Privacy Policy
Effective Date: August 19, 2026 · Wholly Cookies LLC. All rights reserved.
1. Introduction
Wholly Cookies LLC ("we," "our," or "us") operates the Wholly Cookies! bakery storefront and online ordering platform at whollycookies.com. We respect your privacy and are committed to protecting the personal information you share with us. This Privacy Policy outlines how we collect, use, disclose, and safeguard your data when you visit our website, place an order for delivery or shipping, or submit a customer inquiry.
2. Information We Collect
We collect information that identifies, relates to, or describes you ("Personal Information") when you interact with our service:
- Contact & Fulfillment Data: First and last name, shipping address, billing address, email address, and phone number when placing an order or inquiry.
- Payment Information: Credit card details, cardholder name, and billing postal code processed securely during checkout.
- Inquiry & Event Details: Organization name, event dates, estimated cookie quantities, and custom notes submitted via our inquiry form.
- Technical & Usage Data: Anonymized IP addresses, browser type, device identifiers, referring URLs, and page interaction timestamps.
3. Third-Party Service Disclosures
To provide a seamless, secure ordering and delivery experience, Wholly Cookies LLC integrates with trusted third-party technology providers. We do not sell your personal data. Below are the third-party services utilized on our platform:
Processes credit card payments, tokenizes sensitive card data, and performs automated Address Verification System (AVS) and fraud risk evaluations. Square handles payment data in accordance with PCI-DSS Level 1 compliance.
Powers our transactional email infrastructure. Resend dispatches automated order receipts, fulfillment updates, and internal support ticket inquiries to ensure customer notifications are delivered reliably.
Hosts our web application infrastructure, edge servers, and cloud functions. Vercel processes web requests and serves static bakery assets with enterprise-grade encryption in transit (HTTPS/TLS).
Collects anonymized website traffic statistics, page views, and user navigation metrics to help us optimize bakery menu navigation and site performance. You may opt out via browser settings or analytics blockers.
4. How We Use Your Information
Wholly Cookies LLC uses collected information strictly for legitimate business purposes:
- Processing payments and shipping orders via UPS 2-Day Air.
- Sending automated order confirmation receipts and tracking details via Resend.
- Responding to large-order, catering, and partnership inquiries.
- Preventing fraudulent transactions and ensuring payment security via Square.
- Improving website performance and user experience through Google Analytics.
5. Data Retention & Security
We retain personal information only for as long as necessary to fulfill orders, complete support tickets, and satisfy accounting or legal requirements. All data transfers across whollycookies.com are encrypted using standard SSL/TLS protocols. Payment card numbers are tokenized directly by Square and are never stored on Wholly Cookies LLC servers.
6. Your Rights & Choices
Depending on your state of residence, you may have the right to request access to the personal data we hold about you, request corrections to inaccurate information, or request the deletion of your customer history. To exercise your rights, please email us at support@whollycookies.com.
7. Contact Us
If you have any questions or concerns regarding this Privacy Policy or our data practices, please contact us:
Wholly Cookies LLC
205 Rock Harbor Lane
Foster City, CA 94404
Email: support@whollycookies.com