Privacy Policy

Pugs & Petals Cakes is a small Townsville cake business. I only collect what I need to quote, bake and deliver your cake, and I only send marketing if you say yes.

What I collect

Your name, mobile number and email address.
Event details: the date, occasion, number of guests, suburb or venue.
Cake details and any inspiration photos you upload.
Allergy and dietary information. This is health information, so I handle it with extra care and only use it to make your cake safely.
Birthday or reminder dates (day and month only), if you choose to give them.
Your marketing preferences, and when and how you gave them.
How you found the site (for example, which ad or post you clicked), so I know what’s working.

Why I collect it

To reply to your enquiry and send you a quote.
To make, deliver and follow up on your cake, and send you messages about your order.
To send reminders, menus and news, but only if you have said yes.
To understand which posts, ads and pages bring people to the site.

Who I share it with

I use a few trusted services to run the business. They only get what they need to do their job:

Vercel (website hosting, file storage for uploaded photos, and visitor statistics) and Neon (the database that stores enquiries and sign-ups).
Resend (sending order emails such as your enquiry confirmation).
Brevo (marketing emails, only if you opted in).
Square (invoices and card payments).
Meta (Facebook and Instagram: the Meta Pixel and Conversions API measure whether ads lead to enquiries) and Google (Google Analytics measures visits).
An SMS provider, if I start sending text reminders.

Some of these services store data overseas, including in the United States. I never sell your details.

Cookies and tracking

This site uses cookies and similar tools to measure visits and ads. These include the Meta Pixel, Google Analytics and Vercel Web Analytics. They help me see which pages are useful and whether ads work. They don’t tell me who you are by name.

You can block or clear cookies in your browser settings, and change how ads are shown to you in your Facebook ad preferences and Google ad settings. Google also offers a browser add-on to opt out of Analytics.

Marketing

I only send marketing emails or texts if you tick the box to say yes. Every email has an unsubscribe link, and I act on unsubscribes within 5 working days. Texts include “Reply STOP to opt out”. Order messages (like your quote or a pick-up reminder) aren’t marketing, so you’ll still get those.

Photos

I only post photos of your cake if you say yes. I never show faces or tag you without asking, and never show children’s faces without a parent’s express permission.

Keeping it safe, and for how long

Your details are stored with the services above, behind passwords, and only I can see them. I keep enquiries and order details for as long as I need them to look after your order and any follow-up. Financial records are kept for 5 years, as the ATO requires. Inspiration photos and allergy notes are deleted when they’re no longer needed. [Owner to confirm how long enquiries are kept, e.g. 2 years]

Seeing or correcting your details

You can ask what I hold about you, ask me to fix it, or ask me to delete it (unless I have to keep it by law, like tax records). Just email me.

A note on the law

Most small businesses like mine are currently exempt from the Privacy Act, but the statutory tort for serious invasions of privacy and the Spam Act still apply. I follow this policy anyway because it’s the right thing to do.

Contact

Privacy questions or requests: [EMAIL] or [PHONE]. Pugs & Petals Cakes, ABN [ABN], Townsville QLD.