Privacy Policy
In effect from 12 August 2026.
This is the whole of it. We ask for one thing, an email address, and only if you offer it. There are no cookies on this site, no analytics, no advertising pixels and no third-party trackers of any kind.
Who is responsible
Here There Bread runs heretherebread.com and decides what happens to the information described here. You can reach us at hello@heretherebread.com.
What we collect
Your email address, if you give it to us
If you use the form on the front page to be told when the shop opens, we store the address you type, the moment you sent it, and which form it came from. Nothing else. We do not ask for your name, and we do not try to work out who you are.
Ordinary server records
Our host records the usual technical details of a request: the IP address it came from, the page asked for, the time, and the browser's own description of itself. These are kept briefly, used to keep the site running and to spot abuse, and are not joined up with anything else.
What we do not collect
No cookies are set by this site. There is no analytics package, no advertising network, no social media tracking, no fingerprinting, and no profiling or automated decision-making. If you play the film, it is served from this site; it does not report your viewing to anyone.
Why we hold it, and for how long
The address is held for one purpose: to write to you once when the shop opens, and afterwards only if you have asked to keep hearing from us. We keep it until you ask us to remove it, or until it becomes clear the shop is not opening, whichever comes first. Server records are kept for a short period by our host and then discarded.
Who else sees it
We do not sell personal information. We do not share it for advertising. We have never done either, and this policy will be updated before we ever do.
The only companies that handle it on our behalf are:
- Vercel Inc. — hosting, and the private store the waitlist is kept in.
Your rights
Wherever you live, you can ask us to show you what we hold about you, to correct it, or to delete it. Write to hello@heretherebread.com from the address in question, or tell us which address to look for, and we will act within thirty days. We will not treat you differently for asking.
If you are in California, Colorado, Connecticut, Virginia, Texas, Oregon or any other state with a comprehensive privacy law, those laws give you rights of access, correction, deletion, portability, and to opt out of sale, sharing, targeted advertising and profiling. We do not sell or share personal information and do not carry out targeted advertising or profiling, so there is nothing there to opt out of; the other rights are exercised by writing to us as above. Because we sell and share nothing, a Global Privacy Control signal has nothing to act on here.
If you are in the United Kingdom or the European Economic Area, our basis for holding your address is your consent, which you may withdraw at any time by asking us to delete it.
Email we send
Every message we send will say who it is from, will carry a postal address, and will have a working way to stop receiving them in one step. Unsubscribing is honoured immediately.
Children
This site is not directed at children under thirteen and we do not knowingly collect anything from them. If you believe a child has given us an address, write to us and it will be deleted.
Security
The site is served over HTTPS. The waitlist is kept in private storage that is not readable over the web. No system is perfect, and we will not pretend otherwise; what we can promise is that we hold as little as possible, which is the only real protection there is.
Changes
If this policy changes, the date at the top changes with it. If the change is a significant one, and we hold your address, we will tell you before it takes effect.