Privacy notice
Last updated: 2 November 2026
1. Who is responsible?
Thai Rachel Choresh, trading as Bread Fairy
Schreinerstraße 60, 10247 Berlin, Germany
Email: [email protected]
Telephone: +49 151 43422252
You can use these contact details for privacy questions and requests concerning your personal data.
2. What this website does
This information website is hosted on Cloudflare Pages. It has no customer accounts, shopping cart, checkout, newsletter sign-up, advertising trackers or audience analytics in its website code. Images and fonts are served with the website; opening a page does not load an embedded Instagram or Facebook feed.
Personal data is processed when your browser requests pages, when you follow an external link, or when you choose to contact us, as explained below. This notice describes this website and correspondence with Bread Fairy; following an external link brings you to a service with its own privacy information.
3. Hosting and technical access data
We use Cloudflare Pages to deliver and protect this website. Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA, processes technical request and connection data such as your IP address, requested page, time of access, browser information and HTTP headers. Some of this information may be recorded in technical or security logs to operate the service, diagnose problems and prevent abuse.
The legal basis is Article 6(1)(f) GDPR: our legitimate interest in providing a reliable and secure information website. Cloudflare's processing terms are set out in its Data Processing Addendum. See also Cloudflare's privacy policy. Retention of technical data depends on the service, security purpose and applicable provider settings.
4. Cookies and browser storage
The website's own code does not set cookies or use persistent browser storage. Cloudflare may use technically necessary security cookies when its protection features are triggered. Details of the purposes and lifetimes of those cookies are published in Cloudflare's cookie documentation. We do not use cookies for advertising or audience analytics on this website.
5. Contact by email
Our email link opens your configured email application. The website itself does not collect or send your message.
If you email us, we process your contact details, message and attachments to respond and handle necessary follow-up. Our business mailbox uses Host Europe and email delivery also involves your chosen provider. General enquiries are processed under Article 6(1)(f) GDPR, our legitimate interest in handling correspondence. Contract-related enquiries and requested pre-contract steps are processed under Article 6(1)(b). Statutory record-keeping uses Article 6(1)(c), where applicable.
Providing contact information is voluntary, but we need sufficient information to respond.
6. Social links
Links to Instagram, Facebook, TikTok and Pinterest open those external services. Simply viewing this website does not load a social plugin or send a gallery-view event to those services. If you follow a link, the service receives the resulting request and processes data under its own terms, including any account or cookie information it already holds. See Instagram's privacy information and Facebook's privacy policy.
7. Previous orders and retention
This website does not accept online orders. Replacing the former shop does not by itself delete records of earlier transactions or correspondence. If your enquiry concerns a previous order, we may process the relevant order, contact and transaction records to handle it, meet legal obligations or establish, exercise or defend legal claims. The applicable bases are Article 6(1)(b), (c) or (f) GDPR, depending on the purpose.
We retain personal data only for as long as it is needed for the relevant purpose. Enquiry records are kept for handling the enquiry and necessary follow-up; records subject to statutory retention duties or needed for legal claims may be kept longer. We then delete or anonymise the data. Technical hosting data follows the purpose and provider criteria described above.
8. Processing outside the EEA
Cloudflare operates internationally, and processing can take place outside the European Economic Area, including in the USA. Cloudflare's published processing terms describe the safeguards for transfers, including applicable adequacy arrangements and Standard Contractual Clauses. You can read those terms using the links above or ask us for information about the safeguards relevant to your data.
9. Your rights
Subject to the conditions in the GDPR, you have rights of access, rectification, erasure, restriction of processing and data portability. You may object to processing based on legitimate interests for reasons relating to your particular situation. If data is processed for direct marketing, you may object at any time. Where processing is based on consent, you may withdraw it at any time without affecting processing carried out before withdrawal.
This website does not make automated decisions, including profiling, that produce legal effects or similarly significantly affect you. You can contact us using the details above to exercise your rights. We may need information to verify your identity before disclosing personal data.
You also have the right to complain to a data protection supervisory authority, including the authority where you live or work or where you believe an infringement occurred. Our local authority is the Berlin Commissioner for Data Protection and Freedom of Information.