Privacy Policy

How I handle your info.

Effective May 28, 2026

Quick version: I collect what I need to fulfill your order and reach you about it. I do not sell your data, share it with advertisers, or use it for anything other than running the bakery.

Who I am

This site is operated by Jessikah Fechner doing business as Who Let Her Bake, a California Cottage Food Operation based in Oakland, CA. Throughout this policy, “I,” “me,” and “Who Let Her Bake” all refer to the same small business.

If you have questions about anything below, email me at wholetherbake@gmail.com.

What I collect

When you place an order or fill out the contact form, I collect:

Your name and contact info (email, phone)
Your delivery address, if you choose delivery
Order details (items, quantities, fulfillment date)
Your preferred payment method (the type, like Credit Card or Venmo; never the card numbers themselves)
Whether you consented to receive text updates about your order
Any notes or messages you send me

I do not store credit card numbers, banking information, or payment account passwords on this site. When card payments are processed, that happens through a separate payment processor, not here.

How I use it

To prepare and deliver your order
To send you order confirmations and updates by email or text (only if you consent)
To respond when you reach out via the contact form
To keep accurate business records (orders, customers, payments) for tax and accounting purposes
To improve the menu, the site, and how I run things

I do not use your information for advertising, profiling, or any third-party marketing.

Who I share it with

I use a handful of trusted services to keep the bakery running. Each one only sees the data they need to do their job:

Supabase (database hosting, US based): stores your orders, customer record, and contact messages.
Resend (email delivery): delivers order confirmation emails and contact responses.
Netlify (website hosting): serves this website.
Namecheap (domain registrar): manages the wholetherbake.com domain.

I do not sell, rent, or trade your information with anyone. I may share information if legally required (subpoena, court order, etc.), but that has never happened and is not something I plan for.

Cookies and tracking

This site uses only essential session cookies needed to make the order form work. There are no third-party tracking pixels, no analytics that follow you across the web, and no advertising cookies.

Your rights

You can email me anytime to:

See what information I have about you
Correct anything that is wrong
Delete your information (with some exceptions for legally required business records)
Opt out of any non-essential communications

California residents have additional rights under the California Consumer Privacy Act (CCPA / CPRA). The same email reaches me for any of those requests.

How long I keep it

I keep order and customer records for as long as needed to run the business and meet tax and recordkeeping obligations (generally seven years for tax records in California). Contact form messages are kept until they are resolved or no longer useful.

Children

This service is intended for adults. I do not knowingly collect information from anyone under 13. If you believe a child has submitted information through this site, please email me and I will delete it.

Changes to this policy

If I update this policy, I will change the “Effective” date at the top of the page. Significant changes will be mentioned on the home page or by email if appropriate.

Contact me

Questions, concerns, or just want to say hi: wholetherbake@gmail.com