Who we are
Inshoku Bakery is a small-batch Japanese bakery based in Dublin, Ireland. We operate this website at inshokubakery.com to sell our bread directly to customers.
If you have any questions about how we handle your data, email us at inshokubakery@gmail.com.
What data we collect and why
Order information (via Stripe)
When you place an order, our payment processor Stripe collects your name, email address, and payment card details to complete the transaction. We receive a confirmation of your payment and use your name and email solely to fulfil your order (confirm it, notify you of any changes, and contact you about collection).
We do not store your card details — these are held exclusively by Stripe under PCI DSS compliance. We keep order records (name, email, items, amount) in our database for the time needed to deliver your order and meet our legal obligations.
Website analytics (via Google Analytics)
We use Google Analytics to understand how people use our website. Google Analytics collects information such as page views, which pages are popular, how long visitors stay, and which country they come from. It uses cookies to distinguish unique users and track sessions. You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.
Hosting infrastructure (Firebase & Google Cloud)
Our website is hosted on Google Firebase (Firebase Hosting and Cloud Functions). As with any web host, our servers may log standard request metadata such as IP addresses and browser user-agent strings for security and operational purposes. These logs are retained for a short period and are not used for marketing or profiling.
Cookies
We do not use cookies for tracking or advertising on our own pages.
Google Analytics uses cookies (such as _ga and _ga_*) to distinguish unique users and track sessions. These cookies are set automatically when you visit our site and expire after up to 2 years. You can manage or delete these cookies through your browser settings.
Stripe may set cookies in your browser during the checkout flow to prevent fraud and keep your session secure. These are strictly necessary for the payment process to work. You can review Stripe's cookie use in their Cookie Policy.
Third-party services
We use the following third parties to run our website and process orders. Each has its own privacy policy that governs how they handle data:
- Stripe — payment processing — stripe.com/privacy
- Google Analytics — website analytics — policies.google.com/privacy
- Google Firebase — website hosting — firebase.google.com/support/privacy
Legal basis for processing (GDPR)
We are based in Ireland and process personal data under the EU General Data Protection Regulation (GDPR). Our legal bases are:
- Contract performance — processing your name and email to fulfil your order.
- Legitimate interests — server-side security logging to protect our infrastructure.
Google Analytics may process personal data (such as IP addresses and cookie identifiers). We rely on legitimate interests as our legal basis for this analytics processing. Google acts as a data processor on our behalf and provides IP anonymisation by default in GA4.
Your rights
Under GDPR you have the right to access, correct, or delete any personal data we hold about you, and to object to or restrict certain processing. To exercise any of these rights, contact us at hello@inshokubakery.ie and we will respond within 30 days.
You also have the right to lodge a complaint with the Data Protection Commission (Ireland's supervisory authority).
Changes to this policy
We may update this policy from time to time. Any changes will be posted here with a new "Last updated" date. We won't notify you of minor wording tweaks, but if we make material changes to how we use your data we'll let you know via the order confirmation email.