Privacy Policy

Dalissa Baking Inc. dba Sensible Bakery

This policy sets out what information this website collects, the purpose for which it is collected, and who else receives it. It describes the website as it is presently built. Last updated 20 October 2026.

Browsing the website

No cookies are set. No analytics, advertising or tracking technology of any kind is used, and no record is kept of the pages a visitor reads or the sites they visit afterwards.

Two things are held in the browser's own storage. The contents of the shopping cart are kept in local storage, so that a cart survives the tab being closed; they stay on the visitor's device and are transmitted to us only at the point an order is submitted, and clearing browser data removes them. An open SensiBee conversation is kept in session storage, and is removed when the tab is closed.

As nothing is tracked, there is nothing for a browser's Do Not Track or Global Privacy Control signal to turn off, and the website behaves in the same way whether or not one is sent.

The contact form

Submitting the contact form sends us a name, an email address and a message, and a copy of each is retained.

The IP address and browser identification string from which a message was sent are recorded alongside it. This is used for one purpose: to enforce a limit of five submissions an hour from a single address, without which the form can be used to flood the inbox. It is not used for marketing, profiling or any other purpose.

An application for a wholesale account additionally collects a business name and a tax identification number. The tax identification number is transmitted to us by email and is not stored on the website.

The SensiBee chat

SensiBee is an automated assistant, not a person. Its replies are written by an artificial intelligence model and may be mistaken; ingredient and allergen information should always be confirmed on the product page.

Each question typed into the chat is sent, together with the earlier messages in the same conversation, to Anthropic, the company that makes the Claude models, which writes the reply. Anthropic processes these messages on our behalf and does not use them to train its models.

Each conversation is saved, together with the page on which it began and an approximate city, state and country estimated from the visitor's network connection. The IP address itself is not saved with the conversation. To limit the number of questions that can be asked from a single connection, a scrambled (hashed) form of the IP address is kept for two days.

Saved conversations are read by our staff in order to improve the answers and to find questions the website ought to answer. They are not used for marketing, and they are deleted 90 days after the last message.

The chat does not ask who a visitor is, and it should not be given personal, payment or health details. Anyone who would rather not use it may email info@sensiblebakery.com instead.

Placing an order

Fulfilling an order requires a name, a delivery or pickup address, a telephone number, an email address, and the contents of the order. This information is retained as the record of the transaction.

Payment card details are submitted directly to Stripe, who are responsible for processing and holding them. They are neither received nor stored by us at any point. A customer who chooses to pay with Amazon Pay signs in to Amazon, and that payment is handled by Amazon and Stripe.

Email and text messages

Customers receive email concerning their own orders: confirmations, queries and receipts.

Wholesale customers additionally receive text messages concerning their orders and deliveries, sent through Twilio. These messages are transactional rather than promotional, and replying STOP to any of them ends them.

No marketing text messages are sent to anyone, and the website offers no mailing list to subscribe to.

Third parties

Two parties receive a visitor's IP address as an unavoidable consequence of the browser requesting content from them in order to display a page:

• Google, which hosts the website and its photographs and serves the typefaces the pages are set in
• OpenFreeMap, which draws the map on the Locations page, and is contacted only when that page is viewed

The following receive information because they perform a specific function in completing a transaction:

• Stripe, which processes payments
• Amazon, when a customer chooses to pay with Amazon Pay
• UPS, which carries shipped orders and requires the delivery address
• the accounting system in which invoices are issued and our records are kept
• Anthropic, which writes the replies in the SensiBee chat
• Twilio, which delivers text messages to wholesale customers

That is the complete list. No information is disclosed to advertising networks, data brokers or analytics providers, as none are used. Personal information is not sold or rented under any circumstances.

Retention and deletion

Records of orders and invoices are retained for seven years, the period we are required to keep accounting records for tax purposes. Messages received through the contact form are retained while the matter is being dealt with and are deleted thereafter. SensiBee conversations are deleted 90 days after their last message.

A request to see, correct or delete the information we hold may be sent to info@sensiblebakery.com. We will correct what is wrong, delete whatever we are not obliged to retain, and state what remains and the reason for retaining it.

Security

The website and its data are hosted on Google Cloud and served exclusively over encrypted connections. Credentials for the payment, shipping and accounting services are held in a managed secrets store rather than in the application's own files.

No system can be guaranteed secure, and this policy does not represent otherwise.

Children

The website is not directed to children, and information is not knowingly collected from them. Where we are informed that such information has been provided, it will be deleted.

Amendments

This policy is amended whenever the practices it describes change, and the date above is revised accordingly. Its purpose is to describe the website as it actually operates.

Company and governing law

Dalissa Baking Inc., trading as Sensible Bakery, 30-30 47th Ave, Ste 160, Long Island City, New York 11101.

This policy, and any matter arising from the use of this website, is governed by the law of the State of New York.

Enquiries

Enquiries regarding this policy may be sent to info@sensiblebakery.com or made by telephone to the bakery.