Privacy policy

Farah Bakery, a bakery based in Dubai, United Arab Emirates. We operate this website at farahbakery.ae. If you want to reach a human about anything on this page, write to us on WhatsApp at 056 374 8535 or use the contact page.

We only collect what we need to serve you:

• When you order or book: your name, email address, mobile number, and — for deliveries — your address and any note you add to the order.
• When you create an account: your email and a password. Passwords are stored only as a cryptographic hash; we cannot read them. If you sign in with Google or Apple, we receive your name and email from them, never your password.
• When you message us: the content of what you send us by WhatsApp, email or the contact form.
• Automatically: basic technical information such as your device type, browser, approximate location and the pages you visit.

We do not collect card numbers. Payments are handled entirely by PayPal — your card details are entered on PayPal’s systems and never reach ours.

• To bake, prepare, deliver and support your order.
• To issue and deliver event tickets, including sending your QR code by email and WhatsApp.
• To answer your questions and handle refunds or problems.
• To keep your account and order history available to you.
• To understand which pages and products people find useful, so we can improve them.

We do not sell your personal information. We share it only with the services that make the site work:

• PayPal — to take payment securely.
• Twilio — to send your event ticket over WhatsApp.
• Meta and Google Analytics — to measure how the site is used and how well our advertising works.
• Our hosting provider — to run the site and store data.
• Government authorities, where the law requires it.

We use cookies and browser storage to remember your cart, your chosen language, and whether you are signed in — the site cannot function without these. We also use the Meta Pixel and Google Analytics, which set cookies to measure visits and advertising performance.

You can block or delete cookies in your browser settings. If you do, parts of the site — the cart in particular — may stop working.

We message you about things you asked for: order confirmations, delivery updates and event tickets. If we ever send you news or offers, every message will include a way to stop them, and you can always ask us directly to stop.

Order and booking records are kept while your account is active and afterwards for as long as we need them for accounting, tax and legal purposes. You can ask us to delete your account at any time; we will remove what we are not legally required to keep.

You can ask us to show you the personal information we hold about you, correct anything that is wrong, or delete it. Message us on WhatsApp or use the contact page and we will take care of it. If something has gone wrong, tell us — we would rather hear it from you than from anyone else.

The site is served over HTTPS, passwords are hashed, and access to customer data is limited to the people who need it to run the bakery. No system is perfect, but we take this seriously and act quickly if something looks wrong.

This site is intended for adults. We do not knowingly collect information from children. If you believe a child has given us their details, contact us and we will delete them.

If we change this policy we will update the date at the top of this page. Material changes will be highlighted on the site.