So Elishous Bakery logoSo Elishous Bakery

Your information

Privacy Policy

Effective October 30, 2026

1. Who we are

  • So Elishous Bakery ("we", "us") is a home bakery run by Elisha Antoine in Woodland Park, Colorado, serving the Pikes Peak region. This policy explains how we handle information collected through soelishousbakery.com.

2. Information we collect

  • Pre-orders: your name, email, phone (optional), pickup or delivery date, delivery address and ZIP code if you choose delivery, the treats you order and any notes.
  • Wedding and event inquiries: your name, email, phone, event date, venue, guest count, style, package and message, plus deposit amounts and dates we record.
  • Contact messages: your name, email, phone (optional), subject and message.
  • Wedding contracts: the name you type as your signature, the date and time you signed, the contract version and your IP address, kept as proof of signing.
  • Chat helper: the messages you send our AI chat helper and its replies, plus any name, email or order details you give it. Chats are stored so the owner can review them and follow up, and are processed by an AI service to write replies. Chats are kept for 12 months, then deleted. Please don't share payment or health details in chat.
  • Mailing list (only if you sign up and tick the box): your email, optional first name, the date you joined and where on the site you signed up. We send one welcome email, then occasional bakery news through a newsletter service. Every email has an unsubscribe link, or you can ask us to remove you at any time.
  • Treat Finder: the occasion, guest count, flavors, dietary needs and budget you enter. We do not ask for or send your name or email with it.
  • Analytics (only if you accept): pages visited, approximate location, device and browser type, and actions such as adding a treat or sending a form, via Google Analytics. No names, emails or phone numbers are sent to Google.
  • Essential storage: small items in your browser that remember your cookie choice and keep the owner signed in.

3. How we use it

  • To take, confirm and fulfil your orders and events, and to reply to your messages.
  • To send emails you expect: order confirmations, booking confirmations, contract links and replies.
  • To keep a record of signed contracts and deposits.
  • To understand which pages are useful and improve the site (analytics, with consent only).
  • We do not sell your personal information, use it for targeted advertising, or make automated decisions with legal effects about you.

4. Who we share it with

  • Service providers that run the site for us, under their own privacy and security terms: website hosting and database (Lovable Cloud), email delivery, and Cloudflare.
  • Google Analytics, only after you accept analytics cookies.
  • An AI model provider that writes Treat Finder suggestions from the preferences you enter (no names or contact details).
  • Authorities when required by law, or to protect our rights and safety.
  • We never sell or rent your information.

5. How long we keep it

  • Orders, inquiries and messages: up to 3 years for tax, bookkeeping and Colorado cottage food sales records, then deleted.
  • Signed contracts and deposit records: 4 years after the event, in case of disputes.
  • Analytics data: kept by Google for 14 months.
  • Cookie choice: 12 months, after which we ask again.

6. Security

  • Information is sent over encrypted connections (HTTPS) and stored with access limited to the bakery owner. No system is perfectly secure, but we take reasonable steps to protect your data.

7. Children

  • This site is not directed to children under 13, and we do not knowingly collect their information. If you believe a child has sent us information, contact us and we will delete it.

8. Your choices and rights

  • You can ask to see, correct, download or delete the information we hold about you, or to stop any processing you have consented to.
  • You can turn analytics on or off at any time with the Cookie settings link at the bottom of every page.
  • To make a request, use the Contact page and choose "General inquiry". We will verify your request and respond within 45 days. You may appeal a decision by replying to our response; if you are not satisfied, you can contact the Colorado Attorney General.
  • We will never treat you differently for exercising your rights.

9. Colorado residents

  • Under the Colorado Privacy Act you have the rights to access, correct, delete and port your data, and to opt out of the sale of personal data, targeted advertising and profiling. We do not sell data or do targeted advertising or profiling.
  • We honor universal opt-out signals such as Global Privacy Control (GPC) and Do Not Track: if your browser sends either one, analytics stays off automatically.

10. Visitors from other states

  • California and other state residents have similar rights to know, delete, correct and opt out; use the same Contact page process. We do not sell or share personal information for cross-context behavioral advertising.
  • Do Not Track and Global Privacy Control: we honor both. If your browser sends either signal, we do not load Google Analytics, even if you accepted cookies.

11. Changes and contact

  • This policy is effective October 30, 2026. If we make important changes, we will update this page and the date.
  • Questions? Reach us through the Contact page.