Privacy Policy

JRW Management, LLC (d/b/a Something Nice Bakery) ("we," "us," "our") respects your privacy. This Privacy Policy explains what personal information we collect through the somethingnicebakery.com website, our preorder and pickup services, and our communications (collectively, the "Services"), how we use and share it, and the choices and rights you have. It applies to United States residents and is designed to comply with applicable Georgia and federal law.

1. Information We Collect

We collect the following categories of personal information:

• Identifiers & contact data: name, email address, mobile phone number, mailing address, and account credentials.
• Order data: items ordered, pickup location and window, order history, dietary notes, gift-message text, and communications about your order.
• Payment data: billing name, billing ZIP, and payment-method details, which are collected and processed directly by Stripe, Inc. We do not receive or store your full card number.
• Marketing & notification preferences: email/SMS opt-ins, notification categories (e.g., new-batch alerts), and unsubscribe status.
• User content: reviews, survey answers, contact-form messages, chatbot transcripts, and photos you submit.
• Device & usage data: IP address, browser and device identifiers, referring/exit pages, timestamps, and interactions with the Services, collected through cookies and similar technologies. See our Cookie Policy.
• Location data: the pickup location you select. We do not track precise geolocation.

2. How We Use Personal Information

• Fulfill preorders, coordinate pickup, capture payment, and issue receipts.
• Create and administer your account and authenticate you.
• Send transactional messages (order confirmations, pickup reminders, review requests).
• Send marketing messages you have opted in to receive.
• Operate, secure, monitor, and improve the Services and our recipes and menu.
• Detect, investigate, and prevent fraud, abuse, and violations of our Terms.
• Comply with legal obligations, respond to lawful requests, and enforce our rights.

3. How We Share Personal Information

We share personal information as follows and do not sell personal information for money:

• Service providers. Vendors that operate the Services on our behalf under contract, including Stripe (payments), Supabase (hosting, database, authentication), Resend (email), SMS gateway providers, Google (analytics, tag management, ads, business profile), and our hosting/CDN providers. They may process personal information only to perform the services we request.
• No sale or sharing of mobile information. We do not sell, rent, or share your mobile phone number, SMS opt-in status, or SMS consent data with any third parties or affiliates for their marketing or promotional purposes. This "no sharing" commitment applies to all SMS-program data (phone number, carrier, opt-in status, and consent records) and is not changed by any other provision of this Policy.
• Legal and safety. When required by subpoena, court order, or other legal process; to enforce our Terms; or to protect the rights, property, or safety of the Bakery, our customers, or the public.
• Business transfers. In connection with a merger, acquisition, financing, or sale of assets, subject to customary confidentiality protections.

Some sharing of advertising and analytics identifiers through cookies or pixels (for example with Google Ads or Meta) may qualify as a "sale" or "sharing" under certain state laws. You can control those interactions through the cookie banner and browser controls described in our Cookie Policy.

4. Cookies & Tracking Technologies

The Services use cookies, pixels, SDKs, and similar technologies for essential functionality, performance analytics, and advertising. Full details, categories, and how to withdraw consent are in our Cookie Policy. The first time you visit, we ask for your consent to non-essential cookies; you can change it any time by clicking "Cookie preferences" in the footer.

5. SMS & Mobile Messaging

If you provide a mobile number and request a phone sign-in code, or opt in to transactional or marketing SMS from Something Nice Bakery, the following applies:

• Consent. We send text messages only after you take an affirmative action, such as tapping "Text me a code" to sign in, or checking a separate marketing opt-in box.
• Message types. (a) account/security (one-time verification codes), (b) transactional (order confirmations, pickup updates), and (c) marketing (new-batch alerts, promotions) if you separately opt in.
• Frequency. One message per verification request; transactional messages depend on your orders (typically 1–3 per order); marketing message frequency varies.
• Message & data rates. Standard message and data rates may apply from your wireless carrier.
• STOP / HELP. Reply STOP to any marketing SMS to unsubscribe; reply HELP for help. You can also email hello@somethingnicebakery.com.
• Carrier liability. Wireless carriers are not liable for delayed or undelivered messages.
• No sharing of mobile opt-in data. Mobile information (phone number, carrier, and consent status) collected as part of these SMS programs will not be shared with third parties or affiliates for their own marketing or promotional purposes. Service providers such as our SMS gateway process the data only to deliver the messages you requested, under contract with us.
• Consent is not a condition of purchase. You do not need to opt into marketing SMS to place an order or receive a verification code.

SMS-related questions or opt-out requests: hello@somethingnicebakery.com.

6. Your Choices & Rights

Regardless of state of residence, you may (a) access, update, or delete account information from your account settings or by emailing hello@somethingnicebakery.com; (b) unsubscribe from marketing email via the link in any marketing message; (c) opt out of marketing SMS by replying STOP; and (d) manage cookies through the cookie banner and your browser.

Georgia residents. Georgia law protects your right to seek civil remedies for certain misuse of personal information (see O.C.G.A. § 10-1-393.8 and related consumer-protection statutes). Georgia does not currently have a comprehensive consumer-privacy statute; nevertheless, we voluntarily extend the access, correction, deletion, and opt-out choices described above to all U.S. residents.

Residents of California, Virginia, Colorado, Connecticut, Utah, Texas, and other states with comprehensive privacy laws may have additional rights, including the rights to know, access, correct, delete, obtain a portable copy, opt out of "sale" or "sharing" of personal information, opt out of profiling, and appeal a denial. To exercise any right, email hello@somethingnicebakery.com with the subject line "Privacy Request." We will verify your request through the email associated with your account before responding.

6. Children's Privacy

The Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us information, contact us and we will delete it.

7. Data Security

We use technical, administrative, and physical safeguards designed to protect personal information, including TLS encryption in transit, encryption at rest for our database, role-based access controls, and audit logging. No system is perfectly secure, and we cannot guarantee absolute security.

8. Data Retention

We retain personal information for as long as needed to provide the Services, comply with legal obligations (including tax and accounting), resolve disputes, and enforce our agreements. When no longer needed, we delete or de-identify the information.

9. International Users

The Services are operated from the United States and are intended for U.S. residents. If you access the Services from outside the United States, you consent to the transfer of your information to, and processing in, the United States.

10. Changes to This Policy

We may update this Privacy Policy periodically. The "Effective" date at the top of this page will reflect the most recent revision. Material changes will be posted on this page and, where appropriate, communicated by email.

11. Contact

JRW Management, LLC (d/b/a Something Nice Bakery) — Milton, Georgia. Privacy inquiries: hello@somethingnicebakery.com.