Privacy Policy

Information we collect

Information you give us

When you place an order or create an account, we collect your name, email address, and phone number, along with your order details — the items ordered, your pickup date and time, and any notes or special instructions you provide.

For custom cake orders, we also collect your cake selections, any message you would like written on the cake, and any reference photo you choose to upload. If you order on a business account, we collect your business name and account code.

Payment information

We do not collect or store your credit card details. When you pay online, your card information goes directly to Stripe, our payment processor. We receive only confirmation that the payment succeeded, along with the last four digits of the card, which appear on your order record.

For custom cake orders, your card is securely saved with Stripe when you place the order but is not charged until our team reviews your order and confirms the final price.

Information collected automatically

Like most websites, this site and its hosting provider record basic technical information when you visit: your IP address, browser type, the pages you visit, and the date and time of your visit. This is used to keep the website running and secure.

How we use your information

We use your personal information to:

• Take and fulfil your orders
• Send you order confirmations, and notices about cancellations or refunds
• Contact you if there is a question or problem with your order
• Let you sign in to your account and view your order history
• Manage business accounts and invoicing
• Keep the website secure and prevent fraudulent use of accounts

We do not sell your personal information, and we do not share it with advertisers.

Marketing emails

If you choose to sign up for our newsletter, we will use your email address to send you occasional news and offers. You are only added if you actively opt in — we never subscribe you automatically because you placed an order. Every marketing email includes an unsubscribe link, and you can opt out at any time. Unsubscribing does not affect the order confirmations and updates we send about orders you have placed.

Who we share it with

We use a small number of service providers to run this website. They process your information only to provide their service to us:

• Stripe — processes card payments (United States)
• Clerk — manages customer accounts and sign-in (United States)
• Supabase — stores the website database and uploaded photos (Canada)
• Vercel — hosts the website (United States)
• Google Workspace — sends order confirmation emails (United States)

Because some of these providers are located outside Canada, your information may be stored or processed outside the country and may be subject to the laws of those jurisdictions.

We may also disclose personal information if required by law, or where necessary to protect our rights, our property, or the safety of others.

Cookies

We use only the cookies necessary for the website to work — keeping you signed in and remembering the contents of your cart. We do not use advertising or tracking cookies. You can set your browser to refuse cookies, but parts of the website, including signing in and checkout, will not work if you do.

How long we keep your information

We keep your account and order information for as long as your account is active, and afterwards for as long as we need it to meet our legal and accounting obligations.

Reference photos uploaded with custom cake orders are kept while we prepare your order and for a reasonable period afterwards, in case you would like to order the same design again.

Keeping your information secure

Access to customer information is limited to bakery staff who need it to do their jobs, and each staff member signs in with their own account. Information is transmitted over an encrypted connection, and card details are handled entirely by Stripe and never stored on our systems.

No method of transmitting or storing information online is completely secure, so while we take reasonable steps to protect your information, we cannot guarantee absolute security.

Your rights

Under Canadian privacy law (the Personal Information Protection and Electronic Documents Act, or PIPEDA), you have the right to:

• Ask what personal information we hold about you
• Ask us to correct information that is wrong or incomplete
• Ask us to delete your information, where we are not required to keep it
• Withdraw your consent to our use of your information, though this may mean we can no longer take your orders online

To make any of these requests, contact us using the details below. We may ask you to confirm your identity first.

Children

This website is not intended for children, and we do not knowingly collect personal information from anyone under 13. If you believe a child has given us their information, please contact us and we will delete it.

Changes to this policy

If we change this policy, we will post the updated version on this page and change the date at the top.

Contact us

If you have questions about this policy or about your personal information: