Privacy Policy
Last updated: May 23, 2026
Who we are
Torito Bakery is a small bakery in Leander, Texas. We make Basque burnt cheesecakes available for local pickup. If you have any questions about this policy, reach us at support@toritobakery.com.
What we collect
We collect personal information when you:
- Place an order — name, email, and phone number for pickup coordination
- Use the contact form — name, email, phone, and your message
- Browse the site — we automatically collect browsing data through cookies and analytics tools (see below)
How we use your information
- Fulfill and coordinate your pickup orders
- Respond to your messages and inquiries
- Measure and improve our advertising (Meta Pixel & Conversions API)
- Understand how people use our site (PostHog analytics)
- Process payments (Square)
Cookies & tracking
Our site uses the following cookies and tracking technologies:
| Cookie | Provider | Purpose |
|---|---|---|
| _fbp | Meta | Identifies browsers for ad measurement |
| _fbc | Meta | Stores click identifiers from ads |
| ph_* | PostHog | Product analytics and session tracking |
Meta Pixel & Conversions API
We use the Meta Pixel (browser-side) and Meta Conversions API (server-side) to measure ad performance and optimize our Facebook and Instagram campaigns. This may share hashed contact information (email, phone) with Meta Platforms, Inc. for ad matching purposes. You can manage your Meta ad preferences at facebook.com/adpreferences.
Third-party services
We share data with these service providers as needed:
- Meta Platforms, Inc. — ad measurement and optimization
- PostHog, Inc. — product analytics
- Square, Inc. — payment processing
Each provider handles your data under their own privacy policy. We only share what's necessary for their specific service.
We do not sell your data
We do not sell, rent, or trade your personal information to third parties. Period.
Data retention
We keep your personal information only as long as needed for business purposes — typically to fulfill orders, respond to inquiries, and comply with legal or tax obligations. When it's no longer needed, we delete it.
Do Not Track & Global Privacy Control
We acknowledge Do Not Track (DNT) and Global Privacy Control (GPC) signals. When we detect a GPC signal, we treat it as a request to opt out of any sale or sharing of personal data (though we don't sell data regardless).
Your choices
- Clear or block cookies through your browser settings at any time
- Opt out of Meta ad targeting at facebook.com/adpreferences
- Email us at support@toritobakery.com to request access to, correction of, or deletion of your data
Changes to this policy
We may update this policy from time to time. We'll post changes here with a new “last updated” date. For significant changes, we'll make reasonable efforts to notify you.
Contact
Questions? Email us at support@toritobakery.com.