Privacy Policy
Custom Cakes by Giselle LLC
Privacy Policy
Effective Date: September 14, 2026
Last Updated: September 14, 2026
Queens, NY | [email protected]
1. Introduction / About This Policy
Welcome to Custom Cakes by Giselle LLC! We are a custom cake and baked goods bakery based in Queens, New York, dedicated to bringing your sweetest celebrations to life — one beautifully crafted cake at a time.
This Privacy Policy explains how we collect, use, share, and protect your personal information when you visit our website, place an order, fill out a contact form, or otherwise interact with us online. We want you to feel confident and informed every step of the way — not just about your cake, but about how we handle your information.
We are committed to your privacy. We will never sell your personal information, and we only collect what we genuinely need to serve you well. By using our website or placing an order with us, you agree to the practices described in this policy.
If you ever have questions about this policy, please don't hesitate to reach out to us at [email protected]. We're always happy to help.
2. Information We Collect
Depending on how you interact with our website and services, we may collect the following types of information:
a. Personal Information
When you place an order, create an account, or contact us, you may provide us with personal details such as:
● Your full name
● Email address
● Phone number
● Billing address and/or shipping/delivery address
b. Order and Payment Details
To fulfill your custom cake order, we collect information related to your purchase, including:
● Cake customization details (flavors, design requests, sizing, dietary preferences, delivery dates)
● Order history and special occasion notes
● Transaction information (payment amounts, order confirmation numbers)
Please note: We do not directly store your full credit card numbers or sensitive payment credentials. Payment details are handled securely by our trusted third-party payment processors (see Section 7).
c. Communication Data
When you reach out to us, we may retain information from your messages, including:
● Messages submitted through our website contact form
● Emails sent to our business address
● Direct messages or inquiries sent through social media platforms
d. Technical and Device Data
When you browse our website, certain technical information is collected automatically, including:
● IP address
● Browser type and version
● Device type (desktop, mobile, tablet)
● Operating system
● Pages visited, time spent on pages, and referring URLs
e. Cookies and Tracking Data
Our website uses cookies and similar tracking technologies to recognize you, remember your preferences, and understand how visitors use our site. For full details, please see Section 6 below.
3. How We Collect Your Information
We collect your information in three primary ways:
a. Directly From You
You provide information directly to us when you:
● Place a custom cake order through our online order form
● Submit a question or inquiry via our contact form
● Create an account on our website
● Sign up for our email newsletter or promotions
● Contact us by email or social media
b. Automatically Through Your Browser
When you visit our website, certain data is collected automatically through cookies and analytics tools (such as Google Analytics). This helps us understand how visitors navigate our site so we can improve your experience. You can control these settings through your browser — see Section 6 for more.
c. From Third-Party Payment Processors
When you complete a purchase through our website, your payment is processed by a third-party service such as Shopify, Square, or PayPal. These platforms may share limited transaction-related information with us (such as order confirmation and payment status) in order to fulfill your order and maintain our records. They do not share your full payment details with us.
4. Why We Collect Your Information
We only use your information for legitimate, clear purposes. Here is how we put it to work:
● To process and fulfill your custom cake orders — including coordinating design details, scheduling, and delivery or pickup arrangements.
● To send order confirmations, updates, and receipts — so you always know the status of your order.
● To respond to your questions and provide customer support — whether you reach out by email, contact form, or social media.
● To improve our website and customer experience — by analyzing how visitors use our site, so we can make it more helpful and enjoyable.
● To send marketing emails and special offers — only if you have opted in to receive them. You can unsubscribe at any time.
● To comply with legal and financial obligations — such as maintaining accurate business and tax records as required by law.
5. Legal Basis for Processing Your Information
We want to be transparent about why we are legally permitted to collect and use your data. Our legal bases are as follows:
Legal Basis | How It Applies to Us |
Contract Performance | We need your information to accept and fulfill your cake orders — this is the core of our business relationship with you. |
Legitimate Interests | We process certain data to run our business effectively, prevent fraud, improve our services, and communicate with clients in a meaningful way. |
Consent | For marketing emails and non-essential cookies, we only collect and use your data after you have given us clear permission. You may withdraw that consent at any time. |
Legal Compliance | We are required to retain certain records — such as financial and tax information — to comply with applicable laws and regulations. |
A Note on Jurisdiction This policy is primarily written with New York State residents in mind. However, if you are visiting our website from the European Union, the United Kingdom, or the state of California, additional rights may apply to you under the GDPR, UK GDPR, or CCPA respectively. Please see Section 9 for more details. |
6. Cookies and Tracking Technologies
What Are Cookies?
Cookies are small text files that are stored on your device when you visit a website. They help the site remember information about your visit — like items in your cart or your preferred language — and allow us to understand how our site is being used.
How We Use Cookies
Our website uses the following types of cookies:
Cookie Type | Purpose | Required? |
Essential | Necessary for the website to function properly (e.g., keeping your shopping cart active, enabling secure checkout). | Yes — cannot be disabled |
Functional | Remember your preferences and settings to improve your experience on return visits. | Optional |
Analytics | Help us understand how visitors use our website (pages viewed, time spent, traffic sources) so we can improve it. | Optional |
Marketing | Used to deliver relevant promotions or content. Only activated if you have consented. | Optional |
Google Analytics
We use Google Analytics to help us understand website traffic and user behavior in an anonymized, aggregated way. Google Analytics may collect your IP address (which is anonymized before storage), pages visited, session duration, and device information. This data is used solely to improve our website — it is not used to identify you personally. Google's data practices are governed by their own Privacy Policy, available at google.com/policies/privacy.
How to Manage or Disable Cookies
You can control cookies through your browser settings at any time. Most browsers allow you to block or delete cookies. Please be aware that disabling certain cookies may affect the functionality of our website — for example, your cart may not save properly. You may also opt out of Google Analytics tracking by using the Google Analytics Opt-Out Browser Add-on.
7. Third-Party Services
We work with a small number of trusted third-party platforms to operate our website and process transactions. Each of these services has its own privacy policy and data-handling practices, which we encourage you to review.
Service | Purpose | Data Shared |
Shopify | Our e-commerce platform, used to manage our online store, order forms, and customer accounts. | Name, email, address, order details, payment info (processed securely by Shopify). |
Square | Payment processing for eligible transactions. | Payment details processed directly by Square; we receive confirmation and order amounts only. |
PayPal | Payment processing for clients who prefer PayPal. | Payment details processed directly by PayPal; we receive confirmation and order amounts only. |
Google Analytics | Website traffic and usage analytics. | Anonymized browsing data (IP address, pages visited, session data). |
Our Commitment: We Do Not Sell Your Data Custom Cakes by Giselle LLC does not sell, rent, or trade your personal information to any third party for their own marketing or commercial purposes — ever. Data is shared with third parties only as necessary to operate our business and serve you. |
8. Data Storage and Security
Where Your Data Is Stored
Your data is stored on U.S.-based servers managed by our third-party service providers (Shopify, Square, PayPal, and Google). We do not maintain our own independent servers. Each of these providers employs industry-standard data protection practices.
Security Measures
We take the security of your personal information seriously. The following safeguards are in place:
● Encryption: All data transmitted through our website is protected by SSL/TLS encryption (look for the padlock icon in your browser).
● Secure Payment Processing: Payment information is handled directly by PCI-DSS-compliant processors (Shopify, Square, PayPal). We never store your raw credit card numbers.
● Limited Access: Only authorized personnel with a legitimate need can access customer data.
● Account Security: We recommend using a strong, unique password for any account you create with us.
How Long We Keep Your Data
● Order records: Retained for a minimum of 7 years in accordance with IRS and New York State tax record-keeping requirements.
● Marketing data: Retained until you opt out or request deletion, whichever comes first.
● Contact and inquiry data: Retained for a reasonable period to support customer service, typically no longer than 2 years from your last interaction.
● Analytics data: Retained according to Google Analytics' default retention settings (typically 26 months).
Please Note While we take every reasonable precaution to protect your information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security, but we are committed to doing our very best to keep your data safe. |
9. Your Rights as a Client
You have real rights when it comes to your personal data, and we take them seriously. Here is what you can ask of us:
● Right to Access: You may request a copy of the personal information we hold about you.
● Right to Correct: If any of your information is inaccurate or out of date, you may ask us to correct it.
● Right to Delete ("Right to Be Forgotten"): You may request that we delete your personal data, subject to any legal obligations we have to retain certain records (such as tax and order history).
● Right to Opt Out of Marketing: You can unsubscribe from our marketing emails at any time by clicking the "unsubscribe" link in any email we send, or by emailing us directly.
● Right to Data Portability: Where technically feasible, you may request that we provide your data in a portable format.
New York State Residents — NY SHIELD Act
As a New York-based business, we comply with the New York Stop Hacks and Improve Electronic Data Security (SHIELD) Act. This law requires us to implement reasonable safeguards to protect your private information and to notify you promptly in the event of a data breach involving your information.
California Residents — CCPA
If you are a California resident visiting our site, you may have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal data we collect, the right to request deletion, and the right to opt out of the sale of your data. As noted above, we do not sell personal data. To exercise your CCPA rights, please contact us at [email protected].
10. How to Request Data Changes or Deletion
Exercising your privacy rights is simple. Here is how to reach us:
1. Send us an email at [email protected] with the subject line: "Privacy Request."
2. Describe your request — for example, whether you'd like to access, correct, or delete your data.
3. We will respond within 30 days of receiving your request. In some cases, we may need a bit more time, but we will let you know if that happens.
4. Identity verification may be required. To protect your privacy and prevent unauthorized access to your data, we may ask you to verify your identity before we can fulfill your request (for example, by confirming the email address or order details associated with your account).
Please note that certain information may be exempt from deletion requests where we are legally required to retain it — for example, order history needed for tax reporting purposes.
11. Children's Privacy
Our website and services are intended for use by adults. We do not knowingly collect personal information from children under the age of 13.
If you believe that a child under 13 has provided us with personal information without parental consent, please contact us immediately at [email protected] and we will promptly delete that information from our records.
We encourage parents and guardians to monitor their children's internet activity and help enforce this policy.
12. Links to Other Websites
Our website may contain links to third-party websites — for example, our social media pages, payment processors, or other resources we think you might find helpful. These links are provided for your convenience.
Once you leave our website, this Privacy Policy no longer applies. We are not responsible for the privacy practices or content of any third-party websites. We encourage you to review the privacy policies of any external sites you visit.
13. Updates to This Policy
From time to time, we may update this Privacy Policy to reflect changes in our business practices, legal requirements, or the services we use. When we do, we will update the Effective Date at the top of this document.
We encourage you to review this policy periodically to stay informed about how we are protecting your information. If we make any significant changes that affect your rights, we will make a reasonable effort to notify you — for example, by sending an email to the address on file or by posting a notice on our website.
Your continued use of our website after any changes to this policy are posted constitutes your acceptance of the updated terms.
14. Contact Us
We are a small, family-run business and we truly value your trust. If you have any questions, concerns, or requests related to this Privacy Policy or how we handle your personal information, please don't hesitate to get in touch. We are here to help.
Custom Cakes by Giselle LLC
Queens, New York
Email: [email protected]
Privacy Request Subject Line: "Privacy Request"
Response Time: Within 30 days of receipt
Thank you for trusting Custom Cakes by Giselle LLC with your celebrations — and with your personal information. We are honored to be a part of your special moments.
This Privacy Policy is effective as of September 14, 2026. Custom Cakes by Giselle LLC | Queens, NY | [email protected]