Privacy Policy

This privacy policy explains how Karat Confections processes personal data in connection with workkaratbook.click. It applies to website visitors, people who make enquiries, and customers who use the bakery contact and ordering channels.

Effective Date
As stated in this policy
Scope
All users of our services
Questions?
01 · Purpose

Purposes of Processing

We process personal data to respond to enquiries, confirm orders and collection preferences, manage production and communication, maintain website security, deliver technical functionality, and keep records required for legal or operational purposes. Where allergen information is provided, it is used only to handle the specific order and related communication.

Processing is limited to the purposes stated in this policy.
02 · Sharing

Operational Sharing

Personal data may be shared with service providers that support website hosting, technical maintenance, security, and message delivery, to the extent needed for those functions. Any such recipient is expected to process the data only for the instructed purpose and under appropriate confidentiality obligations.

Operational recipients are used only to support the website and its administration.
01 · Collection

Data We Collect

We may process name, email address, phone number if provided, inquiry message, order specifications, event date or collection preferences, and allergen information voluntarily provided. We also process technical data such as server request metadata and browser and device information when the website is used.

The categories collected depend on the form, order, or communication used.
02 · Sources

Sources of Data

Data is collected when you use the contact form, communicate by email or phone, place or review an order, or otherwise interact with the website. Technical data is generated automatically by the website and its hosting environment for security and delivery purposes.

Information comes from direct submissions and from ordinary website operation.
03 · Cookies

Cookie Categories

Essential cookies support basic site operation, and preference cookies remember privacy choices. No confirmed analytics or advertising cookies are used on the basis of the current website facts.

Only limited cookie categories are confirmed for this website.
04 · Controls

Cookie Controls

The website uses essential cookies for site operation and cookies for privacy preferences. Where the browser permits, you may block or delete cookies through browser settings, but essential functions may not operate correctly if those cookies are disabled.

Cookie preferences are limited to the settings made available by the browser and the site.
User Rights

Your Rights

Depending on your location and the processing involved, you may have rights to access, correct, delete, restrict, object to, or receive a copy of your personal data. Some requests may be limited where retention or disclosure is required by law or where the request would affect the rights of others.

Available rights depend on the legal basis and the applicable law.
Requests

How to Make a Request

To exercise a privacy right, provide enough information to identify the relevant data and the nature of the request. We may ask for additional details to confirm identity and to locate the records concerned before responding.

Requests are handled through a verification and review process.
Data Retention

Retention

We keep personal data only for as long as needed for the relevant purpose, including handling enquiries, managing orders, maintaining security, and meeting legal obligations. When data is no longer required, it is deleted or anonymised according to applicable retention rules and operational needs.

Retention follows the purpose of collection and any legal record-keeping duty.
Policy Updates

Policy Updates

We may update this privacy policy from time to time. The revised version will apply from the date it is published on the website unless a different effective date is stated.

The policy may be revised to reflect legal, operational, or technical changes.
GDPR

GDPR Overview

Karat Confections acts as controller for the personal data described in this policy. Processing is carried out for website operation, contact handling, order administration, security, and related technical delivery, subject to the legal bases available under GDPR where applicable.

Where GDPR applies, it governs the processing of personal data of individuals in the European Economic Area in connection with this website.

This overview is limited to the GDPR framework applicable in the European Economic Area.
GDPR Rights

GDPR Rights

Where GDPR applies, you may request access, rectification, erasure, restriction, objection, and data portability, subject to legal limits and verification of identity where necessary. If processing is based on consent, consent may be withdrawn for future processing without affecting prior lawful processing.

GDPR rights are assessed against the legal basis and the nature of the request.
Privacy Contact

Contact Information

Email contact
help@workkaratbook.click
Telephone contact
+386 31 402 833
Postal address
Rimska cesta 89, 3311 Šempeter v Savinjski dolini
Privacy contact
Contact Page

Use the listed channels for privacy questions, rights requests, or policy-related correspondence.