Privacy Policy - Posh Plum Consulting LLC including d/b/a Posh Plum Specialty Sweets

This Privacy Policy (herein referred to as “Policy”) explains how Posh Plum Consulting LLC and its registered trade name d/b/a Posh Plum Specialty Sweets (herein referred to as the “Company,” “we,” “us,” or “our”) processes Personal Data that we collect from you (herein referred to as the “Subscriber”) as a Controller. This Policy applies to data collected via posh-plum.com, poshplumsweets.com, and through our in-person service points.

DEFINITIONS

(a) “Controller” means the natural or legal person, public authority, agency, or other body, which alone or jointly with others, determines the purposes and means of processing Personal Data.
(b) “Personal Data” means any information relating to an identified or identifiable natural person (“data subject”).
(c) “Service(s)” means Consulting Services, Strategic Staffing Engagements, Ad Hoc Projects, Specialty Bakery Services, etc.
- (i) “Subscriber” means the natural or legal person who has subscribed to or engaged with the Service(s).
- (ii) “Terms” means the binding contract or service agreement between the Company and Subscriber.
(d) "Specialty Bakery Services" means the production, sale, and delivery of handcrafted baked goods and confectionery items.

DATA COLLECTION

The Subscriber directly provides the Company with most of the data we collect. The Company collects Personal Data from the Subscriber from the following sources:

Contact Request and Inquiry forms across all Company domains.
Free Consultation Booking Form (via Calendly).
Kibako Change Gauge tool (Lite & Full versions).
PMO Health Guide Access Form.
Correspondence received at: info@posh-plum.com, info@poshplumsweets.com, and orders@poshplumsweets.com.
Specialty Bakery Services mailing list sign-up forms.
Online order forms and Point-of-Sale (POS) interactions.

PROCESSING OF PERSONAL DATA

(a) The Company processes the Subscriber’s Personal Data for purposes including:

Direct Engagement: Scheduling consultations, responding to inquiries, and delivering assessment reports.
Order Fulfillment: Managing Specialty Bakery Services, including processing payments, coordinating hyperlocal delivery, or managing pickup logistics.
Marketing: Sending promotional communications regarding our consulting frameworks (Kibako, Sumomo) and our seasonal bakery offerings.
Assessment: Analyzing organizational readiness for change via the Kibako Change Gauge.

(b) The Company will generally collect Personal Data only where it needs to create a contract, where processing is in the Company’s legitimate interests, or where the Company has consent.

SHARING OF PERSONAL DATA

(a) We use third-party service providers who act as Data Processors on our behalf. For these specific services, we act as the Data Controller.

Online Scheduling (Calendly): Used to manage bookings. Calendly processes your name and email to facilitate scheduling. Link to Privacy Notice.
Intelligent Forms (Tally): Used to collect responses from the Kibako: Change Gauge. Tally processes data to generate assessment reports.
Omnichannel Payment Processing (Wix Payments, Talech & Zelle): Used for both Bakery and Consulting services (online and POS). These providers collect billing/shipping and payment details.
- Wix Payments handles online credit cards, Apple Pay, and Google Pay.
- Talech facilitates in-person POS transactions.
- Zelle is utilized for direct bank transfers.
Order Fulfillment & Hyperlocal Delivery: We personally manage the fulfillment and delivery of orders for Posh Plum Specialty Sweets. Your delivery information is not shared with third-party courier services.

We have Data Processing Addendums in place with these processors to ensure compliance with applicable data protection laws.

(b) We may use information from credit reference agencies to prevent fraudulent purchases.

(c) We may disclose information if legally required by law enforcement or in emergency situations, or in conjunction with a merger or sale of the company assets.

INTERNATIONAL DATA TRANSFERS

Personal Data may be transferred to and processed in the United States or other countries. For subscribers in the EEA, UK, or Switzerland, we implement safeguards such as the Data Privacy Frameworks or Standard Contractual Clauses (SCCs).

YOUR DATA PROTECTION RIGHTS

Depending on your location, you may have the right to Access, Rectification, Erasure, Restriction, Objection, Data Portability, and Withdrawal of Consent. To exercise these rights, contact privacy@posh-plum.com.

RETENTION, SECURITY, AND MODIFICATION

We retain data as long as there is an ongoing legitimate business need. We use appropriate technical and organizational measures to protect your data. This Policy is reviewed regularly.

Last updated: February 25, 2026

CONTACT DETAILS

If you have any concerns about this Policy, please get in touch with us at privacy@posh-plum.com.