1. Information We Collect

When you interact with Crumbology Cookies ("we", "us", "our"), we may collect the following types of information:

• Personal Information: Name, email address, phone number, delivery address, and payment details when you place an order or subscribe to our services.
• Usage Data: Information about how you use our website, including pages visited, time spent, and referring URLs, collected via Google Analytics and Vercel Analytics.
• Cookie Data: We use browser cookies and similar tracking technologies to improve your browsing experience and deliver relevant advertising.

2. How We Use Your Information

We use the information we collect to:

• Process and fulfil your cookie orders and subscriptions
• Communicate with you about your orders, deliveries, and account
• Send marketing communications (only with your consent — see Gold Status below)
• Improve our website, products, and services
• Comply with legal obligations

2a. Gold Status & Marketing Communications

When you join the VIP Crumb Club, your account is automatically upgraded to Gold Status. This is clearly disclosed on the signup page before you join. Gold Status provides:

• A 33% bonus on Crumb Points earned with every order
• Free entry into prize draws
• First Bite Rights eligibility (free taste-testing of new flavours)
• Early access to drops, flash sales, and exclusive events

In exchange, you consent to receiving occasional marketing communications via SMS and/or email, which may include new flavour announcements, prize draw notifications, early access links, and promotional offers.

How to Manage Your Preferences

• VIP Dashboard: Switch between Gold and Standard status at any time via the Gold Status toggle in your dashboard. Switching to Standard opts you out of all marketing and reduces your Crumb earning rate to the base rate.
• SMS: Reply STOP to any marketing SMS to opt out of SMS communications. This does not affect your Gold Status or Crumb earning rate.
• Email: Click the unsubscribe link in any marketing email to opt out of email communications. This does not affect your Gold Status or Crumb earning rate.
• Contact us: Email jess@crumbology.au to update your preferences.

Individual channel opt-outs (SMS STOP or email unsubscribe) only affect that specific channel. Only the Dashboard toggle changes your Gold/Standard status and Crumb earning rate. Rejoining Gold from the Dashboard re-enables all communication channels.

3. Payment Security

All financial transactions are processed through Stripe, an industry leader in secure payments. Crumbology never sees, stores, or has access to your credit card details. Your sensitive payment information is protected by Stripe's world-class security infrastructure, including PCI DSS Level 1 compliance.

4. Cookies & Tracking

We use Google Analytics and Vercel Analytics to understand how visitors interact with our website. This helps us improve our content and user experience. Google Analytics uses cookies to collect anonymous usage data. Vercel Analytics collects privacy-first performance data without storing personal information or using cookies. You can opt out of Google Analytics tracking by installing the Google Analytics Opt-out Browser Add-on.

We may also use cookies for advertising purposes to deliver relevant ads through platforms like Google Ads and Meta (Facebook/Instagram).

5. Third-Party Services

We may share your information with the following third-party services:

• Stripe: For payment processing and subscription management
• Supabase: For secure storage of VIP member account and loyalty data
• Australia Post: For delivery tracking and shipping
• Google Analytics: For website usage analysis
• Vercel Analytics: For privacy-first website performance monitoring
• Meta (Facebook/Instagram): For advertising and social media engagement

We do not sell your personal information to any third parties.

6. International Data Transfers

Some of our third-party service providers process data outside of Australia, including in the United States. These providers include Stripe, Google, Meta, Supabase, and Vercel. Where your data is transferred internationally, we take reasonable steps to ensure those providers maintain appropriate data protection safeguards consistent with the Australian Privacy Principles.

7. Data Retention

We retain personal information only for as long as necessary to fulfil the purpose for which it was collected, or as required by law. When your information is no longer needed, it is securely deleted or de-identified. You may request deletion of your personal information at any time by contacting us (see Section 9).

8. Data Security & Breach Notification

We take reasonable steps to protect your personal information from misuse, interference, loss, unauthorised access, modification, or disclosure. In the event of a data breach that is likely to cause serious harm, we will notify affected individuals and, where required, the Office of the Australian Information Commissioner (OAIC) in accordance with the Notifiable Data Breaches scheme under the Privacy Act 1988.

9. Your Rights

Under Australian Privacy Principles (APPs), you have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your personal information
• Opt out of marketing communications at any time via:
  • Your VIP Dashboard Gold Status toggle
  • Replying STOP to any marketing SMS
  • Clicking the unsubscribe link in any marketing email
  • Contacting us at jess@crumbology.au

To exercise any of these rights, please contact us at jess@crumbology.au. We will respond to all privacy requests within 30 days.