
For any questions, concerns, or requests regarding this Privacy Policy, please contact us:
Email: info@elizabetebakery.com
Mail: Elizabete Bakery Company LLC, 11555 Heron Bay Blvd, Suite 200, Coral Springs, FL 33076
Website: www.elizabetebakery.com
