Privacy Policy

Last updated: March 2026

Milk & Crumb (“we”, “us”, or “our”) is a cottage bakery. We take your privacy seriously. This policy explains what information we collect when you place an order and how we use it.

1. Information We Collect

When you place an order we collect:

  • Your first and last name
  • Your email address or phone number (you choose one at checkout)
  • Your delivery address, if you request delivery
  • Your order details (items, quantities, scheduled date)

We also store a hashed, one-way token on your device if you select “Remember this device for 60 days.” The raw token is never stored on our servers; only its SHA-256 digest is retained.

2. How We Use Your Information

  • To process and fulfill your order
  • To send a one-time verification code (OTP) when you check out
  • To send an order confirmation via email or SMS
  • To send a day-before reminder if you have opted in to that service (not enabled by default)

We do not use your information for marketing or advertising without your express consent.

3. SMS / Text Messaging

If you choose to verify your order with a phone number, you are consenting to receive text messages from Milk & Crumb. We will send:

  • A one-time passcode to verify your identity when placing an order
  • An order confirmation message after your order is placed

Message frequency: up to 2 messages per order.
Message & data rates may apply.
Reply STOP at any time to stop receiving messages.
Reply HELP for assistance, or email us at treats@milkandcrumb.com.

4. Information Sharing

We do not sell, rent, or trade your personal information. We share data only with the third-party services required to operate:

  • Square — payment processing and invoice generation
  • Resend — transactional email delivery
  • Twilio — SMS delivery

Each of these providers has its own privacy policy and is contractually obligated to protect your data.

5. Data Retention

Order and customer records are retained for standard business record-keeping purposes. If you would like your data deleted, please contact us at the address below and we will remove it within 30 days.

6. Contact

Questions about this policy? hello@milkandcrumb.com