Your data is not an ingredient
Privacy
Privacy is not a topping we add for marketing. We collect what we need to make your cake and manage your booking, keep it on infrastructure we control where practical, and never sell or profile you.
1. Collect less
The safest personal information is the information nobody collected. We ask for details needed to respond to you, fulfil an order, take payment, prevent abuse, and meet legal obligations. Surveillance capitalism is someone else's business model. We sell cake.
2. This website has no analytics
This is a static website with no analytics software, advertising cookies, tracking pixels, or third-party advertising trackers. Our server keeps ordinary technical logs needed for security and reliability. Booking pages load our booking widget from book.tldr-btc.com only when you visit those pages.
3. What we collect
Orders and calls: your name, email address, chosen time, order details, and information you choose to add, such as allergy requirements or design notes.
Email: if you contact us, we receive your email address, message, and any details you include. We use them to respond and manage your enquiry.
Payment records: we receive payment status, amount, and limited transaction details needed for receipts, refunds, tax, and accounting.
4. Booking and video infrastructure
Bookings run on our self-hosted Cal.diy system at book.tldr-btc.com. Consult calls use our self-hosted Jitsi service at meet.sophiascakes.com. Your call link and booking details stay on infrastructure we operate rather than a hosted scheduling or meeting provider.
Jitsi may temporarily process network addresses, media streams, and connection metadata to operate a call. We do not record consult calls unless everyone involved has clearly agreed first.
5. Stripe processes card payments
Paid cake orders use Stripe. Your full card details go directly to Stripe and are never stored by this website or our booking system. Stripe processes information under its own privacy policy and may act as an independent controller for fraud prevention, compliance, and payment services.
6. What we never do
We do not sell or rent personal information, build advertising profiles, broker audiences, or share your details for third-party marketing. Service providers receive only what they need to perform their function for us.
7. Retention and security
We keep enquiry and booking information only as long as needed for the order, support, security, and applicable accounting or legal obligations. No internet system is perfectly secure, but we use access controls, encrypted connections, updates, and data minimisation to reduce risk.
8. Your choices
You can ask to access or correct personal information we hold about you, or ask us to delete it where we are not required to keep it. Email hello@sophiascakes.com. We will respond as a person, not as a privacy-themed ticket maze.
9. Legal framework
We handle personal information in line with applicable Australian privacy law. Nothing in this policy limits rights you have under that law.
10. Changes and contact
If this policy changes, the current version will be posted here with its update date. Privacy questions or requests: hello@sophiascakes.com. See also our Terms.