Privacy policy

ATORIA'S FAMILY BAKERY PRIVACY POLICY 

Last Modified: August 4, 2025

 

Your privacy is important to us, and we are committed to protecting it through our compliance with this Privacy Policy. Atoria’s Family Bakery (collectively, “Atoria’s,” “we,” or “us”) respects your concerns about how information about you is used and shared, and we appreciate your trust in responsible handling of that information. This Privacy Policy explains the types of Personal Information we may collect, how we collect it, how we use it, with whom we share it, and the choices you have regarding these practices.

This Privacy Policy applies to information collected on our website located at atoriasfamilybakery.com, and any other mobile or online offering that we control and that links to this Privacy Policy (collectively, the “Website”), as well as to information you provide when you contact us through e‑mail, telephone, or other means.

We encourage you to carefully read this Privacy Policy and our Terms of Service. By accessing and using the Website, you agree that you have read and understand this Privacy Policy and that you accept and consent to the privacy practices (and any uses and disclosures of information about you) that are described in this Privacy Policy.  If you do not agree with our policies and practices, do not use or access the Website.

This Privacy Policy governs only our Website. It does not extend to any other third-party website, application, or service, even if linked from this Website. Social media networks and other third parties may collect or share data about you when you use their services through our pages. We do not control, nor do we endorse, their content, products or privacy practices. Before providing Personal Information, please read the privacy policies of every site or app you visit.

We may update this Privacy Policy periodically to account for changes in our collection and/or processing of Personal Information and will post the updated Privacy Policy on our Website, with a “Last Modified” date at the top. If we make material changes to this Privacy Policy, we will notify you and provide you an opportunity to review before you choose to continue using our products and services. Your continued use of the Website after we make changes is deemed to be acceptance of those changes, so please check the Privacy Policy periodically for updates.

 

Children under the Age of 18

We do not knowingly collect Personal Information from children under the age of 18.  If we learn we have collected or received Personal Information from a child under the age of 18, we will delete that information.  If you believe we might have any Personal Information from or about a child under the age of 18, please email us at info@atorias.com. 

 

What information do we collect?

We collect several types of information from and about users of our Website, which may consist of information that personally identifies, describes, or could be reasonably linked, directly or indirectly, with a particular individual or household (“Personal Information”).  In the last 12 months, we may have collected the following categories of Personal Information about you when you interact with us through our Website:

• Identifiers (e.g., name, delivery address, email address and telephone number).
• Financial information (e.g., credit card number, debit card number, and bank account number).
• Commercial information (e.g., products or services purchased, obtained or considered).
• Internet or other electronic network activity information (e.g., browsing history and information regarding a consumer’s interaction with an internet website application, or advertisement).
• Geolocation data.
• Inferences drawn from any of the Personal Information identified above to create a profile about a consumer reflecting the consumer’s preferences, characteristics, predispositions, and behavior.

 

How do we collect this information?

Information You Provide To Us

We collect the Personal Information identified above that you voluntarily provide to us through the Website and when you order our products. If you are a recipient of one of our products, we collect your name and delivery address, as provided to us by the person who ordered the product.

 

Purchasing Our Products And Registering On Our Website

We collect Personal Information when you make a purchase using a payment card, we collect Personal Information for processing and shipping your order, including your name, delivery address, phone number, and payment card information, and the name, address and phone number of your intended recipient. When you become a registered user of our Website, you may be able to choose to save your billing information and shipping information as part of your account. You can view or change your account information at any time by logging in with your email address and password, or by emailing our Customer Service at info@atorias.com. 

 

Cookies

When you access the Website, we and our third-party providers (including Shopify, Google, and Meta) may place files known as “cookies” on your device, along with similar industry standard technologies like pixels or java scripts, to serve ads and/or collect data across the internet and sometimes on our Website. Some cookies allow us and our third-party providers to store your preferences, including your selected U.S. state of residence, and including, but not limited to, log-in information, and ordering and shipping information. Please keep in mind that some cookies may persist only after you have logged into your account on the Website. Other cookies allow us and our third-party providers to passively gather certain information about your use of our Website, which may include gathering information for the following purposes: statistics collection and analysis, Website optimization, analytics (as described below), and market research. Our third-party providers may collect Personal Information that may include your Internet Protocol (IP) address, the operating system type used by your electronic device, browser type, user agent, email addresses (where hashed or otherwise rendered pseudonymous) and other user and device level pseudonymous information, and the address of a referring website, if any. Some of these third-party providers may be able to collect Personal Information that you share with this Website via a web form automatically and prior to your pressing a submit button; and they may be able to use information from your visits to this site to send marketing messages to you in a way that may personally identify you. Our third-party providers may do this even if you're not logged into your account. If you would like more information about these practices, please click here. We and our third-party providers collect this information to improve the quality of your visit to our Website, for security purposes, including for authentication, to facilitate Website navigation and to personalize your experience while visiting the Website.

 

If you choose not to accept certain cookies, you may not have access to certain features of our Website. Your browser may be configured to reject cookies or notify you when a cookie is set.

 

Your browser settings may not permit you to control the technologies utilized by these third-party companies.

 

Google Analytics

The Website may use Google Analytics, a web analysis service provided by Google, in order to better understand your use of our Website and how we can improve it. Google Analytics collects information such as how often users visit a website, what pages you visit when you do so, and what other websites you used prior to coming to such website.  To more fully understand how Google may use the data it collects on our Website, please review “How Google uses information from sites or apps that use our services” located here.

 

Shopify

The Website may use Shopify, a cloud-based, subscription-based e-commerce platform that enables us to start, manage, and grow our Website. Shopify uses reporting and analytics cookies to collect information about how customers use our Website and how often. To more fully understand how Shopify may use the data it collects on the Website, please review “Merchant storefronts” located here. 

 

Klaviyo

We may use Klaviyo, a customer data and marketing automation platform, to help us deliver the services you request and grow our platform. Specifically, we use Klaviyo to market and sell our products to individuals through email and SMS campaigns. Klaviyo helps us manage communications with you and personalize our marketing efforts. You can unsubscribe from Klaviyo’s marketing text messages at any time by replying STOP or clicking the unsubscribe link (where available) in one of their messages. For more information, please see their Terms of Service. To better understand how Klaviyo may use the data it collects, please review the “HOW WE USE YOUR PERSONAL INFORMATION” section of Klaviyo’s Privacy Notice located here.

 

Web Beacons

Some of the areas of the Website may contain electronic images known as web beacons that allow us, and our third-party providers or affiliates, to count and track users who have visited certain portions of the Website. Web beacons collect only limited information and do not collect any of your Personal Information.

 

The Website may use Meta Pixel. Meta Pixel is an analytics tool that allows us to measure the effectiveness of our advertising by understanding the actions you take on our Website. In this way, we can tailor our marketing to better suit your needs and only display ads that are relevant to you. To better understand how Meta may use the data it collects, please review the "How do we use your information?" section of Meta's Privacy Policy located here.

 

How will we use the information you provide to us?  

Generally

We, along with our third-party providers, may collect and use Personal Information to operate this Website and provide our products and services. This includes enhancing the user experience, assisting with product discovery, addressing security or integrity issues, and for any other lawful purposes

 

We may also use your Personal Information to send you push notifications (SMS messaging), promotional materials and administer our subscriber program.

 

Additionally, we may retain and use Personal Information to facilitate and otherwise address inquiries or requests regarding the Website or our products or respond to your questions or requests for information about or from us. We may also use Personal Information as necessary to ensure compliance with any of our policies and any applicable legal requirements.

 

Contests

We may offer certain contests and other promotions from time to time. Participation in these contests and promotions is completely voluntary; you have a choice about whether to disclose Personal Information required to enter. We will use your Personal Information to notify you if you win a contest or other promotion. Subject to applicable legal restrictions, we also may use the Personal Information collected to communicate with you about our services or products.

 

Job Applicants

Any Personal Information you provide us when applying for a career position with us will be used solely to consider and act upon your application. We may retain your Personal Information for a period of time, but only for as long as necessary for such purposes.

 

With whom do we disclose the information we collect?

We do not share, sell, or otherwise disclose your Personal Information for purposes other than those outlined in this Privacy Policy. We may share all of the categories of your Personal Information that we collect as permitted or required by applicable legal requirements. We engage third-party providers who may collect or receive your Personal Information on our behalf, and we require such third parties to comply with the same or similar standards that we apply to protect Personal Information. Such third-party providers perform functions such as payment processing, operating and supporting the Website, analyzing data, or performing marketing or consulting services.

 

We may also disclose Personal Information if we become subject to a subpoena or court order, or if we are otherwise legally required to disclose such information. We may also use and disclose Personal Information to exercise our legal rights, or to take action regarding actual or suspected illegal or fraudulent activities or potential threats.

 

As we grow and develop our business, our corporate structure or organization might change, we may merge or otherwise combine with, or we or portions of our business might be acquired by, another company. In any such transactions, Personal Information generally is, and should be expected to be, one of the transferred business assets. Also, if any bankruptcy or reorganization proceeding is brought by or against us, your Personal Information may be considered a company asset that may be sold or transferred to third parties.

 

How long do we retain this information?

We retain the Personal Information we collect for the business and commercial purposes described in the “How do we collect this information” and “How will we use the information you provide to us” sections above.  We retain the Personal Information we collect for as long as reasonably necessary to fulfill the purposes described above, unless a shorter retention period is required by law. We may retain Personal Information after our relationship with you ends. The length of retention may vary depending upon factors such as:

 

·         Recordkeeping or legal compliance requirements;

·         The need to resolve inquiries or complaints;

·         Operating, expanding, and improving our business (i.e. maintaining your account);

·         The need to exercise or defend legal claims;

·         The need to prevent fraud, protect assets, and promote security; and

·         Protecting the rights or safety of you, us, or others.

 

How do we protect information collected about you?

We take reasonable measures to secure and protect Personal Information transmitted via or stored on the Website or our other systems. Nevertheless, no security system is impenetrable. We cannot guarantee that Personal Information that users of the Website or our other systems may happen to transmit or otherwise supply will be totally secure.

 

Your account information is protected by the password you create on our Website. Please protect the confidentiality of that password and do not disclose it to any third parties. 

 

State-Specific Privacy Notice

These sections provide additional information for residents of certain U.S. states that have state-specific data privacy laws and regulations. 

 

California Residents Only 

This portion of our Privacy Policy advises California residents of rights provided in the California Consumer Privacy Act (the “CCPA”) and how to exercise those rights. These rights are:

·         The right to know about the Personal Information we collect about you and how it is used and shared;

·         The right to delete Personal Information collected from you;

·         The right to opt-out of the sale or sharing of your Personal Information;

·         The right to non-discrimination for exercising your CCPA rights;

·         The right to correct inaccurate Personal Information that we have about you; and

·         The right to limit the use and disclosure of sensitive personal information collected about you.

 

In the past 12 months, we have collected the following categories of Personal Information as necessary to operate our business, to comply with our legal and regulatory obligations, and to provide our services to you:

·         Identifiers (e.g., name, mailing address, email address and telephone number).

·         Financial information (e.g., credit card number, debit card number, and bank account number).

·         Commercial information (e.g., products or services purchased, obtained or considered).

·         Internet or other electronic network activity information (e.g., browsing history and information regarding a consumer’s interaction with an internet website application, or advertisement).

·         Geolocation data.

 

 

In some instances, we may use or disclose certain Personal Information that we collect which constitutes “sensitive personal information” under the CCPA (i.e. your payment card number). We do not, however, use that information outside of certain limited uses, such as the following: (i) providing and improving our products; (ii) detecting security incidents; (iii) resisting malicious, deceptive, fraudulent, or illegal actions; (iv) ensuring physical safety; (v) for certain non-personalized advertising; (vi) maintaining or servicing accounts, providing customer service, or similar uses; and (vii) improving our services.

 

If you are a California resident, you may request certain Personal Information from, or certain action, by us, or you may authorize an agent to make such a request on your behalf. We will seek to verify your identity and your agent’s authority when we receive an individual rights request from you or on your behalf to ensure the security of your Personal Information.

 

Please direct any rights requests (as further described below) or additional questions that you may have regarding this Privacy Policy to: info@atorias.com.

 

Financial incentives, as defined under the CCPA, include offering a different price in exchange for the collection of Personal Information. We offer rewards (such as coupons, product discounts, exclusive promotions, and early access to seasonal sales) to consumers who sign up for and voluntarily provide certain requested Personal Information to use in connection with Atoria’s subscriber program. You can view or change your subscription information at any time by logging in with your email address and password and clicking “Manage Subscriptions” or by emailing our Customer Service at info@atorias.com. 

 

 

Residents of Other U.S. States

This portion of our Privacy Policy describes the rights that may apply depending on your jurisdiction of residence and applies only to the extent of any inconsistency with the information in the section above.

 

·         Right to Confirm and Access. You have the right to confirm whether we are processing your Personal Information, and you have the right to access such Personal Information. You also have the right to request a list of specific third parties to whom we disclose Personal Information.

·         Right to Correct. You have the right to correct inaccuracies in your Personal Information, taking into account the nature of the Personal Information and the purposes of processing the Personal Information.

·         Right to Delete. You have the right to delete Personal Information provided by or obtained about you.

·         Right to Obtain a Copy. You have the right to obtain a copy of your Personal Information that you previously provided to us in a portable, and to the extent technically feasible, readily usable format that allows you to transmit the data to another data controller without hindrance.

·         Right to Opt-out. You have the right to opt-out of the processing of your Personal Information for the following purposes: 1) targeted advertising, 2) the sale of your Personal Information, or 3) profiling in furtherance of decisions that produce legal or similarly significant effects concerning you. Subject to certain exceptions provided by law, we will get your opt-in consent prior to collecting sensitive personal information.

·         Right to Appeal. If we refuse to take action regarding your exercise of any of the rights described in this section, you may appeal our refusal to do so by contacting us as provided below.

 

You may exercise these rights by emailing us at info@atorias.com.

 

Do Not Track

Certain state laws require that we indicate whether we honor “Do Not Track” settings in your browser. We adhere to the standards set out in this Privacy Policy and do not recognize, monitor, or respond to any Do Not Track browser requests.

 

Global Privacy Control 

To exercise the right to opt-out, you may submit a request to use by setting the Global Privacy Control (GPC) signal. Once you make an opt-out request, we will wait at least 12 months before asking you to opt-in to Personal Information sales. You do not need to create an account with us to exercise your opt-out rights. You may also opt-out by broadcasting an opt-out preference signal, such as the GPC on browsers and browser extensions that support such a signal. To download and use a browser supporting the GPC browser signal, please visit: https://globalprivacycontrol.org/orgs. If you choose to use the GPC signal, you will need to turn it on for each supported browser or browser extension you use.

 

Complaints

If you have any complaints about how we process your Personal Information, please contact us using the contact details provided below. If you are not satisfied with our response to your complaint, depending on where you live, you may have the right to appeal our decision by contacting us using the contact details set out below, or lodging a complaint with your local data protection authority.

 

Contact Us

We welcome your feedback and questions. Please contact us at:

 

Atoria’s Family Bakery

101 Leavesley Rd. Gilroy, CA 95020

info@atorias.com

1.800.634.5502