Privacy policy

We collect what is needed to send you a parcel and nothing beyond it. We do not sell your data.

What we collect

• To fulfil an order: name, email, WhatsApp number, delivery address, and what you bought. We keep this as a record of the sale.
• If you join a waitlist: your email, and your WhatsApp number if you give one. Used only to tell you about that item or the next drop.
• Automatically: standard server logs, and analytics if you accept them.

We never see or store your card details — those go straight to Midtrans.

Who it is shared with

• Midtrans — payment processing. Receives your name, email, phone and order total.
• Biteship and the courier — shipping. Receives the delivery name, address and phone.
• Fonnte — sends the WhatsApp order updates.
• Resend — sends order emails.
• Supabase and Vercel — database and hosting.
• Google Analytics and Meta Pixel — traffic measurement and advertising. These set cookies and can build a profile across sites. Block them with your browser or an ad blocker if you prefer; the store works without them.

How long we keep it

Order records are kept while we are required to for tax and accounting. Waitlist entries are kept until you ask to be removed.

Your choices

• Reply STOP to any WhatsApp message to stop receiving them.
• Message or email us to see, correct or delete what we hold. We may need to keep completed order records for tax reasons.

Contact [EMAIL] or [WHATSAPP NUMBER].

Security

The site runs over HTTPS. Our database is not readable from the public internet, order pages use unguessable references, and card data never touches our servers. No system is perfect, but we do not store what we do not need.