Camila's Pâtisserie

We collect information you provide when your vendor account is created: company name, contact name, email address, phone number, and business address. When you place orders, we collect order details and payment information. We also collect usage data such as login timestamps and pages accessed within the Portal.

Your information is used to: process and fulfill wholesale orders; send order confirmations, invoices, and shipping notifications; communicate about your account and payment status; send one-time SMS verification codes for login authentication; improve the Portal and our services; and comply with legal and accounting obligations.

If you use Phone/SMS login, your phone number is used solely to deliver one-time verification codes for wholesale portal authentication. We do not send marketing messages via SMS. Your phone number is not sold or shared with third parties for their marketing purposes. See our SMS Terms page for complete details.

We do not sell your personal information. We share information only with: payment processors (Stripe) to process transactions; our accounting system (QuickBooks) for invoicing and payment tracking; email service providers (Resend) for transactional communications; SMS providers (Twilio) for login verification codes; and law enforcement when required by law.

We implement industry-standard security measures including encrypted data transmission (TLS/SSL), secure authentication with Supabase, encrypted payment processing through Stripe, and role-based access controls. However, no method of electronic transmission or storage is 100% secure.

We retain vendor and order data for as long as your account is active and for a minimum of seven (7) years thereafter to comply with tax and accounting regulations. You may request deletion of your account by contacting us, subject to legal retention requirements.

You may request access to, correction of, or deletion of your personal information by contacting wholesale@camilaspatisserie.com. California residents have additional rights under the CCPA. We will respond to all requests within 30 days.

The Portal is not intended for individuals under the age of 18. We do not knowingly collect information from children.

We may update this Privacy Policy periodically. Changes will be posted here with an updated effective date.