Privacy Policy

When you place an order: your full name, phone number, email address (optional), pickup or delivery choice, preferred date and time, delivery address (only if you choose delivery), any notes you add, the items you order, prices, any promo code, and how you plan to pay.

We never collect credit card or bank details. e-Transfers are handled by your own bank, and cash is paid in person.

When you send feedback: your message, plus your name and email only if you choose to give them.

Automatically: the companies that host our website keep standard technical logs (such as IP address and browser type) to keep the site running and secure. Your shopping cart is saved only in your own browser until you place an order. We do not use advertising or tracking cookies, and we do not use analytics tools to follow you around the web.

• To review, prepare and hand over your order.
• To contact you about your order — confirming it, sending your invoice, or arranging changes.
• To keep business and tax records, as the law requires.
• To read and reply to your feedback.
• To protect the website from fraud and spam.

We will not use your information for marketing or newsletters unless you clearly ask us to. By placing an order or sending feedback, you consent to these uses.

We do not sell, rent or trade your information. We share it only with the services that run our website, and only so they can do that job:

• Supabase — stores our orders and feedback. Your data is stored in Canada (Canada Central region).
• Netlify — hosts our website. When you place an order, your details pass through their servers in the United States on the way to our database.
• Cloudflare — manages our web address and forwards emails sent to our domain.
• Resend — if enabled, emails us a copy of feedback you send (based in the United States).

Because some of these services operate in the United States, your information may be subject to the laws of that country while it is processed there. We may also share information if required by law.

• Order records: up to 6 years, because the Canada Revenue Agency requires businesses to keep records for that long.
• Feedback: up to 2 years, or sooner if you ask us to delete it.

After that, we delete it.

• Our website uses a secure, encrypted connection (HTTPS).
• Only the bakery owners can view orders, using a password-protected account.
• Your order page uses a private link that can't be guessed. Please don't share your order link publicly.

You can ask us at any time to:

• see the personal information we hold about you,
• correct anything that's wrong,
• delete your information (we may need to keep basic order records for tax purposes, but we'll remove everything else), or
• withdraw your consent for anything optional.

Email us at somethingbakedt@gmail.com and we'll reply within 30 days. If you're not satisfied with our answer, you can contact the Office of the Privacy Commissioner of Canada.

The bakery owners are responsible for privacy at Something Bakedt. Questions? Email somethingbakedt@gmail.com.

If we change how we handle your information, we'll update this page and the date at the top. See also our Terms of Sale.