Last updated: September 4, 2026
This notice explains how The Sunflower Bakery & Cafe handles personal information through our restaurant website and our online shop.
Who we are and how to reach us
The Sunflower Bakery & Cafe operates these websites. Our address is 512 14th St, Galveston, TX 77550, United States. For privacy questions or requests, email Christy@thesunflowerbakeryandcafe.com or call (409) 763-5500.
Information we collect and why
- Shopping and orders: contact details, billing and delivery addresses, items and options ordered, payment-method references, transaction status, and order or support messages. We use these to process purchases, arrange delivery, handle problems, prevent fraud, and maintain business records. You may check out as a guest.
- Questions and catering inquiries: your name, email, chosen topic, and message, so our team can respond.
- Interest in joining our team: your name, email, optional phone number, role interests, availability, experience, and note. With the permission requested on that form, we keep this information on file and may contact you about a suitable opening. You can ask us to remove it.
- Newsletter subscriptions: the details you submit through our Mailchimp signup page, used to send the updates you request. Marketing emails include an unsubscribe link; unsubscribing does not stop necessary order or support messages.
- Website and security information: IP address, browser and device information, pages requested, referral information, and cookie choices, used as relevant to deliver and protect the websites, maintain shopping sessions, and understand website use.
Please do not send full payment-card details, Social Security numbers, or identity documents through our contact or team-interest forms.
Payments, fulfillment, and service providers
Our shop uses WordPress and WooCommerce on GoDaddy hosting. Order and customer records are stored in the shop’s database and backups. Authorized staff and providers supporting the shop may access information needed for their work.
Payment details are handled by the payment services available at checkout, including Stripe and any wallet service you choose. We receive transaction information and payment references, rather than your full card number or security code. Payment providers also process information for security and fraud prevention and may receive checkout information before you finish an order. See Stripe’s privacy notice.
Printful is our merchandise production and fulfillment partner. We share order items, customer contact information, and delivery details needed to make and ship your purchase with Printful and delivery providers. See Printful’s privacy notice. Please contact Sunflower about your order or a privacy request.
Cloudflare helps host, deliver, and protect the restaurant website and send form messages to our team. Mailchimp provides newsletter signup and email services; its email technologies can record opens and link clicks. See Cloudflare’s privacy notice and Mailchimp/Intuit’s privacy notice. These providers may process information in the United States and other countries where they operate.
We may also disclose information when required by law or needed to address fraud, security incidents, or legal claims.
Cookies and your choices
Essential cookies support shopping sessions, checkout, sign-in, security, and remembering your privacy choices. The shop’s cookie controls let you accept or reject optional cookies or review individual categories in Preferences. You can reopen these controls using the floating Cookie Preferences button. Your choices apply to the browser and device you use.
The restaurant website uses Cloudflare Web Analytics for traffic and performance measurement without analytics cookies. With Statistics consent, the shop’s browser-based WooCommerce order attribution and Jetpack/Automattic analytics measure visits, referrals, and shopping activity. See Automattic’s notice for visitors to its users’ sites. External services you choose to visit, including newsletter signup, social media, and payment wallets, have their own privacy notices and controls.
How long information is kept
We do not currently apply a fixed automatic deletion period to shop order records. Order information, correspondence, and backups may remain in our business systems. You can contact us about access or deletion; accounting, tax, fraud-prevention, dispute, or other legal recordkeeping obligations may limit what we can delete. Team-interest information is kept on file as described on that form unless you ask us to remove it.
Privacy requests
Contact us using the email or phone above to ask about your information, request access, correction, a copy, or deletion, or raise an objection or withdraw consent where applicable. You do not need a shop account to make a request. We may need to verify your identity proportionately before releasing or changing records.
Your rights and the exceptions to them depend on applicable law. If we decline a request, you may ask us to review the decision by replying to our response or contacting us with “Privacy appeal” in the subject. You may also contact your relevant privacy regulator or, in Texas, the Texas Attorney General. Nothing in this notice limits rights provided by law.
Changes to this notice
We will update this page when our practices change and revise the date above. Please contact us if anything here is unclear.