Privacy Policy

What we collect

When you send a request or event inquiry, we collect your name, phone number, email, meetup address, any notes you add, and how you heard about us. We also record your consent choices (see below), including what you agreed to, when, and the version of the wording you saw. For spam protection and security, our servers see your IP address and browser details when you submit a form.

Why we collect it

To respond to and carry out your cookie request, to text, call, or email you to confirm it, to keep records of our business, and, only if you chose to receive them, to send you news.

Consent and marketing choices

The request form asks for three separate choices:

• Required: agreement to our Terms and to receive texts and emails about your request.
• Optional: email news about seasonal cookies, new flavors, and market dates. This box is checked by default; uncheck it if you don't want them.
• Optional: promotional text messages. This box is never checked for you.

Every promotional email has an unsubscribe link, and you can reply STOP to any text. You can also email us to change your choices. We keep a record of your consent and any opt-out so we can honor it. Opting out of promotions does not stop messages about a request you already made.

Text messages

We text you about your own request. Promotional texts are sent only if you separately agreed to them. Message frequency varies, and message and data rates may apply. Reply STOP to opt out or HELP for help. We do not share your phone number or text-messaging consent with third parties for their marketing. Full messaging terms are in our Messaging & Email Terms.

Who sees it

Only the two owners of Ms. Morton's Cookies. We share data with the service providers that run the site and back office, and only to the extent they need it to do their job:

• Supabase: database and sign-in
• Cloudflare: hosting, security, and bot protection
• Google: address lookup and distance checks (Maps and Places)
• Twilio: sending and receiving text messages and calls
• Resend: sending email
• Zoho: our business mailboxes

Retention

Addresses and location notes on requests that never went anywhere (declined, no-response, or cancelled) are removed after 12 months. We keep records of completed requests, receipts, and consent and opt-out history for our business and legal records. We keep aggregate totals for our own records.

We don't sell data

We never sell your personal information.

Your choices

To see, correct, or delete your information, or to change your marketing choices, email [email protected].

Nevada privacy notice

This notice is posted under Nevada law (NRS 603A). We collect the personal information described above through this website and our requests. We share it only with the service providers listed above, and you can ask us to review or correct it by emailing us. Nevada consumers may also submit a request not to sell certain personal information; we don't sell personal information, so there is nothing to opt out of. We do not track you across other websites. Contact us at the email above with any privacy question, and we will tell you here when this policy changes.