Privacy Policy for Highland Hearth

At Highland Hearth, we are committed to protecting the privacy and security of our customers and visitors to our online platform. This Privacy Policy outlines how we collect, use, disclose, and safeguard your information when you visit our site, engage with our services, or participate in our workshops. We operate in accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR) where relevant, and the Personal Data Protection Act of Singapore (PDPA).

Information We Collect

We may collect various types of information, including personal data, to provide and improve our artisan bread baking, custom cake creation, patisserie items, catering, baking workshops, and coffee and tea services.

• Personal Identification Information: This includes your name, email address, phone number, and physical address when you place an order, register for a workshop, subscribe to our newsletter, or contact us. This information is necessary for fulfilling orders, managing class registrations, and communicating with you.
• Order and Transaction Data: Details about the products and services you purchase from us, including custom cake specifications, catering requests, and workshop bookings. While we do not directly store payment card details on our servers, these are processed securely by third-party payment processors.
• Technical Data: Information about how you access and use our online platform, such as your IP address, browser type, operating system, referral sources, pages viewed, and the dates and times of your visits. This helps us understand user behavior and improve our site's functionality.
• Communications Data: Records of your communications with us, including inquiries, feedback, and customer service interactions.

How We Use Your Information

We use the information we collect for various purposes, including:

• To Provide and Manage Services: Fulfilling your orders for artisan baked goods, managing your custom cake creations, coordinating catering services, and processing your enrollment in baking workshops.
• Communication: Sending confirmations, updates about your orders or workshop bookings, and responding to your inquiries and feedback.
• Marketing and Promotions: With your consent, sending you newsletters, special offers, or information about new products and workshops that may be of interest to you. You can opt out of these communications at any time.
• Improvement of Services: Analyzing usage data to understand customer preferences, troubleshoot issues, and enhance the quality of our products, services, and online platform.
• Legal Compliance: Meeting our legal obligations, resolving disputes, and enforcing our agreements.

Disclosure of Your Information

We do not sell, rent, or lease your personal information to third parties. We may share your information in the following circumstances:

• Service Providers: With trusted third-party service providers who assist us in operating our business and providing our services, such as payment processors, delivery services, and website analytics providers. These providers are obligated to protect your information and use it only for the purposes for which it was disclosed.
• Legal Requirements: When required by law or in response to valid requests by public authorities (e.g., a court order or government agency).
• Business Transfers: In connection with a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred to the acquiring entity.

Data Security

We implement appropriate technical and organizational measures to protect your personal data from unauthorized access, disclosure, alteration, or destruction. We regularly review our security procedures to consider new technologies and methods to ensure the ongoing security of your information.

Your Data Protection Rights

Depending on your location and applicable data protection laws, you may have the following rights regarding your personal data:

• Right to Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete personal data.
• Right to Erasure ( "Right to be Forgotten"): Request the deletion of your personal data under certain conditions.
• Right to Restrict Processing: Request that we restrict the processing of your personal data under certain conditions.
• Right to Object to Processing: Object to our processing of your personal data under certain conditions.
• Right to Data Portability: Request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.

To exercise any of these rights, please contact us using the details provided below.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any significant changes by posting the new Privacy Policy on our online platform. We encourage you to review this Privacy Policy periodically.

Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us: