Maison de Maryam ("we", "us", "our") is a home-based pastry kitchen in Austin, Texas. This policy explains exactly what personal information we collect, why, where it goes, and how to ask us to delete it. If anything here is unclear, email contact@maisondemaryam.com and we'll explain.
1. What we collect
When you submit the contact form
- Your name, email address, phone number (optional), and the message you write.
- A truncated, irreversible hash of your IP address and your browser's user-agent string — used only for rate-limiting and spam prevention. We cannot recover the original IP from this hash.
When you submit a custom-order request
- Everything above, plus: event date, order type, headcount (if you provide one), dietary preferences (if any), and the notes you write describing your vision.
- If you upload inspiration photos (when this feature is available), the photos themselves, stored in private Cloudflare R2 object storage.
When you simply browse the site
- Standard server logs collected by our hosting provider, Cloudflare — request URL, time, response status, and IP address. Cloudflare retains these per their own policy. We do not use them for personal analytics.
- No tracking cookies, no advertising pixels, no behavioral analytics. We do not use Google Analytics or any equivalent.
2. What we do not collect
- We never see or store your payment information. When you pay via a Stripe-hosted payment link, that transaction happens entirely between you and Stripe.
- We do not share, sell, or rent your information to anyone.
- We do not run advertising on this site.
3. How we use what we collect
- To reply to your contact-form message or custom-order request.
- To coordinate the details of your order (flavors, delivery, deposit, etc.).
- To prevent abuse of the forms (the rate-limit IP hash).
- Nothing else.
4. Where your information goes
We use the following third-party services to run the site. Each receives only the data needed for its specific job:
- Cloudflare — hosts the website and processes form submissions. Stores form-submission rows in a Cloudflare D1 database located in the United States.
- Resend — sends the email notification of your form submission to our business inbox. Your name, email, and message text pass through Resend's servers in the United States.
- ImprovMX — forwards email sent to
contact@maisondemaryam.comto our internal inbox. - Instagram (Meta) — we display public posts from @maisondemaryam.atx on this site via the Instagram Graph API. Meta knows nothing about you as a visitor beyond what's described in their own policy when you click through to Instagram.
- Stripe (when payment links are active) — processes payments. Their policy applies once you click a payment link and leave this site.
5. How long we keep it
- Contact-form submissions: kept until we've replied and the conversation is complete, typically less than 90 days. We may keep records of confirmed orders for accounting purposes (Texas requires 4 years of business records).
- Custom-order requests: kept while the order is active and for a reasonable period after delivery, then deleted.
- IP hashes used for rate limiting: 60 minutes, then automatically expired.
6. Your rights
At any time you can email contact@maisondemaryam.com to:
- See what we have on file about you.
- Correct anything that's wrong.
- Delete it (we'll remove it within 30 days unless we're legally required to retain it).
California residents have additional rights under the CCPA, including the right to know and the right to delete; we honor these for any visitor who asks.
7. Children
This site is not directed at children under 13 and we do not knowingly collect personal information from them. If we learn that we've collected such information, we'll delete it.
8. Security
Form submissions travel over HTTPS. The Cloudflare D1 database is access-restricted to our Worker code. We don't promise an impenetrable system — nobody honestly can — but we don't store anything we don't need to and we don't keep it longer than we have to.
9. Changes to this policy
If we change how we handle data, we update this page and bump the effective date at the top. Material changes (e.g. adding a new third-party service that processes personal data) will be noted clearly here for at least 30 days.
10. Contact
Questions about this policy, requests for your data, or anything else:
Maison de Maryam
Austin, Texas
contact@maisondemaryam.com