Bender Bakery is a small home bakery. We ask for as little as we can, use it only to get your order to you, and delete it on a schedule. This is exactly what that means.
What we ask for, and why
- Your name, email address and phone number — to confirm your order, label your box, and reach you if something about your pickup changes.
- Anything you write in the note with your order.
- What you ordered and the pickup time you chose.
- Two ticked boxes: that you’re buying in Virginia for your own household (a condition of Virginia’s home bakery rules), and that you’ve read the allergen notice.
Paying
Card payments are taken by Stripe, on Stripe’s own secure page. Your card number never reaches this site, and we never see or store it. Stripe keeps its own record of the payment, under Stripe’s privacy policy.
Who else handles it
- Stripe takes the payment.
- Cloudflare runs this website and the database your order is kept in, and the quick check on the order form that keeps automated spam out.
- Resend delivers your confirmation email.
Nobody else. We don’t sell your details or share them for marketing, and we don’t add you to a mailing list — the only emails you’ll get from us are about an order you placed.
Cookies and tracking
This site doesn’t use advertising or tracking cookies. We see simple visitor numbers — how many people looked at the menu this week — through Cloudflare’s analytics, which works without cookies and doesn’t identify anyone. Stripe’s payment page and Cloudflare’s spam check follow their own policies.
How long we keep it
- Your order — your details and what you ordered — is deleted automatically 90 days after you place it.
- To stop the order form being flooded, when you place or look up an order we keep a scrambled, one-way version of your network address for about an hour. It can’t be turned back into the address, and the address itself is never stored.
- We keep two things longer: the emails about your order in our inbox, and our record of each sale, which we need for our taxes.
Your choices
Email [email protected] to ask what we hold about you, to correct it, or to have it deleted sooner. If your order hasn’t been collected yet, we’ll need your details until it has — after that, we’ll delete everything except the sales record we have to keep.
Last updated 23 September 2026.