Privacy Policy

This policy applies to visitors, bakery owners, account holders, newsletter subscribers and people who contact BakeryFind.

For privacy enquiries, contact [email protected].

• /Account and contact details, including name, email address, authentication details and business role.
• /Bakery listing details, including business name, address, suburb, contact details, website, opening hours, categories, photos and owner-submitted updates.
• /Billing and subscription data processed through Stripe. We do not store full card numbers.
• /Newsletter and communication preferences, including unsubscribe or opt-out requests.
• /Usage and technical information, including device, browser, IP address, pages viewed, search behaviour, analytics events and fraud-prevention signals.
• /Public business information from sources such as Google Places, business websites, social profiles and other publicly available sources.

• /To operate the BakeryFind directory and show useful bakery search results.
• /To let bakery owners claim, verify, update and manage listings.
• /To process subscriptions, billing events, payment failures and account notices.
• /To respond to support, privacy, legal and listing accuracy requests.
• /To improve search relevance, listing quality, security, fraud prevention, analytics and product performance.
• /To send transactional emails and, where consent is provided, marketing or newsletter communications.

BakeryFind may use AI-assisted tools to organise public business information, improve listing quality, summarise market signals and support editorial workflows. We do not use AI to make legal, credit or employment decisions about individuals.

Where AI assists content or data work, BakeryFind remains responsible for review, correction and publication decisions. See our AI Policy.

We may disclose information to trusted providers that help us operate BakeryFind, including Supabase, Vercel, Stripe, Resend, Google services, analytics providers, security tools and professional advisers.

Some providers may process or store data outside Australia. We take reasonable steps to use reputable providers and apply appropriate security controls.

Transactional emails, such as account, billing, security and listing notices, are sent where needed to operate the service. Marketing emails are handled separately and include an unsubscribe path.

You can request removal from marketing communications by emailing [email protected].

We use reasonable technical and organisational safeguards, including server-side access controls, encryption in transit, restricted service-role usage and provider-level security controls. No online system is completely risk-free.

We retain information only as long as reasonably needed for service operation, legal obligations, dispute management, security, accounting and legitimate business purposes.

You may request access to, or correction of, personal information we hold about you. You may also raise a privacy complaint. Contact [email protected].

If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner.