PRIVACY POLICY

This Privacy Notice for The Fickle Baking Corporation ("we," "us," or "our"), describes how and why we might access, collect, store, use, and/or share ("process") your personal information when you use our services ("Services"), including when you:

• Download and use our mobile application (Fickle App) or any other application of ours that links to this Privacy Notice.
• Use Fickle Cookies services. Fickle Cookies is a small batch baking business that specializes in cookies that are always hand crafted and family-made!
• Engage with us in other related ways, including any sales, marketing, or events.

SUMMARY OF KEY POINTS

This summary provides key points from our Privacy Notice, but you can find out more details by using the table of contents below.

• Personal Info: We collect info you provide (names, contacts) and auto-collected info (device data, location).
• Sensitive Info: We do not process sensitive personal information.
• Third Parties: We generally do not share data, except with specific vendors (e.g., Xendit for payments, Google for Maps/Analytics).

1. WHAT INFORMATION DO WE COLLECT?

Personal information you disclose to us

We collect personal information that you voluntarily provide to us when you register on the Services.

• Names
• Phone numbers
• Email addresses
• Contact preferences

Payment Data

We may collect data necessary to process your payment if you choose to make purchases. All payment data is handled and stored by Xendit. You may find their privacy notice link here: https://www.xendit.co/en-ph/privacy-policy/.

Application Data

If you use our application(s), we may collect the following if you grant permission:

• Geolocation Information: Track location-based information to provide delivery services.
• Mobile Device Data: Device ID, model, manufacturer, OS version, and IP address.
• Push Notifications: To send updates regarding your account or orders.

Information automatically collected

Some information — such as your Internet Protocol (IP) address, browser and device characteristics — is collected automatically when you visit our Services. This includes Log and Usage Data, Device Data, and Location Data.

2. HOW DO WE PROCESS YOUR INFORMATION?

We process your information to provide, improve, and administer our Services, communicate with you, and for security and fraud prevention. Specific reasons include:

• Account Management: To facilitate account creation, authentication, and user management.
• Order Fulfillment: To manage orders, payments, returns, and exchanges.
• Usage Trends: To analyze how our services are used so we can improve them.

3. WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?

We may share information in specific situations and with specific categories of third parties:

• Vendors and Service Providers: Cloud Computing Services, Data Analytics Services, Performance Monitoring Tools.
• Business Transfers: In connection with a merger, sale of company assets, or acquisition.
• Google Maps Platform APIs: We share data with Google Maps API and Places API to provide location services.

4. DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES?

We may use cookies and similar tracking technologies (like web beacons and pixels) to access or store information. Specific information about how we use such technologies and how you can refuse certain cookies is set out in our Cookie Notice.

Google Analytics: We may share your information with Google Analytics to track and analyze the use of the Services. To opt out of being tracked by Google Analytics, visit https://tools.google.com/dlpage/gaoptout.

5. HOW LONG DO WE KEEP YOUR INFORMATION?

We will only keep your personal information for as long as it is necessary for the purposes set out in this Privacy Notice. No purpose in this notice will require us keeping your personal information for longer than three (3) months past the termination of the user's account.

When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize such information.

6. HOW DO WE KEEP YOUR INFORMATION SAFE?

We have implemented appropriate and reasonable technical and organizational security measures designed to protect the security of any personal information we process. However, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure.

7. WHAT ARE YOUR PRIVACY RIGHTS?

Depending on your location, you may have the right to withdraw consent, opt-out of marketing communications, or review/change your account information.

Account Information

If you would at any time like to review or change the information in your account or terminate your account, you can:

• Log in to your account settings and update your user account.
• Contact us using the contact information provided below.

8. CONTROLS FOR DO-NOT-TRACK FEATURES

Most web browsers and some mobile operating systems include a Do-Not-Track ("DNT") feature. At this stage, no uniform technology standard for recognizing and implementing DNT signals has been finalized. As such, we do not currently respond to DNT browser signals.

9. DO WE MAKE UPDATES TO THIS NOTICE?

Yes, we will update this notice as necessary to stay compliant with relevant laws. The updated version will be indicated by an updated "Revised" date.

10. HOW CAN YOU CONTACT US ABOUT THIS NOTICE?

If you have questions or comments about this notice, you may contact our Data Protection Officer (DPO) by email at admin@theficklegroup.com, or by post to:

11. HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?

Based on the applicable laws of your country, you may have the right to request access to the personal information we collect from you, change that information, or delete it. To request to review, update, or delete your personal information, please submit a request to admin@theficklegroup.com.