Privacy Policy
Last updated September 25, 2026 · This is a template under legal review and may change before public launch.
What we collect
Customers: name, mobile number, optional email, order details, pickup selections, and notes to the chef — collected at guest checkout to fulfil your order. Payment card details go directly to Stripe; OurCakewalk never sees or stores them.
Chefs: account email, business details, and Stripe account identifiers for payouts.
Subscribers & waitlists: if you subscribe to a chef or join a waitlist — for a sold-out item, or for OurCakewalk in your city — we collect your phone number or email and a record of your consent.
Automatically: like most websites, our servers and hosting provider log IP addresses, device and browser type, and pages visited, and we use privacy-respecting analytics to understand overall usage.
How we use it
To process orders and payments, send transactional messages (order confirmations, pickup reminders, lookup codes), operate chef storefronts and prep tools, prevent fraud, and improve the service. Marketing texts are sent only to people who gave express consent, and every one includes a STOP opt-out (CASL). We record when, how, and from where consent was given, and keep those records at least three years, as Canadian law expects.
Who we share it with
Service providers who run the platform on our behalf: Stripe (payments), Twilio (text messages), Resend (email), Supabase (database and storage), and Vercel (hosting and analytics). Chefs see the order details customers submit to them (name, phone, items, notes) so they can fulfil orders. Our own staff can access account and order data when needed to support chefs and keep the service running. If OurCakewalk is ever sold or merged, personal information may transfer with the business under the same protections. We do not sell personal information.
Where it lives & how long
Data is stored with our providers, which may process it outside Canada (including the United States). Order and consent records are retained as required for tax, dispute, and anti-spam law purposes; we delete or anonymize data when it is no longer needed.
Your choices & rights
Reply STOP to any text to stop marketing messages. You may request access to, correction of, or deletion of your personal information (some records, like consent logs and tax records, must be retained for legal periods). Contact hello@ourcakewalk.com — we respond within 30 days. If you are unsatisfied, you may contact the Office of the Privacy Commissioner of Canada.
Cookies
We use a small number of functional cookies: your anonymous cart, chef sign-in sessions, and privacy-respecting analytics. No advertising trackers.
Children
The service is intended for adults. We do not knowingly collect personal information from children; if you believe a child has provided us personal information, contact us and we will delete it.
Changes to this policy
When this policy changes, we update the date at the top; if a change is material, we will post a clear notice on this page.