Privacy Policy

Last updated: 26 July 2026

1. Introduction and Scope

BREAD TOAST BAKERY W.L.L. (the "Company", "we", "us" or "our"), holder of Commercial Registration Number 72064-1, with its registered address at Building 457A, Road 53, Block 553, Budaiya, Kingdom of Bahrain, is committed to protecting the privacy of its customers and to handling personal data lawfully and transparently.

This Privacy Policy explains how we collect, use, disclose, retain and protect personal data when you place an order with us, visit our website at https://breadtoast.bh, contact us by telephone or WhatsApp, or otherwise interact with our products and services.

This Policy applies to all customers, visitors and recipients of our services. By using our services, you acknowledge that you have read and understood this Policy.

2. Information We Collect

We collect only the personal data necessary to provide our products and services. The categories of personal data we collect are:

• Name
• Phone number
• Email address
• Delivery address
• Order history
• Payment records

We collect this information directly from you when you place an order, request a delivery, or communicate with us. We do not knowingly collect special categories of personal data such as data relating to health, religious belief or political opinion.

3. How We Use Your Information

We process personal data for the following purposes:

• Processing, confirming and fulfilling your orders;
• Arranging, scheduling and completing delivery of your orders;
• Providing customer service and responding to your enquiries, requests and complaints;
• Issuing invoices and maintaining accounting, tax and commercial records;
• Communicating with you about your orders, deliveries, invoices and support requests, including by WhatsApp;
• Complying with our legal, regulatory and accounting obligations in the Kingdom of Bahrain.

We do not use your personal data for automated decision-making that produces legal effects concerning you.

4. WhatsApp Business Platform

The Company uses the WhatsApp Business Platform, provided by Meta Platforms, Inc. ("Meta"), to communicate with customers regarding orders, deliveries, invoices and customer support.

When we communicate with you through WhatsApp, the content of those messages and the associated information, including your phone number and message delivery status, is transmitted to and processed by Meta Platforms, Inc. in accordance with Meta's own privacy policy. Meta acts as an independent data processor and controller in respect of that processing, and its handling of your data is governed by its own terms, which are available at https://www.whatsapp.com/legal/privacy-policy. We encourage you to review Meta's privacy policy.

We send WhatsApp messages only in connection with a specific order, delivery, invoice or support request. We do not use WhatsApp to send unsolicited marketing.

You may opt out of receiving WhatsApp messages from us at any time by replying with the word STOP to any message we send you, or by contacting us at breadtos@batelco.com.bh. Opting out will not prevent us from fulfilling an order you have already placed, but it may limit our ability to send you delivery updates and order confirmations.

5. Data Sharing and Disclosure

We do not sell, rent or trade personal data to any third party under any circumstances.

We share personal data only where strictly necessary, and only with:

• Delivery personnel and drivers, limited to the information required to complete your delivery;
• Payment processors and banks, limited to the information required to process your payment;
• Service providers acting on our behalf, such as information technology, hosting and accounting providers, limited to what is required to perform their services;
• Competent governmental or judicial authorities, where disclosure is required by applicable law.

All third parties who receive personal data from us are required to keep it confidential and to process it only for the specified purpose.

6. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes described in this Policy, including any period required to satisfy legal, accounting, tax or reporting obligations.

Order records, invoices and payment records are retained for the period prescribed by the commercial and tax laws of the Kingdom of Bahrain. Once personal data is no longer required, it is securely deleted or irreversibly anonymised.

7. Your Rights

In accordance with the Bahrain Personal Data Protection Law No. 30 of 2018, you have the following rights in respect of your personal data:

• Right of access - to be informed whether we process your personal data and to obtain a copy of it;
• Right of correction - to request that inaccurate or incomplete personal data be corrected or completed;
• Right of deletion - to request the deletion of personal data that is no longer necessary for the purposes for which it was collected;
• Right to object - to object to the processing of your personal data, including processing for direct marketing purposes;
• Right to withdraw consent - to withdraw any consent you have previously given, at any time, without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, please contact us at breadtos@batelco.com.bh. We will respond within the period prescribed by applicable law. We may need to verify your identity before acting on your request.

8. Data Security

We apply appropriate technical and organisational measures designed to protect personal data against unauthorised access, disclosure, alteration, loss or destruction. These measures include restricting access to personal data to authorised personnel on a need-to-know basis, the use of password-protected and access-controlled systems, encryption of data in transit where appropriate, and the use of reputable payment processors for payment transactions.

While we take all reasonable steps to protect your personal data, no method of transmission over the internet or method of electronic storage is completely secure, and we cannot guarantee absolute security.

9. Children's Privacy

Our products and services are not directed at persons under the age of 18 years. We do not knowingly collect personal data from any person under the age of 18. If we become aware that we have inadvertently collected personal data from a person under 18, we will delete that data promptly. If you believe that we hold data relating to a person under 18, please contact us at breadtos@batelco.com.bh.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, our services, or applicable law. Any updated version will be posted on this page with a revised "Last updated" date. We encourage you to review this page periodically. Your continued use of our services after an update constitutes acceptance of the revised Policy.

11. Contact Us

If you have any question, request or complaint regarding this Privacy Policy or the way we handle your personal data, please contact us:

• BREAD TOAST BAKERY W.L.L.
• Commercial Registration Number: 72064-1
• Building 457A, Road 53, Block 553, Budaiya, Kingdom of Bahrain
• Email: breadtos@batelco.com.bh
• Website: https://breadtoast.bh