Tabu Cookie Co respects your privacy. This policy explains how we handle personal information when you visit this website, create an account, join a mailing or text list, submit a form, or place an order.

This website is powered by Cottage CMS. Cottage CMS processes information for Tabu Cookie Co to provide the storefront, ordering, forms, customer accounts, communications, and related services. This policy applies from the date it is published.

Depending on how you use the site, we may collect:

• Contact information, such as your name, email address, phone number, and account details.
• Order and fulfillment information, such as the products you select, customizations, event details, pickup choices, delivery or shipping address, and order history.
• Form content, including dietary information, messages, and files or inspiration photos you choose to submit.
• Communication preferences, including email or text-message consent and opt-out records.
• Technical information, such as IP address, browser and device information, security events, cookies, and site activity.

Payment details are collected and processed by the payment provider shown at checkout. ${business} does not receive or store your full payment-card number through this website.

We use personal information to operate the website; create and manage customer accounts; review, prepare, fulfill, deliver, and support orders; respond to questions and custom requests; send transactional notices; prevent fraud and protect the site; maintain business and tax records; and comply with legal obligations.

If you choose to receive marketing, we may also use your contact information to send product, availability, or business updates. You may withdraw that consent at any time.

We share information only as needed to run the business and provide the service, including with:

• Cottage CMS, which hosts and operates the website and its ordering, account, form, and communication features.
• Payment processors, such as Square, to securely process payments, refunds, and fraud checks.
• Infrastructure and communication providers, such as Cloudflare and providers used to deliver email or text messages.
• Analytics or advertising providers, such as Google or Meta, only if those optional tools are enabled on this site.
• Delivery, professional, or government recipients when needed to fulfill your request, comply with law, protect rights and safety, or complete a business transfer.

We do not sell your personal information for money.

This site uses essential cookies and similar technologies for features such as security, customer sessions, shopping carts, and checkout. If analytics or advertising tools are enabled, those providers may collect device and activity information under their own privacy terms.

You can limit cookies through your browser settings, although disabling essential cookies may prevent parts of the site from working.

We retain personal information for as long as reasonably needed to provide services, maintain order and business records, resolve disputes, prevent fraud, and meet legal, accounting, or tax obligations. When information is no longer needed, we take reasonable steps to delete or de-identify it.

We and our service providers use reasonable administrative, technical, and organizational safeguards. No internet transmission or storage system can be guaranteed to be completely secure.

You may unsubscribe from marketing email using the link in a message. You may opt out of marketing text messages by replying STOP. Transactional messages about an active order may still be sent when necessary to provide the service.

Depending on where you live, you may have rights to request access to, correction of, deletion of, or a copy of personal information, or to object to certain uses. To make a request, use the contact information shown on this website or in your order confirmation. We may need to verify your identity before completing a request.