Privacy Policy

Last Updated: August 31, 2025

At Small Batch Bakery, we are committed to protecting the privacy and security of your personal information. This Privacy Policy outlines the types of personal information we collect, how we use it, and the steps we take to ensure its protection. By submitting your information through our website, you consent to the practices described in this policy.

1. Collection of Personal Information

We collect personal information from customers when they fill out a form on our website to request a price quote for custom catering orders. The personal information collected may include:

• Name (An alias is sufficient. However, since people may opt to supply their legal name, we treat all names with the consideration that they may be personal information)
• Contact Information (Email address)
• Delivery Address (if and only if delivery is requested)
• Description of the Order (which may include personal information if required by the nature of the order (eg a birthday cake with name))

The personal information collected is necessary for fulfilling your request and communicating with you regarding your order. By submitting your information, you consent to its collection and use for these purposes.

2. Use of Personal Information

We use the personal information collected to:

• Provide you with a quote for your custom catering order.
• Communicate with you about your order and any further details required.
• Retain basic details for potential repeat orders or to resolve any disputes that may arise regarding your order.

We will not use your personal information for any other purpose without your consent.

3. Disclosure of Personal Information to Third Parties

We do not disclose personal information to third parties except in the following circumstances:

• Service Providers: We use Gmail for email hosting and Cloudflare for domain and security services. These third parties may have access to certain data in the course of providing their services.
• Legal Compliance: We may disclose personal information if required to comply with legal obligations, such as responding to lawful requests under PIPEDA or other applicable Canadian laws.

4. Retention of Personal Information

We retain personal information only as long as necessary to fulfill the purposes for which it was collected. Specifically:

• Personal information related to orders will be retained for 18 months from the date of submission to accommodate repeat orders or address potential inquiries.

We may retain financial records or transactional data, such as receipts or invoices, for up to six years for tax and audit purposes, but these records will not contain personal information unless required.

5. Protection of Personal Information

We take several measures to protect the personal information we collect:

• Data Encryption: All personal information submitted through our website is transmitted securely using HTTPS, and we encrypt the fields containing personal information in our database.
• Access Control: Only the bakery owner and the website administrator have access to personal information. Access to the database is restricted to authorized personnel only.
• Physical Security: The server is located in a secure private environment, and access to it is limited to authorized individuals.
• Incident Response: In the event of a data breach, we will assess the situation to determine if there is a real risk of significant harm. If necessary, we will notify affected individuals and the Office of the Privacy Commissioner (OPC).

6. Access to Personal Information

You have the right to request access to the personal information we hold about you. To request a copy, correction, or deletion of your personal information, please contact us using the details provided below. We will respond to your request within 30 days.

Fees for Access: Accessing your personal information is free unless the request is excessive or complex, in which case a reasonable fee may apply. You will be informed of any fees before proceeding.

7. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal obligations. When material changes are made, we will update the "Last Updated" date at the top of this page and notify users as necessary.

We encourage you to review this policy periodically to stay informed about how we protect your personal information.

8. Contact Information

If you have any questions or concerns about this Privacy Policy or how we handle your personal information, please contact us at:

• Email: [email protected]

We will respond to your inquiries as quickly as possible and address any concerns you may have regarding your privacy.