Privacy Policy

---

BELLA'S BREAD, LLC — DATA PRIVACY & NOTICE STATEMENT

Effective Date: July 21, 2026

1. Data Collection Framework

1.1 Direct Information Submissions

Bella’s Bread, LLC ("we," "us," or "our") collects personal details that you voluntarily submit while navigating our platform, placing orders, or communicating with our team. This data includes:

• Identity      Details: Full name and preferred salutation.
• Contact      Data: Email address, primary telephone number, and physical billing      address.
• Fulfillment      Data: Physical delivery address and specific gate or drop-off      instructions.
• Transaction      Details: Credit or debit card details, billing address, and      transaction logs. (Note: Complete credit card credentials are never      stored on our local infrastructure; secure payment processors handle all      transaction processing).
• Order      History: Records of items selected, past order dates, and custom      baking notes.
• Account      Credentials: Username, encrypted password, and saved preferences (if      an online account is created).
• Direct      Communications: Messages sent via web forms, customer support queries,      and direct emails.

1.2 Automated Data Logging

When you browse our digital storefront, automated systems collect technical identifiers regarding your hardware and browsing activity:

• Device      Telemetry: IP address, browser build, operating system, and unique      hardware identifiers.
• Interaction      Metrics: Clickstream paths, pages viewed, dwell time per section,      referral links, and outbound clicks.
• Coarse      Geolocation: Geographic region (city and state) derived from IP      routing.
• System      Diagnostics: Server request logs recording time stamps, page hits, and      system performance errors.

1.3 Collection Channels

Information enters our systems via:

1. Digital      Inputs: Checkout pages, user registration forms, contact requests, or      email subscription sign-ups.
2. Automated      Tracking Tools: Browser cookies, local storage objects, and web pixels      (see Section 6).
3. Transaction      Processing: Automated receipts generated during checkout fulfillment.
4. Direct      Inquiries: Inbound calls, emails, or social media messaging.
5. Third-Party      Confirmations: Status updates returned by merchant gateway partners      confirming payment authorization.

2. Operational Use of Information

2.1 Order Fulfillment

We process submitted personal data to complete retail operations, including:

• Sending      digital receipts and order confirmations.
• Processing      charges through merchant partners.
• Baking      and packaging your requested artisan breads.
• Routing      local deliveries or coordinating direct customer pickups.
• Communicating      order status updates or unexpected scheduling shifts.

2.2 Customer Service & Statutory Notices

We utilize contact records to:

• Resolve      support inquiries or delivery challenges.
• Send      transactional records, invoices, and scheduling updates.
• Issue      mandatory statutory notices under Utah law informing customers that our      items originate from an uninspected, home-based kitchen.

2.3 Promotional Messages

Where permitted by your communication preferences, we may send:

• Seasonal      menu announcements and limited-run bakery updates.
• Exclusive      promotional discounts and customer appreciation offers.
• Informational      updates regarding local market appearances or schedule shifts.

Note: You may opt out of promotional emails at any time using the "unsubscribe" link included in every marketing message. Opting out of marketing will not interrupt operational transactional emails.

2.4 Platform Analytics & Diagnostics

System usage metrics are evaluated to:

• Monitor      site infrastructure health and load capacity.
• Enhance      site navigation, layout, and mobile responsiveness.
• Identify      operational bugs or broken links.
• Evaluate      product popularity to refine future baking menus.

2.5 Security & Legal Obligations

Data may be processed to:

• Maintain      compliance with applicable state and federal statutes.
• Enforce      our Terms of Service and sales policies.
• Safeguard      against fraudulent transactions or unauthorized access.
• Defend      legal rights and ensure the physical safety of our enterprise and patrons.

3. Data Disclosures & External Sharing

3.1 Service Partners & Vendor Interactions

We engage select third-party service providers to execute operational functions on our behalf. These vendors receive only the information necessary to fulfill their specific obligations:

• Payment      Merchants: Secured processing services receive payment tokens solely      to authorize transactions.
• Delivery      Partners: Local couriers receive name, contact phone number, and      drop-off address details.
• Hosting      & Technology: Cloud infrastructure providers store site databases      under strict security protocols.
• Analytics      Services: Aggregated traffic tools assist in evaluating digital      operations.
• Communication      Platforms: Automated email dispatch software handles transactional      receipts and promotional mailings.

All third-party providers are contractually required to maintain strict confidentiality and are prohibited from using your data for independent purposes.

3.2 Statutory Disclosures

We reserve the right to disclose personal records when required by law or in response to legitimate legal processes, including:

• Valid      court orders, subpoenas, or official administrative demands.
• Law      enforcement inquiries concerning active criminal investigations.
• Proceedings      necessary to protect the legal rights, safety, or property of Bella's      Bread, LLC, our patrons, or the general public.

3.3 Corporate Transitions

In the event of a merger, acquisition, asset transfer, or business restructuring, customer information may be included as a transferred business asset. Customers will be alerted via email or site posting regarding any ownership transition and subsequent privacy choices.

3.4 Explicit Consent

We may share data with external parties outside this framework if you provide express, affirmative consent to do so.

3.5 Aggregated Non-Personal Data

We may compile and share anonymized, aggregated statistics that cannot be linked back to individual identities for research, reporting, or promotional evaluation.

3.6 No Sale of Personal Information

POLICY COMMITMENT: BELLA'S BREAD, LLC DOES NOT SELL, RENT, OR LEASE YOUR PERSONAL DATA TO THIRD-PARTY DATA BROKERS OR MARKETING FIRMS.

4. Data Safeguards & Security Standards

4.1 Security Measures

We employ reasonable technical, administrative, and physical safeguards to prevent data loss, unauthorized access, alteration, or disclosure:

• Transport      Encryption: Web sessions involving sensitive checkout data are secured      using standard SSL/TLS encryption protocols.
• PCI-DSS      Compliance: Financial transactions are handled exclusively by payment      processors meeting global card industry security standards.
• Access      Restrictions: Internal data access is strictly limited to authorized      personnel necessary for business operations.
• Credential      Protection: Passwords created on our portal are stored using secure      cryptographic hashing algorithms.

4.2 Security Limitations

While we implement commercial security protocols, no internet transmission or electronic database is completely immune to security threats. Transmitting data over public networks carries inherent risk, and we cannot guarantee absolute data security.

4.3 Security Incident Protocol

If a security incident affecting your unencrypted personal data occurs, we will issue notifications via email or online postings in compliance with applicable state and federal notification statutes.

4.4 Account Responsibility

If you create a customer profile, you are responsible for maintaining the confidentiality of your login credentials. Contact us immediately if you suspect unauthorized access to your account.

5. Individual Privacy Rights & Choices

5.1 Access Rights

You may request a copy of the personal information retained in our active databases. Subject to identity verification, we will provide a readable electronic extract of your records.

5.2 Information Updates

You may request corrections to inaccurate or incomplete personal records. Registered users can also update personal details directly within their online profile settings.

5.3 Account Deletion Requests

You have the right to request the deletion of your personal information from our systems. However, retention exemptions apply for:

• Completing      open orders or fulfilling ongoing contractual obligations.
• Compliance      with statutory tax, bookkeeping, or record-keeping regulations.
• Protection      against fraudulent activity or technical misuse.
• Defending      against legal claims.

5.4 Submitting Requests & Response Windows

To exercise your privacy choices, contact us:

• Email:     bellasbreadllc@gmail.com
• Phone:     385-240-2782
• Mail:     Bella's Bread, LLC, Utah

We will evaluate and respond to verified inquiries within forty-five (45) days. Identity verification may be required prior to releasing or modifying records.

5.5 Anti-Discrimination Guarantee

Exercising your privacy rights will never result in price increases, service denial, or lower product quality from Bella’s Bread, LLC.

6. Cookies & Web Tracking Technologies

6.1 Cookie Overview

Cookies are small text files placed onto your computer or mobile device by a web server. They allow sites to remember your session, preserve shopping cart items, and understand navigation preferences.

6.2 Categories of Cookies Employed

Cookie Category

Function & Operational Need

Opt-Out Status

Essential / Strictly Necessary

Required for site functionality, shopping cart   persistence, and secure login access.

Mandatory (Cannot opt out)

Functional

Remembers user settings, preferred delivery preferences,   and display selections.

Optional via browser

Analytics & Performance

Collects anonymous usage trends to help us improve page   loading and menu layouts.

Optional via browser

Marketing & Advertising

Measures promotional campaign performance and helps   deliver relevant offers.

Optional via browser

6.3 Browser Controls & Opt-Out Options

You can configure your web browser to reject cookies, alert you when cookies are sent, or clear saved session files. Note that disabling essential cookies may impact checkout functionality.

• Google      Analytics Opt-Out: tools.google.com/dlpage/gaoptout
• Network      Advertising Initiative: optout.networkadvertising.org

6.4 Do Not Track Signals

Current web standards lack a unified consensus for processing "Do Not Track" (DNT) browser headers. Our platform does not alter its operational behavior upon receiving DNT signals, but tracking can be managed using standard browser cookie settings.

7. Children's Privacy Protections

7.1 Age Restrictions

Our online store is intended for general adult audiences and is not directed at children under thirteen (13) years of age. We do not knowingly collect personal information from individuals under 13.

7.2 Parent & Guardian Rights

If a parent or legal guardian discovers that a child under 13 has submitted personal details without consent, please contact us immediately at bellasbreadllc@gmail.com. We will take prompt steps to remove the data from our storage systems.

7.3 Orders Involving Minors

Individuals under eighteen (18) years of age may only engage in transactions under the direct supervision and approval of a parent or legal guardian.

8. Policy Revisions & Updates

8.1 Modification Rights

We reserve the right to amend this Privacy Policy as needed to reflect statutory changes, operational updates, or new site capabilities. Revisions take effect immediately upon posting with an updated "Effective Date."

8.2 Notice of Significant Revisions

If material changes are made to how we handle personal data, notification will be provided by:

• Posting      a highlighted notice banner on our main website.
• Issuing      an email alert to registered account holders or recent customers.

Continued use of our website following an update signifies agreement to the revised Privacy Policy.

9. Privacy Contact Information

If you have questions, feedback, or formal privacy requests concerning this Privacy Policy, please reach out to us:

BELLA'S BREAD, LLC * Email:bellasbreadllc@gmail.com

• Telephone:     385-240-2782
• Location:     State of Utah, USA