Privacy

When you order

Your name, email, mobile, delivery address and any notes, so Mai can confirm your order, make it and deliver it. We email you about that order only: when it’s received, confirmed, delivered or cancelled.

If you send an event enquiry, we keep its details so Mai can reply with a quote.

If you join the waitlist

Before the shop opens, you can leave your email to hear when ordering opens. We keep only that address and when you left it, send it one email when we open, then delete the list. To come off it sooner, message Mai.

If you sign in

Signing in is optional. We use your email address (from Google or an email link) to show you the orders placed with it. There are no passwords to store.

When you visit

To see how people use the shop, your browser keeps a random visitor number, made up on your device. We record which pages you open, how far you get (looking at a platter, adding to cart, ordering), where you came from (for example Instagram or Google) and whether you’re on a phone or a computer.

That record has no name, email or IP address, isn’t shared with anyone and is deleted after about 13 months. If your browser is set to ‘Do Not Track’ or ‘Global Privacy Control’, nothing is recorded.

What’s stored on your device

Your cart, your sign-in (if you sign in) and the visitor number above. No advertising cookies and no third-party trackers, so we don’t ask about cookies. Clearing this site’s data in your browser removes all of it.

Keeping out bots

The order, enquiry and waitlist forms use Cloudflare Turnstile to check that a person, not a program, is sending them. It looks at your browser for a moment, without advertising cookies, and usually you won’t notice it.

To stop the forms being flooded, we count how often they’re used from each network and email address. Those counts are kept as scrambled codes, not the addresses themselves, and are deleted within two days.

Who handles it

Only Mai sees your details. The services that run the shop process them for us: Google Firebase stores the data in Australia, Cloudflare serves the website and checks for bots, and Resend sends the emails. We never sell your information.