GOLDEN LOAF LLC is a Denver-based artisanal bakery dedicated to crafting fresh, hand-made breads, pastries, and baked goods with locally sourced, high-quality ingredients. Founded on the belief that great baking starts with simplicity and care, we make all our products daily—from crusty sourdough loaves to buttery croissants and sweet treats—with no artificial preservatives or additives.
 
We’re proud to serve our Denver community through in-store pickup, local delivery, and nationwide shipping, bringing the warmth of fresh-baked goodness to homes across the country. Whether you’re ordering a custom cake for a celebration, a box of cookies for gifting, or your weekly loaf of multigrain bread, we prioritize transparency, quality, and customer satisfaction.
 
Your privacy is central to our values. Below, we outline how we collect, use, and protect your data when you browse our website, place orders, or interact with our services—ensuring your information remains secure and used only to enhance your experience.
 
 

Comments

 
When visitors leave comments on our site (e.g., product reviews, feedback on baked goods, or general inquiries), we collect the data shown in the comments form (name, email address, comment content) along with your IP address and browser user agent string. This information helps us detect and prevent spam, keeping our comment sections a genuine space for customer feedback.
 
An anonymized string (hash) created from your email address may be shared with the Gravatar service to check if you have a Gravatar profile. Gravatar’s privacy policy is available here: https://automattic.com/privacy/. Once your comment is approved, your Gravatar profile picture (if applicable) will be visible to the public alongside your comment—perfect for sharing your thoughts on our sourdough or croissants!
 
 

Media

 
If you upload images to the website (e.g., photos of our baked goods you’ve enjoyed, event collaborations, or customer spotlights), avoid uploading images with embedded location data (EXIF GPS). Visitors to the site can download and extract location data from images, which may compromise your privacy. We recommend removing EXIF data from images before uploading—especially if sharing photos of our products in your home or at events.
 
 

Cookies

 
We use cookies to enhance your browsing, ordering, and engagement experience—all in compliance with data protection regulations. Here’s how we use them:
 
  • Comment Cookies: If you leave a comment, you may opt to save your name, email address, and website in cookies for convenience. These cookies eliminate the need to re-enter your details for future comments (e.g., follow-up reviews of our seasonal pastries) and expire after one year.
  • Temporary Login Check Cookies: When you visit our login page (to access your account, track orders, or save favorite baked goods), we set a temporary cookie to verify if your browser accepts cookies. This cookie contains no personal data and is deleted when you close your browser.
  • Login & Preferences Cookies: If you log in to your account, we set cookies to store your login information and screen display preferences. Login cookies last for two days, and screen options cookies last for one year. Selecting “Remember Me” extends your login persistence to two weeks; logging out removes login cookies.
  • Order & Shopping Cart Cookies: We use cookies to retain your shopping cart items (e.g., a custom cake, a dozen bagels) and order preferences during your visit, ensuring you can continue browsing without losing your selections. These cookies expire after 30 days if you do not complete your order.
  • Editor Cookies: If you edit or publish content on the site (e.g., updating a product review or submitting a customer story), an additional cookie is saved in your browser. This cookie only includes the post ID of the content you edited (no personal data) and expires after 1 day.
 
 

Embedded Content from Other Websites

 
Our website may include embedded content (e.g., videos of our baking process, customer testimonial clips, or maps to our Denver bakery) from third-party sites (e.g., YouTube, Google Maps). Embedded content from these sites behaves identically to visiting the third-party website directly.
 
These third-party websites may collect data about you (e.g., browsing activity), use cookies, embed additional tracking tools, and monitor your interaction with the embedded content. If you are logged in to the third-party site, they may link your interaction to your account. We have no control over third-party data practices and encourage you to review their privacy policies before engaging with embedded content.
 
 

Who We Share Your Data With

 
We only share your data in limited, privacy-focused circumstances to fulfill orders and improve our services:
 
  • Delivery & Shipping Partners: We share necessary order details (delivery address, contact number, order items) with trusted local delivery partners (for Denver metro) and national shipping carriers (e.g., USPS, UPS) to ensure your baked goods arrive fresh and on time. These partners are contractually obligated to protect your data and only use it for delivery purposes.
  • Payment Processors: Your payment information (e.g., credit card details) is shared with secure third-party payment processors (e.g., Stripe, PayPal) to process transactions. We never store full payment details on our servers.
  • Password Reset: If you request a password reset, your IP address is included in the reset email to verify the request’s legitimacy and prevent unauthorized access to your account.
  • Legal Compliance: We may disclose your data if required by law (e.g., to comply with a subpoena) or to protect our rights, property, or the safety of our customers and staff.
 
We never share your personal data with unrelated third parties for marketing or commercial purposes without your explicit consent.
 
 

How Long We Retain Your Data

 
  • Comments & Metadata: Comments and their metadata (e.g., timestamp, IP address) are retained indefinitely. This allows us to automatically approve follow-up comments from you (e.g., updating a review of our seasonal pumpkin bread) instead of holding them in a moderation queue.
  • User Account Data: For registered users (e.g., those with accounts to track orders, save favorite baked goods, or manage shipping addresses), we store the personal information you provide in your profile (name, email, phone number, delivery addresses) until you request account deletion. You can view, edit, or delete your personal data at any time (except your username, which cannot be changed). Our administrators may also access and edit this data to assist with account issues or order fulfillment.
  • Order Data: We retain order details (purchase history, shipping information, payment confirmation) for 7 years to comply with tax and legal requirements, and to facilitate returns, refunds, or quality-related inquiries (e.g., a concern about a shipped cake’s freshness).
 
 

What Rights You Have Over Your Data

 
If you have an account on our site or have left comments, you have the following rights regarding your data:
 
  • Access: Request an exported file of the personal data we hold about you, including account details, comment history, and order records (e.g., past purchases of our sourdough or custom cakes).
  • Erasure: Request that we delete any personal data we hold about you, except for data we are legally obligated to retain (e.g., order records for tax purposes).
  • Correction: Update or correct any inaccurate personal data in your account (e.g., outdated shipping addresses, contact information).
  • Objection: Object to the processing of your data for non-essential purposes (e.g., marketing communications about new baked goods, if applicable).
 
To exercise these rights, contact us at relation@goldenloaf.shop with your full name and associated email address. We will respond to your request within 30 business days.
 
 

Where Your Data Is Sent

 
Visitor comments may be screened through an automated spam detection service to filter out malicious or irrelevant content. No personal data is shared with this service beyond what is necessary for spam detection, and the service does not store your data permanently.
 
Additionally, order data (e.g., shipping location, product preferences) may be shared with our internal analytics tools to improve our menu offerings (e.g., popular pastries in Denver) and shipping processes—this data is anonymized to protect your privacy.