Privacy Policy
Chef Kat's Cookies
Last Updated: July 3, 2026 Website: chefkatscookies.com Contact: chefkat@chefkatscookies.com
1. Introduction
Chef Kat's Cookies ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, share, and protect your personal information when you visit our website at chefkatscookies.com, use the Chef Kat's Cookies mobile app, place an order, or interact with us at in-person events such as pop-ups and maker's markets.
By using our website or mobile app, or making a purchase, you agree to the collection and use of information as described in this policy. If you do not agree, please do not use our website, app, or services.
2. Information We Collect
We collect information you provide directly to us, as well as information collected automatically when you use our website or mobile app.
Information You Provide:
- Contact Information: Name, email address, phone number
- Account & Sign-In Information: If you create an account, you may sign in with Apple, Google, or an emailed one-time code. We receive your name and email address from the sign-in method you choose (Sign in with Apple lets you hide your email; we honor the private relay address it provides).
- Delivery Information: Shipping address and any delivery instructions
- Payment Information: Credit or debit card details, billing address. Note: payment data is processed securely through our payment partners (see Section 5) and is not stored directly by Chef Kat's Cookies.
- Order Information: Items purchased, order history, custom order details
- Communications: Messages, emails, or inquiries you send us
Information Collected Automatically:
- Device & Browser Data: IP address, browser type, operating system, referring URLs
- Usage Data: Pages visited, time spent on pages, links clicked
- Cookies & Tracking Technologies: See Section 6 for full details
Information Collected in the Mobile App:
- Push Notification Token: If you enable notifications, we store a device push token so we can send order updates (order received, delivery updates) and, if you opt in, rewards updates. You can turn notifications off at any time in the app's Settings or your device settings, which removes the token.
- Rewards Activity: If you participate in Kat's Rewards, we keep your Paw Points balance and earning/redemption history with your customer account.
- Delivery Confirmation: For delivered orders we may record a signature and an optional photo at hand-off as proof of delivery, stored securely with the order record.
Information Collected at In-Person Events: At pop-up events and maker's markets, we may collect your name and contact information if you voluntarily provide it (e.g., for a mailing list sign-up). Payment information collected at events is processed through our payment providers and is not stored by us.
3. How We Use Your Information
We use the information we collect to:
- Fulfill and manage your orders, including processing payments, arranging delivery or pickup, and sending order confirmations and updates
- Communicate with you regarding your orders, custom order inquiries, cancellations, or refund requests
- Send marketing communications, such as newsletters, promotions, and event announcements — only if you have opted in (you may opt out at any time)
- Send push notifications about your orders and rewards, if you have enabled them in the mobile app (you can disable them at any time)
- Operate our rewards program (Kat's Rewards), including tracking Paw Points, issuing reward codes, and applying member offers
- Improve our website, app, and services, including analyzing usage patterns and customer feedback
- Comply with legal obligations, including tax and record-keeping requirements
- Prevent fraud and protect the security of our website, app, and customers
We will not use your personal information for purposes incompatible with those described above without notifying you and, where required, obtaining your consent.
4. How We Share Your Information
We do not sell your personal information. We may share your information only in the following circumstances:
Service Providers: We share information with trusted third-party vendors who help us operate our business, including:
- Shopify — our e-commerce platform, which hosts our website, customer accounts, and orders
- Payment Processors — Shop Pay, Apple Pay, Google Pay, and credit/debit card processors
- Apple & Google — sign-in providers, if you choose to sign in with Apple or Google
- Vercel — secure hosting for our sign-in, account, and delivery services (including delivery confirmation records)
- Expo — delivers push notifications to your device, if you have enabled them
- Geoapify — address auto-complete: as you type a delivery address, the text is sent to suggest complete addresses; suggestions are not stored until you save an address
- Delivery Partners — if applicable, to coordinate delivery of your order
- Email Marketing Tools — if you have subscribed to our mailing list
These providers are authorized to use your information only as necessary to provide services to us and are required to protect your data.
Legal Requirements: We may disclose your information if required to do so by law, court order, or governmental authority, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
Business Transfers: In the event Chef Kat's Cookies is sold, merged, or undergoes a significant business change, your information may be transferred as part of that transaction. We will notify you via email or a prominent notice on our website if this occurs.
We do not share your personal information with advertisers or unrelated third parties for their own marketing purposes.
5. Third-Party Services
Our website is built on Shopify, which powers our storefront, checkout, and order management. The mobile app uses the same Shopify checkout to place orders. When you place an order, your information is subject to Shopify's Privacy Policy in addition to ours. We encourage you to review Shopify's privacy practices at shopify.com/legal/privacy.
Payment transactions are processed by our payment partners (Shop Pay, Apple Pay, Google Pay, and card processors). These services operate under their own privacy and security policies. Chef Kat's Cookies does not store full payment card details on our systems.
Our website may contain links to third-party websites (such as social media platforms). We are not responsible for the privacy practices of those sites and encourage you to review their policies independently.
6. Cookies & Tracking Technologies
Our website uses cookies and similar tracking technologies to enhance your browsing experience and understand how our site is used. The mobile app does not use advertising or cross-app tracking; it keeps you signed in using secure on-device storage.
What Are Cookies? Cookies are small text files stored on your device when you visit a website. They help us remember your preferences, keep items in your cart, and analyze site traffic.
Types of Cookies We Use:
- Essential Cookies: Necessary for the website to function (e.g., keeping your shopping cart active). These cannot be disabled.
- Analytics Cookies: Help us understand how visitors interact with our site (e.g., which pages are most visited). We may use tools such as Google Analytics for this purpose.
- Marketing Cookies: Used to deliver relevant promotions and track the effectiveness of our marketing. These are only active if you have consented.
Your Cookie Choices: You can manage or disable cookies through your browser settings. Note that disabling certain cookies may affect the functionality of our website. You may also opt out of Google Analytics by using the Google Analytics Opt-Out Browser Add-on.
7. Data Retention
We retain your personal information for as long as necessary to fulfill the purposes described in this policy, including:
- Order records: Retained for a minimum of 5 years for tax and legal compliance purposes
- Delivery confirmations (signature/photo): Retained with the order record as proof of delivery
- Customer accounts, rewards activity, and preferences: Retained until you request deletion or close your account
- Push notification tokens: Retained while notifications are enabled on your device; removed when you turn them off or delete your account
- Marketing communications: Retained until you unsubscribe or request removal
When personal information is no longer needed, we delete or anonymize it in a secure manner.
8. Your Privacy Rights
For All Customers: You have the right to:
- Access the personal information we hold about you
- Correct inaccurate or incomplete information
- Opt out of marketing emails at any time by clicking "Unsubscribe" in any email or contacting us directly
- Request deletion of your personal information, subject to legal retention requirements
Deleting your account: You can delete your account at any time directly in the mobile app (Account → Settings → Delete account) or from the account menu on our website. If your account has past orders that must be kept for tax or legal reasons, we file a data-erasure request for the rest of your information and the required records are retained only as long as the law requires.
For California Residents — Your CCPA Rights:
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):
- Right to Know: You may request a summary of the categories and specific pieces of personal information we have collected about you in the past 12 months, as well as how it was used and shared.
- Right to Delete: You may request that we delete personal information we have collected from you, subject to certain exceptions (e.g., completing a transaction, complying with legal obligations).
- Right to Opt-Out of Sale: We do not sell your personal information. No opt-out is needed, but we will honor any such request.
- Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights. You will receive the same quality of service regardless of whether you make a privacy request.
To exercise any of these rights, please contact us at chefkat@chefkatscookies.com with the subject line "Privacy Request." We will respond within 45 days. We may need to verify your identity before processing your request.
9. Children's Privacy
Our website, app, and services are not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected information from a child, please contact us immediately at chefkat@chefkatscookies.com and we will take steps to delete it promptly.
10. Security
We take reasonable technical and organizational measures to protect your personal information against unauthorized access, loss, or misuse. Our website is hosted on Shopify's secure platform, all payment processing uses industry-standard encryption (SSL/TLS), and the mobile app stores your sign-in credentials in your device's secure keychain.
However, no method of transmission over the internet or electronic storage is completely secure. While we strive to protect your information, we cannot guarantee absolute security. In the event of a data breach that affects your rights or freedoms, we will notify you as required by applicable law.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make changes, we will update the "Last Updated" date at the top of this page. For significant changes, we may notify you by email or by posting a notice on our website.
We encourage you to review this policy periodically. Your continued use of our website, app, or services after any updates constitutes acceptance of the revised policy.
12. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal information, please contact us:
Chef Kat's Cookies Saratoga, California 📧 chefkat@chefkatscookies.com 🌐 chefkatscookies.com
We are committed to resolving any privacy concerns promptly and transparently.