Privacy Policy
This policy explains what Niko’s Bakery & Cafe collects when you visit this website, order from us online, or use the Niko’s Bakery app for iPhone and Android, why we collect it, who else sees it, and the choices you have. We are a bakery, not a data company: we collect what it takes to make your order, hand it to the right person, and send you a receipt.
Who we are. Niko’s Bakery & Cafe, 601 Emory Dr, Owensboro, KY 42301. Phone (270) 478-4441. Email nikosbakeryandcafe@gmail.com. The ordering website and the app are built and operated for us by Tucker Shively (tucker@tuckershively.com), who handles the technical side under our instructions.
What we collect
When you place an order
- Your name, phone number and email address, so we can reach you about the order and send the receipt.
- What you ordered, your choices on each item, the pickup time you picked, and any notes you wrote for the kitchen.
- The card brand and the last four digits of the card used, which appear on your receipt. We never see or store your full card number. Card details are typed into fields hosted by Clover, our payment processor, and go directly to Clover.
When you create an account
- Your email address and a password. The password is stored as a salted hash, which means nobody, including us, can read it back.
- Your name and phone number, if you give them, so you do not have to type them on every order.
- Your order history, so you can see past orders and order them again.
- A confirmation that the email address is yours. We email you a link when you sign up; your order history, rewards and messages appear once you use it.
Rewards, your birthday and messages in the app
- The points you earn on paid orders, and the rewards, offers and challenges you claim, with the code the counter checks when you use one.
- Your birthday, month and day only, if you choose to add it, so we can offer you a birthday treat. We never ask for the year.
- Messages we send you in the app’s Inbox, and whether you opened or dismissed them.
Notifications on your phone
If you allow notifications, the app stores a push token: an address for your phone, issued by Apple or Google, that lets us send it a message. We use it to tell you when your order is ready. We send news and specials as notifications only if you turn on “Specials by notification”, and then we limit how many we send each week and hold them overnight. Each answer is recorded the same way as your answer about email. Turn either kind off in the app’s settings or in your phone’s settings.
Your answer about marketing email
When you create an account we ask one question: “Email me Niko’s news and specials. Unsubscribe any time.” The box starts unticked and you do not have to tick it to make an account. Whatever you answer, yes or no, we keep a record of the answer, the exact sentence you were shown, when and where you answered (website or app, at sign-up or on your account screen), and the internet address and device description at the time. That record is our proof of what you agreed to, and it is what we check before any marketing email is sent.
You can also join our email list without an account, using the sign-up form on our home page. Signing up there is a yes to the same sentence, which is shown next to the button, and we keep the same record: your email address, the sentence, the time, and the internet address and device description at the time. Nothing is sent to that address until you click the link we email you to confirm it.
Your answer about text messages
When you give us a mobile number, at sign-up, on your account screen or when you order, we may ask a second, separate question in its own box, which starts unticked: “Text me Niko’s specials at this number. Up to 4 messages a month. Msg and data rates may apply. Reply STOP to cancel, HELP for help. Consent is not a condition of purchase.” You do not have to tick it to order or to make an account, and it is never combined with the email question. Whatever you answer, we keep the same kind of record as for email: the number, your answer, the exact sentence you were shown, when and where you answered, and the internet address and device description at the time. We text you specials only if your newest answer to this question is yes.
Reply STOP to any of our text messages and we record that as a “no” and stop texting you specials. Reply HELP for help, or call us on (270) 478-4441. We never share or sell your mobile number or your text message consent to anyone for their own marketing.
Technical information
- Ordinary server logs: the internet address a request came from, the time, and the page or action requested. We use these to keep the service running and to spot abuse.
- When you pay, your internet address is passed to Clover for fraud screening.
- A record of each email we send you (a receipt, a password reset): the address, the subject, when it was sent, and whether it was delivered or bounced. Not the contents. We use it to answer “did my receipt arrive?” and to stop mailing an address that no longer works.
- In the app, usage statistics through Google Analytics for Firebase: which screens and menu items are opened, what goes into a basket, how far checkout gets, searches, and the total of a paid order. These are tied to a random identifier for your installation of the app, not to your name, email or phone, along with your device model, operating system, app version and an approximate location worked out from your internet address. We use them to see which parts of the app work and which do not.
- On this website and its ordering pages, usage statistics through Google Analytics, loaded by Google Tag Manager: the pages you visit, taps on our phone number, map and order links, email list sign-ups (that one happened, never the address), which menu items you open, what goes into a basket, how far checkout gets, menu searches, and the total of a paid order. Google Analytics sets cookies in your browser that hold a random identifier, so a return visit is recognised; Google also works out an approximate location from your internet address. We never send your name, email or phone to Google. We use these statistics to understand visits and orders and to improve the site.
- On this website, its ordering pages and in the app, product analytics through PostHog: the pages and screens you open, what you tap, how far an order gets, and a session replay, which is a recording of how the page or screen changed during your visit, so we can see where people get stuck. Everything typed into a field is masked in the replay and is never recorded, and the card fields, which are hosted by Clover, are never recorded. PostHog keeps a random identifier in your browser or on your phone; if you are signed in, it also receives a random identifier for your account, never your name, email or phone. We use it to find what is confusing or broken and to make ordering easier.
- Where a visit came from. When you arrive on this website from an ad or a tagged link, we keep the details of that link in our own first-party cookies on nikosbakerycafe.com, whose names start with
_cdp_: the campaign tags in the link (such as utm_source and utm_campaign), an ad click identifier if the link carried one (such as gclid from Google or fbclid from Facebook), the page you landed on, the website that sent you, and the first source we saw. They last 90 days. When you order, the ordering system reads them and saves them with the order, so we know which ad or link brought the order. They are not sent to any advertising platform. - Our tagging server. Website usage statistics may pass through our own tagging server at s.nikosbakerycafe.com on their way to Google Analytics. It runs on our hosting, forwards the same statistics described above and nothing more, and sets the
_cdp_cookies and a Google Analytics identifier cookie (FPID, a random identifier kept for up to 2 years) from our own domain. - In the app, crash and error reports through Firebase Crashlytics (Google) and EAS Observe (Expo): when the app crashes or a step such as loading the menu or paying fails, what the app was doing, how long it took to start, your device model, operating system and app version, and the same random identifier as the usage statistics. Never your card details, and never your name, email or phone. We use them to find and fix problems.
- The app does not use your location, never reads your phone’s advertising identifier, and nothing it collects is used for advertising or shared with data brokers.
How we use it
- To prepare your order and hand it to the right person at the counter.
- To send your receipt by email, and to send a new-order alert to the bakery.
- To record the order on our Clover point-of-sale system, which is where every order, online or in person, lives.
- To show you your order history and let you reorder, if you have an account.
- To answer a question or fix a problem with an order.
- To send you news and specials by email, only if your newest answer to the marketing question was yes.
- To send you specials by text message, only if your newest answer to the text message question was yes.
- To see which ad or link brought an order, from the
_cdp_cookies saved with it. - To keep the service secure and to meet our tax and accounting obligations.
Who else sees it
| Who | What they receive | Why |
|---|---|---|
| Clover (Fiserv) | Your order, your name and contact details on the order note, and your card details (which go to Clover directly, never through us). | Our point-of-sale and payment processor. Clover’s own privacy policy applies to how it handles card data. |
| Mailgun | Your email address and the contents of receipts, password reset emails and, if you opted in, marketing emails. | Delivers our email. |
| Google (Firebase, Google Analytics, Firebase Crashlytics and Google Tag Manager) | The app and website usage statistics and the app crash reports described above, tied to a random identifier for your installation of the app or a cookie in your browser. | Counts and reports how the app and the website are used, and tells us when the app breaks. |
| PostHog | The product analytics and masked session replays described above, from this website, its ordering pages and the app, tied to a random identifier (and, when you are signed in, a random identifier for your account). Never your name, email, phone or card details. PostHog stores this data in the United States. | Shows us how people use the website and the app and where ordering gets stuck. |
| Expo (650 Industries) and Apple or Google | Your phone’s push token and the text of a notification, if you allow notifications; the app’s error and speed reports. | Delivers notifications to your phone, delivers app updates, and reports app errors. |
| Tucker Shively | Access to the systems that hold the data above, under our instructions. | Builds and operates the ordering website and app for us. |
| Hosting providers | The servers the ordering system runs on. | Infrastructure only; they do not use the data. |
We do not sell your information, and we do not share it with anyone for their own marketing. That includes your mobile number and your answer about text messages, which are never shared with or sold to third parties for their marketing.
How long we keep it
- Orders are kept as long as our tax and accounting rules require, the same as an in-person sale.
- Accounts are kept until you delete them.
- Marketing answers are kept as evidence of consent. When you delete your account, we record a final “no” against your address so it is never emailed again, and we strip the internet address and device details from your earlier answers.
- Server logs are kept for a short period and then discarded.
- App and website usage statistics are kept by Google Analytics for no longer than 14 months.
- Product analytics and session replays are kept by PostHog for the limited period our PostHog plan allows, and then deleted.
- The
_cdp_cookies expire 90 days after they were last set. The source details saved with an order are kept with the order. - App crash and error reports are kept by Firebase Crashlytics and EAS Observe for a limited period (90 days for Crashlytics) and then deleted.
- Push tokens are kept while the app can receive notifications and are deleted when you delete your account. A token Apple or Google says is no longer in use is switched off straight away.
Your choices
- Marketing email. Change your answer any time on your account screen in the app or on the website, use the unsubscribe link at the bottom of any marketing email (it works without signing in and takes effect straight away; receipts and order emails still come), or tell us in person or by email.
- Text messages. Reply STOP to any of our texts, untick the box on your account screen, or tell us in person or by email. Reply HELP for help.
- Notifications. Turn order updates or specials off in the app’s settings, or turn the app’s notifications off in your phone’s settings.
- Delete your account. In the app: open your account, then Delete my account, and enter your password to confirm. On the website: sign in, open your account, then Delete my account. Your account, sessions, saved details, rewards and push tokens go immediately. Records of completed orders stay for accounting, with your account removed from them.
- See or correct your information. Email nikosbakeryandcafe@gmail.com from the address on your account and we will send you what we hold or correct it.
- App usage statistics. Deleting the app deletes its installation identifier; a new install starts a new one.
- Website usage statistics. Block or clear cookies in your browser’s settings, or install Google’s Google Analytics opt-out browser add-on, and Google Analytics stops counting your visits. Blocking or clearing cookies and site data also resets PostHog’s identifier and removes the
_cdp_cookies. Ordering works the same either way. - Order without an account. You can always order as a guest. We still need a name, a phone number and an email address for the receipt.
Children
Our ordering website and app are not directed at children under 13, and we do not knowingly create accounts for them. If you believe a child has given us information, email us and we will delete it.
Security
Every connection to the ordering system is encrypted. Passwords are hashed, sessions are random tokens stored hashed, and card numbers never touch our systems. Access to customer records is limited to the people who need it to run the bakery and the system.
Changes to this policy
If we change how we collect or use information, we will update this page and change the effective date at the top. Changes that matter to you will also be mentioned in the app or on the website.
Contact
Niko’s Bakery & Cafe, 601 Emory Dr, Owensboro, KY 42301. (270) 478-4441. nikosbakeryandcafe@gmail.com.