2M's BakeryBack to shop

Privacy Policy

Effective September 26, 2026

Who we are

2M's Bakery ("we", "us") runs this website so customers can browse our breads and pastries and order them for delivery or pick-up. We are located at 2M's Bakery Zone 3 Brgy 385 Gov Leviste Hwy Bulacnin Lipa City Batangas. We handle your personal information in line with the Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules.

Information we collect

  • Account details — your name, email address, phone number, delivery address and password when you sign up. Passwords are stored securely by our authentication provider and are never visible to us.
  • Order details — the items you buy, your delivery or pick-up date and time, delivery address, the distance from our shop, your chosen payment method (cash or GCash) and the order total. We do not collect or store card numbers or GCash account credentials.
  • Feedback — the rating and comments you leave about an order.
  • Device and usage information — anonymous page-view statistics (such as the pages you visit and your browser type) collected to help us improve the site.

How we use your information

  • To create and manage your account.
  • To prepare, deliver or hand over your orders, and to contact you about them.
  • To check that your address is within our delivery range.
  • To email you an order receipt.
  • To read your feedback and improve our products and service.
  • To keep the website secure and working properly.

We do not sell your personal information, and we do not use it for advertising.

Who we share it with

We only share what is needed with the service providers that run parts of this website for us:

  • Supabase — stores our database and handles account sign-in.
  • Resend — sends order receipt emails.
  • OpenStreetMap (Nominatim) — converts your delivery address into map coordinates so we can measure the distance from our shop. Only the address text is sent.
  • Vercel — hosts the website and provides anonymous visit statistics.

Some of these providers may process data outside the Philippines. We may also disclose information when required by law.

Cookies and browser storage

We use cookies to keep you signed in. We also save your shopping cart and which announcements you have already seen in your browser's local storage, so they are still there when you come back. You can clear these at any time in your browser settings; doing so will sign you out and empty your cart.

How long we keep it

We keep your account information for as long as your account is open. We keep order records for as long as needed for our business and to meet legal and tax requirements. When information is no longer needed, we delete or anonymize it.

How we protect it

Your information is sent over encrypted connections (HTTPS), and access to customer and order records is limited to authorized bakery staff. No system is perfectly secure, but we take reasonable steps to protect your data from loss, misuse and unauthorized access.

Your rights

Under the Data Privacy Act, you have the right to:

  • be informed about how your personal information is processed;
  • access the personal information we hold about you;
  • correct inaccurate or outdated information;
  • object to processing, or ask us to delete or block your information;
  • get a copy of your information in a commonly used format; and
  • file a complaint with the National Privacy Commission (privacy.gov.ph).

You can update most of your details yourself from your account. For anything else, contact us using the details below.

Children

Our website is meant for customers 18 and older. If you are younger, please ask a parent or guardian to order for you.

Changes to this policy

We may update this policy from time to time. When we do, we will change the effective date at the top of this page.

Contact us

For privacy questions or requests, reach us at: