Privacy Policy
Last revised 11 September 2026
At Sweettisserie Cake House, we use your details to look after your cake order and the services you choose to use. This policy explains how we handle personal information when you visit sweettisseriecakehouse.com.au, order from us, contact our shop, or use a customer account and cake rewards. References to accounts and rewards apply when those features are available.
1. Information we collect
Contact and order details: your name, email address, phone number, cakes and quantities ordered, pickup date, payment amount and status, order references, discounts, refunds and collection status. We also keep relevant enquiries, agreed changes and notes needed to prepare or support your order.
Account and rewards details: your account name and verified email, account creation and sign-in records, orders linked to your account, qualifying cake purchases, token balances, rewards used and adjustments following refunds or payment disputes.
Technical and communication records: IP address, browser and device information, request times, security and error records, and email delivery records. These help us operate the website, protect accounts and check whether service messages were sent. Allergy information is addressed separately below.
2. How and why we collect information
We collect information you provide through our website, checkout, phone calls, messages and conversations with the shop. We receive payment confirmations and relevant checkout details from payment providers, delivery results from our email service, and information from someone you authorise to organise or collect your order. Our website and hosting services collect technical records when you use the site.
We use these details to process payments, prepare cakes, arrange pickup, send order updates, answer enquiries, manage accounts and rewards, handle refunds and complaints, prevent misuse, troubleshoot the website and keep necessary business records. We limit what we collect and share to what is reasonably needed for those purposes or another purpose permitted by law.
You can browse our cakes and make a general enquiry without opening an account, and you can ask general questions without identifying yourself. If you choose not to provide details needed for an order or account, we may be unable to complete that service. Guest checkout still requires the contact and payment details needed to fulfil your purchase.
3. Customer accounts and cake rewards
An account is optional. Your first successful email-code sign-in creates your account. We use your email to verify access and store account and session records; our customer account system does not use a password. Keep your email account and sign-in codes private, and sign out on shared devices.
Orders placed while signed in are linked to that account. Eligible paid guest orders already held in this website's ordering system can also appear after you verify the same checkout email. Orders from our previous Shopify store or other channels are not automatically imported. Please use an email you control and tell us if an order appears incorrectly.
We use qualifying purchases, quantities, discounts, refunds and payment disputes to calculate cake tokens and rewards automatically. We keep the transaction history needed to explain and correct those calculations. If you think a balance or adjustment is wrong, contact us for a review. The eligibility and discount rules are in our Terms and Conditions.
4. Allergies and other people's details
If you tell us about an allergy or dietary requirement, we use the relevant information to discuss whether we can meet your request and to handle your order. Information about an identifiable person's health can be sensitive. We seek consent where required, collect only what is necessary, and limit access to the people and services that need it for the order or a related concern. We do not use allergy information for marketing.
If you give us another person's details, such as the name or phone number of someone collecting a cake, make sure you have their permission and let them know about this policy. Please avoid sending unnecessary medical records or personal details about children or other guests.
5. Payments
Stripe handles card and available digital-wallet payments made through our Stripe checkout. Where PayPal is offered and selected, PayPal processes the payment through your PayPal account. We share the cake selection, order reference, pickup information and total needed for that payment, and receive transaction references and payment, refund or dispute status. We keep the pickup contact details you enter for order confirmation and fulfilment. Our cake ordering system does not store your full card number, card security code or PayPal password. Payment providers handle billing, device and fraud-prevention information under their own privacy notices.
Where checkout directs you to Shopify, Shopify and its payment providers handle that checkout. Records from purchases made through our previous Shopify store may also remain with that service. The checkout you use identifies the payment service involved.
6. Who we share information with
Our owner and authorised team members use relevant customer information to prepare orders, arrange collection and provide support. We use Cloudflare to host and protect the website and store its order, account and rewards records. Resend delivers sign-in codes and order emails, which involves processing recipient addresses and message content. Order notifications sent to the shop also contain the contact details needed to fulfil the order.
Stripe, PayPal when selected, or Shopify where that checkout is used, processes the relevant order and payment information. Banks and payment networks receive information needed to complete or investigate payments. Our email and communication services also handle messages sent to or received by the shop.
We share relevant information with professional advisers or authorities when needed for legal, accounting or dispute matters, with a person you authorise to assist with your order, or where disclosure is otherwise required or permitted by law. We do not sell or rent customer personal information.
7. Overseas processing
Some providers process or store information outside Australia. Resend identifies processing in the United States; Stripe identifies international transfers including the United States and India; and Cloudflare identifies storage primarily in the United States and European Economic Area. PayPal identifies processing in the United States and other countries through its global operations and service providers. Where Shopify is involved, its arrangements include Singapore, Canada and the United States.
Other locations can be involved in these providers' global operations, support and service arrangements, so it is not practicable to list every possible country here. Their privacy notices linked above give further details. We consider privacy protections when using service providers and take steps required by applicable Australian law for overseas disclosures. You can contact us with questions about a particular service.
8. Cookies and browser storage
Our website uses cookies to keep you signed in and recognise an order confirmation. Browser storage remembers your cart and pickup selection in that browser session. Hosting and payment services also process technical information for operation and security, and their own services can use cookies as explained in their notices.
You can clear or block cookies and browser storage in your browser settings, although this can interrupt sign-in, your cart or access to an order confirmation. Clearing a browser does not delete records held by the shop. Links to Google Maps, Facebook and Instagram take you to services with their own privacy practices; avoid sharing private order details in public comments.
9. Order messages and marketing
We use your contact details for sign-in codes, order confirmations, pickup updates, refunds, support and important account or service notices. Creating an account, placing an order or earning cake tokens does not automatically subscribe you to marketing.
If we offer promotional emails or messages, we will seek appropriate consent and provide a way to unsubscribe. You can also contact us to stop promotional messages. Opting out of marketing does not prevent essential messages about an order or account you are using.
10. Keeping information secure
Website records are held electronically with our hosting and service providers. We protect customer account and order access with encrypted website connections, email verification, restricted administrative access and security controls against repeated sign-in attempts. We limit access to customer information to people who need it for their work and take reasonable steps to protect any related shop records.
No online service is completely risk-free. If we identify a personal information breach, we will assess and contain it, take appropriate remedial action, and notify affected people and regulators where required by law. Contact us promptly if you suspect someone has accessed your account without permission.
11. How long we keep information
We keep information for as long as reasonably needed for the purpose it was collected, including ongoing accounts and rewards, fulfilling orders, resolving disputes, preventing fraud and meeting record-keeping obligations. Different records have different needs, so we do not apply one deletion period to every type of information.
When information is no longer needed and we are not required to keep it, we take reasonable steps to delete it securely or remove identifying details. Signing out, a sign-in code expiring or a session ending does not automatically erase your order or account history. Some transaction and communication records may need to remain after an account is closed.
12. Access, correction and account closure
You can ask us for access to the personal information we hold about you, request a correction, or ask to close your account and delete information we no longer need. My account shows available order history and rewards; contact the shop for other requests. The shop handles account closure and wider data requests directly.
We may ask for enough information to verify your identity or your authority to act for someone else before disclosing or changing records. Tell us what you need and how we can reply. Do not send your full card details or a sign-in code. We aim to respond within 30 days and will explain if more time is needed.
If we cannot provide access, make a requested correction or remove a record, we will explain why and how you can raise a concern, subject to any legal restriction. Closing an account does not cancel a cake order or remove records we must retain. We will explain any effect on unused rewards before completing closure, in line with our Terms and Conditions.
13. Contact and privacy complaints
For a privacy question, request or complaint, please contact the owner using the details below. You can also ask for a free copy of this policy or assistance accessing it in another format.
Sweettisserie Cake House Attention: Owner — Privacy Phone: 0434 483 486 Shop 1 & 2 / 838-842 Old Princes Highway Sutherland NSW 2232, Australia
Please describe what happened and the outcome you would like. We will acknowledge your complaint, investigate it and aim to provide a response within 30 days. If we need more time, we will explain the reason and keep you informed. If you remain dissatisfied, you can contact the Office of the Australian Information Commissioner (OAIC) for guidance or to make a complaint where the matter falls within its jurisdiction. Nothing in this policy limits your rights under applicable privacy law.
14. Changes to this policy
We will update this policy as our services or information practices change and show the revision date above. For a material change affecting existing customers, we will provide an appropriate notice, such as on the website or by email. We will seek any consent required for a new use of your information; publishing an update is not a substitute for that consent.