Sourdough MisfitReturn to store

Privacy Policy

Last updated 17 October 2026

Privacy Policy

Sourdough Misfit operates this store and website, including all related information, content, features, tools, products and services, in order to provide you, the customer, with a curated shopping experience (the "Services"). Sourdough Misfit is powered by Bakeable, which enables us to provide the Services to you.

This Privacy Policy describes how we collect, use and disclose your personal information when you visit, use, or make a purchase or other transaction using the Services, or otherwise communicate with us. If there is a conflict between our Terms of Sale and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing and disclosure of your personal information.

Please read this Privacy Policy carefully. By using and accessing any of the Services, you acknowledge that you have read it and understand the collection, use and disclosure of your information as described here.

Personal information we collect or process

When we use the term "personal information", we are referring to information that identifies or can reasonably be linked to you or another person. Personal information does not include information collected anonymously or that has been de-identified so that it cannot identify or be reasonably linked to you.

We may collect or process the following categories of personal information, including inferences drawn from it, depending on how you interact with the Services, where you live, and as permitted or required by applicable law:

  • Contact details including your name, address, billing address, delivery address, phone number and email address.
  • Financial information including payment card and financial account details, transaction details, form of payment, payment confirmation and other payment details. Full card numbers are handled by our payment processor and are not stored by us.
  • Account information including your username, password, preferences and settings.
  • Transaction information including the items you view, add to your cart, purchase, subscribe to, return, exchange or cancel, and your past transactions.
  • Dietary and allergen information that you choose to give us in order to place an order safely, such as an allergy or intolerance you tell us about. Depending on where you live, this may be treated as sensitive personal information, and we use it only to fulfil and discuss your order.
  • Communications with us including the content of messages, chats, emails, texts and calls with us, for example when you send a customer support enquiry.
  • Device information including information about your device, browser or network connection, your IP address, and other unique identifiers.
  • Usage information including how and when you interact with or navigate the Services.

Where we get personal information

We may collect personal information from the following sources:

  • Directly from you, including when you create an account, visit or use the Services, place an order, communicate with us, or otherwise provide us with your personal information.
  • Automatically through the Services, including from your device when you use the Services, and through cookies and similar technologies.
  • From our service providers, when we engage them to enable certain technology and when they collect or process personal information on our behalf.
  • From our partners or other third parties.

How we use your personal information

Depending on how you interact with us and which of the Services you use, we may use personal information for the following purposes:

  • Providing, tailoring and improving the Services. To perform our contract with you, process your payments, fulfil your orders, arrange pickup or delivery, manage subscriptions, remember your preferences, send you notifications about your account and orders, process purchases, returns, exchanges and other transactions, create and manage your account, enable you to leave reviews, and improve the Services.
  • Food safety. To act on allergen and dietary information you give us, and to contact you about ingredients, substitutions or a recall.
  • Marketing and communications. To send you marketing and promotional messages by email, text message or post about our own products and offers, where you have opted in or where we are otherwise permitted to do so. We do not use your personal information to target advertising to you on other companies' websites.
  • Security and fraud prevention. To authenticate your account, provide a secure payment and shopping experience, detect, investigate and act on possible fraudulent, illegal, unsafe or malicious activity, protect public safety, and secure the Services. If you register an account, you are responsible for keeping your credentials safe; do not share your username, password or other access details with anyone.
  • Communicating with you. To provide customer support, respond to you, and maintain our business relationship with you.
  • Legal reasons. To comply with applicable law or respond to valid legal process, including requests from law enforcement or government agencies, to investigate or participate in civil discovery, potential or actual litigation or other adversarial legal proceedings, and to enforce or investigate potential violations of our terms or policies.

AI assistant and message transcripts

Messages you send through the chat on this store may be read and answered by an automated assistant rather than a person, and may be handed to a person at any point in the conversation.

To do that, the content of your message and the rest of the conversation is sent to a third-party AI provider, which processes it in order to generate a reply and returns it to us. The assistant answers from our published store policies and frequently asked questions. It can also look up your own orders and subscriptions — but only after you have verified your identity in the chat by email and a one-time code, and only ever your own.

Conversation transcripts are stored against your customer record and are visible to us. We review them to answer your questions, resolve disputes, and improve the assistant's answers.

The assistant is not a person and can be wrong. Nothing it says overrides this policy, our store policies, our Terms of Sale, or a written confirmation from us. Do not send payment card details, government identifiers or other sensitive information through chat.

If you would rather not have an automated assistant handle your message, contact us using the details at the end of this policy and a person will respond.

How we disclose personal information

In certain circumstances we may disclose your personal information to third parties for legitimate purposes subject to this Privacy Policy. Those circumstances may include:

  • With Bakeable, which hosts and operates the Services on our behalf.
  • With service providers who perform services for us, described by category rather than by name because our providers change: payment processing, email delivery, text messaging, website and application hosting, file and image storage, data analytics, error monitoring, and customer support tooling. They may process your personal information only on our instructions and for those purposes.
  • When you direct, request or otherwise consent to our disclosure of certain information to third parties, for example to deliver an order to you.
  • With our affiliates or otherwise within our corporate group.
  • In connection with a business transaction such as a merger, acquisition or insolvency; to comply with applicable legal obligations, including responding to subpoenas, search warrants and similar requests; to enforce applicable terms or policies; and to protect or defend the Services, our rights, and the rights of our users or others.

We do not sell your personal information, and we do not share it for cross-context behavioural or targeted advertising.

Mobile information and text messaging. No mobile information will be shared with third parties/affiliates for marketing/promotional purposes. All other categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

Relationship with Bakeable

The Services are hosted by Bakeable, which collects and processes personal information about your access to and use of the Services in order to provide and improve them for you. Information you submit to the Services will be transmitted to and shared with Bakeable, and with service providers that may be located in countries other than the one you live in, in order to provide and improve the Services.

For most of this processing Bakeable acts on our instructions as our service provider, and we remain responsible for your personal information. Where Bakeable processes personal information to operate, secure and improve its own platform, Bakeable is responsible for that processing.

You can direct any request about your personal information to us using the contact details at the end of this policy, and we will handle it or pass it to Bakeable as appropriate.

Third-party websites and links

The Services may link to websites or other online platforms operated by third parties. If you follow a link to a site we do not control, you should review its privacy and security policies and other terms. We do not guarantee and are not responsible for the privacy or security of those sites, or for the accuracy, completeness or reliability of information found on them.

Information you provide in public or semi-public venues, including on third-party social platforms, may be viewable by other users of the Services and of those platforms. Our inclusion of a link does not by itself imply endorsement of that platform, its content, or its owners or operators.

Children's data

The Services are not intended to be used by children, and we do not knowingly collect personal information about children under the age of majority in your jurisdiction. If you are the parent or guardian of a child who has provided us with their personal information, you may contact us using the details at the end of this policy to request that it be deleted.

As of the effective date of this Privacy Policy, we do not have actual knowledge that we sell or share the personal information of individuals under 16 years of age.

Security and retention of your information

No security measure is perfect or impenetrable, and we cannot guarantee perfect security. Information you send to us may not be secure while in transit. We recommend that you do not use unsecured channels to send us sensitive or confidential information.

How long we keep your personal information depends on why we have it — whether we need it to maintain your account, provide the Services, comply with legal or tax obligations, resolve disputes, or enforce our agreements and policies. Order and transaction records are generally kept for as long as required by applicable tax and business record-keeping law.

Your rights and choices

Depending on where you live, you may have some or all of the rights below in relation to your personal information. These rights are not absolute, may apply only in certain circumstances, and in certain cases we may decline a request as permitted by law.

  • Right to access or know. You may have a right to request access to the personal information we hold about you.
  • Right to delete. You may have a right to request that we delete personal information we hold about you.
  • Right to correct. You may have a right to request that we correct inaccurate personal information we hold about you.
  • Right to portability. You may have a right to receive a copy of the personal information we hold about you and to ask us to transfer it to a third party, in certain circumstances and with certain exceptions.
  • Right to withdraw consent. Where we rely on your consent, you may withdraw it at any time. Withdrawing consent does not affect processing carried out before you withdrew it, and we may be unable to continue providing some of the Services without it.
  • Right to opt out of sale or sharing for targeted advertising. We do not sell your personal information and we do not share it for cross-context behavioural or targeted advertising. If that ever changes, we will update this policy and provide a way to opt out before doing so.
  • Managing communication preferences. You can opt out of marketing email at any time using the unsubscribe link in our emails, and out of marketing text messages by replying STOP. If you opt out, we may still send you non-promotional messages about your account or your orders.

If you are in Canada, you may request access to the personal information we hold about you and ask us to correct it, and you may withdraw consent subject to legal or contractual restrictions and reasonable notice.

You may exercise any of these rights by contacting us using the details at the end of this policy. We will not discriminate against you for exercising them. We may need to verify your identity before processing a request, as permitted or required by applicable law. You may designate an authorized agent to make a request on your behalf; before accepting such a request we will require proof that you authorized the agent, and we may need to verify your identity directly with you. We will respond within the time required by applicable law.

Complaints

If you have a complaint about how we process your personal information, please contact us using the details at the end of this policy so that we can try to resolve it.

Depending on where you live, you may also have the right to appeal our decision, or to lodge a complaint with your local data protection authority. In Canada, that is the Office of the Privacy Commissioner of Canada, or your provincial privacy commissioner where one has jurisdiction.

International transfers

We may transfer, store and process your personal information outside the country you live in, including in countries whose data protection laws differ from those where you are located.

If we transfer your personal information out of the European Economic Area or the United Kingdom, we rely on a recognized transfer mechanism, such as the European Commission's Standard Contractual Clauses or an equivalent instrument issued by the relevant UK authority, unless the transfer is to a country determined to provide an adequate level of protection.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time, including to reflect changes to our practices or for other operational, legal or regulatory reasons. We will post the revised policy on this page, update the date shown on it, and provide notice as required by applicable law.

Contact

If you have any questions about our privacy practices or this Privacy Policy, or if you would like to exercise any of the rights available to you, please contact us:

Sourdough Misfit
kelly@kellyliston.com
6027963430
150 E Lamar Road, Phoenix, AZ 85012, US