Legal

Privacy Policy

Last updated: April 30, 2026

The Pantry Post, LLC ("we," "us," or "our") respects your privacy. This policy explains what information we collect when you visit thepantrypost.com or place an order, how we use it, and the rights you have under the EU General Data Protection Regulation (GDPR) and California Consumer Privacy Act (CCPA).

1. Information We Collect

Order info: name, shipping & billing address, email, phone, items purchased, and any notes you leave at checkout.
Payment info: processed directly by Shopify Payments and Stripe — we never see or store your full card number.
Email signups: the email address you submit to The Pantry List.
Site usage: basic device, browser, and page-view data via standard server logs. We do not currently run third-party advertising or analytics pixels.
Cookies: a small number of essential cookies (cart, session). No tracking cookies are set without your consent.

2. How We Use It

To bake, pack, and deliver your order.
To send order confirmations, delivery updates, and reply to your messages.
To send marketing emails — only if you opted in. You can unsubscribe from any email we send.
To prevent fraud and keep the site secure.

3. Who We Share It With

We share the minimum needed with trusted service providers:

Shopify — checkout, order management, payments.
Local delivery partners — name & address only, to drop your order.
Email provider — to send order and (opted-in) marketing emails.

We do not sell your personal information. We do not share it with advertisers or data brokers.

4. Your Rights (GDPR & CCPA)

You can:

Request a copy of the personal data we hold about you.
Ask us to correct or delete it.
Withdraw consent for marketing emails at any time.
California residents: exercise your CCPA rights, including the right to know, delete, and opt out of any sale of personal information (we do not sell).

To exercise any right, email hello@thepantrypost.com. We'll respond within 30 days.

5. Data Retention

Order records are kept for 7 years for tax and accounting purposes. Marketing email addresses are kept until you unsubscribe.

6. Security

We use HTTPS site-wide and rely on PCI-compliant providers for payment processing. No online transmission is 100% secure, but we take reasonable steps to protect your data.

7. Children

The site is not directed to children under 13, and we do not knowingly collect data from them.

8. Changes

We may update this policy from time to time. Material changes will be posted here with a new "Last updated" date.

9. Contact

The Pantry Post, LLC · East Hampton, NY · hello@thepantrypost.com