Privacy

This covers what thefreshbake.com, run by Deliberate Pty Ltd, PO Box 32, Bassendean WA 6054, Australia, collects and why. Questions, or requests to see, correct or delete your details: hello@thefreshbake.com.

If you submit or claim a listing

We keep your email address and what you write. The address is used to confirm you, sign you in and tell you about your listing, and it's never shown on the site. It's kept for as long as you hold the listing, and for records afterwards.

Addresses found on websites

When we list a product we read its public website, and we may store email addresses published there. They're private, never shown on the site, and used only for running the directory and contacting that business about its listing. Business owners can ask us to remove a listing or email us to have an address deleted. Anyone we email can unsubscribe with the link in the email, and we keep that address only to make sure we don't email it again.

If you pay

Stripe handles payment, and card details never reach us. We keep what Stripe tells us about the subscription: its customer and subscription codes, its status and the date it's paid to.

Counting clicks

When you click a link to a listed site, we count it for that listing, by day and by where it was on the page. To tell one visitor from another for a day we make a scrambled code from your internet address and browser, which changes daily and is deleted after two days. It can't be turned back into your address. Linked sites can see you came from here, because their links carry ref=thefreshbake.

Cookies and analytics

A session cookie keeps forms working and keeps you signed in if you are. It's only set when needed. We use Google Analytics to count visits and see which pages are useful, not for advertising. Visitors in a European time zone are asked first, and anyone can change their choice with "Analytics settings" in the footer.

Logs and limits

Our server keeps ordinary request logs, including internet addresses, for security. Forms keep scrambled visitor codes for limits. Sign-ins, payments and admin actions are noted in a security log with the internet address they came from. Emailed links last 24 hours, and we delete copies of emails we've sent after 30 days.

Who else sees it

Resend delivers our email. Stripe takes payments. Cloudflare Turnstile checks forms are filled in by people, so it sees your internet address and browser when you use one. Google runs our analytics. Some of these are outside Australia, including in the United States. We don't sell personal information.

Your rights

You can ask for access to or correction of your details. If you're unhappy with how we've handled them, tell us first. In Australia you can then go to the Office of the Australian Information Commissioner. Visitors elsewhere may have further rights under their own laws.