Privacy Policy

Last updated: 1st July 2026

1. Introduction

Gourmet Fine Pastries ("we", "us", or "our") respects your privacy and is committed to protecting your personal information. This Privacy Policy explains what information we collect when you use our website (gourmetpastries.co.bw) and our mobile application (the "App"), how we use and protect it, and the choices and rights you have. It applies to both our website and our App (together, the "Service").

By using the Service, you agree to the collection and use of information in accordance with this policy.

2. Who we are

Gourmet Fine Pastries is a bakery business operating in Botswana and is the controller responsible for your personal information collected through the Service. You can reach us using the contact details in Section 18.

3. Information we collect

We collect only the information we need to provide the Service and fulfil your orders:

Information you provide

• Account details — your email address and a securely hashed password, if you create an account.
• Contact & order details — your name, phone number, and (for delivery) your delivery address.
• Order information — the items you select, custom-cake specifications (such as size, flavours, decorations and message), quantities, totals, your chosen pickup or delivery option, and any allergy or dietary information you provide.
• Communications — information you provide when you contact us by phone, email, or through the Service.

Information collected automatically

• Push notification token — a unique device token used solely to deliver order-status notifications to your device.
• Technical & usage data — limited technical information such as device type, app version, and basic interaction data needed to operate and improve the Service.

We do not collect your precise GPS location, contacts, photos, or any special categories of data beyond the allergy information you choose to provide for your order.

4. How we collect it

We collect information (a) directly from you when you register, place an order, or contact us; and (b) automatically through the App, such as when your device registers for push notifications. We do not buy personal information about you from third parties.

5. How we use your information

We use your information to:

• process, confirm and fulfil your orders (including pickup and delivery);
• contact you about your order where necessary;
• send you push notifications about your order status;
• enable our bakery, management and delivery staff to manage orders;
• take payment and manage deposits and balances;
• maintain the security and integrity of the Service; and
• comply with our legal and regulatory obligations.

We do not use your personal information for third-party advertising or sell it to anyone.

6. Legal bases for processing

Where applicable data-protection law requires a legal basis, we rely on: performance of a contract (to fulfil your order); your consent (for example, for push notifications, which you can withdraw at any time); our legitimate interests (to operate, secure and improve the Service); and compliance with legal obligations.

7. Sharing & disclosure

We do not sell, rent or trade your personal information. We share it only as needed to provide the Service:

• with our bakery, management and delivery staff, to prepare and deliver your order;
• with the service providers listed in Section 8, who process data on our behalf;
• with payment processors, to take payment;
• where required by law, regulation, or valid legal process, or to protect the rights, safety and property of Gourmet Fine Pastries, our customers or others.

8. Service providers

We rely on trusted third-party providers to operate the Service:

• Google Firebase — provides our authentication and cloud database services, which securely store your account and order information.
• Expo and Google Firebase Cloud Messaging — used to deliver push notifications to your device.
• Payment provider — processes online payments securely; we do not store full card details on our systems.

These providers are bound by their own privacy and security obligations and may only process your data in accordance with our instructions.

9. Storage, location & retention

Your information is stored securely using Google Firebase, hosted on Google's infrastructure, which adheres to recognised international data-protection standards. We retain your order and account information for as long as needed to provide the Service and to meet our legal, accounting and operational requirements — typically up to twelve (12) months after your last order — after which it may be deleted or anonymised. You may request earlier deletion as described in Section 13.

10. Data security

We take reasonable technical and organisational measures to protect your information against unauthorised access, loss, misuse or alteration. Account passwords are stored in hashed form, access is restricted to authorised staff, and data is protected by our providers' security controls. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

11. Push notifications

With your permission, the App sends push notifications about your order status — for example, "Order Received", "Preparing", "Ready for Pickup", "On the Way", and "Delivered". You can disable notifications at any time in your device settings. Disabling them will not affect your ability to place orders.

12. Cookies & analytics

Our website uses only essential cookies needed for the site to function. We do not use advertising or tracking cookies. If we introduce analytics in the future to understand how the site is used, we will update this policy accordingly.

13. Your rights & choices

Subject to applicable law, you have the right to:

• access the personal information we hold about you;
• request correction of inaccurate or incomplete information;
• request deletion of your personal information;
• withdraw consent at any time, where processing is based on consent; and
• request a copy of your information in a portable format.

To exercise any of these rights, contact us using the details in Section 18. We will respond within a reasonable time and in line with applicable law.

14. Children's privacy

The Service is intended for adults and is not directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will take steps to delete it.

15. Third-party links

The Service may contain links to third-party websites or services (for example, our social media pages or app-store listings). We are not responsible for the privacy practices of those third parties, and we encourage you to review their privacy policies.

16. International transfers

Because we use cloud providers such as Google Firebase, your information may be processed and stored on servers located outside Botswana. Where this happens, we take steps to ensure your information continues to be protected in accordance with this policy and applicable law.

17. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date above shows when it was last revised. Material changes will be made available through the Service. Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.

18. Contact us

If you have any questions about this Privacy Policy or how we handle your information, please contact us:

• Email: contact@gourmetpastries.co.bw
• Address: Mowana Park Mall, Phakalane, Gaborone, Botswana

Back to home