Privacy Policy
Effective: 6 September 2026
This policy explains how Two Sisters Home Bakery (“we”, “us”, or “the bakery”) handles personal information when you browse this website or send an order request.
Information we collect
When you send an order request, we may collect your name, mobile number, optional email address, cake selection, occasion, budget, weight or size, flavour, egg preference, required date and time, pickup or delivery choice, delivery address, cake message, instructions, allergy information you choose to provide, and an optional reference image.
Our hosting and database providers may also process limited technical information such as IP address, device/browser details, timestamps and security logs to deliver and protect the service.
Why we use it
- To receive, review and respond to your cake request.
- To confirm availability, pricing, design, pickup or delivery details.
- To prepare and fulfil an accepted order.
- To prevent misuse, maintain security and meet applicable record-keeping obligations.
Your consent and choices
By selecting the consent checkbox and submitting an order request, you consent to the processing described above for that request. You may withdraw consent or ask for access, correction or deletion by contacting the bakery using the contact details shown on the website. Withdrawal does not affect processing already lawfully completed or information we must retain under applicable law.
Storage and service providers
Order data and reference images are stored using Supabase. This website is hosted and protected by Cloudflare. These providers process data to supply hosting, database, storage and security services and may process information in locations outside your state or country under their own safeguards.
Sharing and selling
We do not sell your personal information and do not use it for third-party advertising. We share it only with service providers needed to run the website, with people needed to fulfil your request, when you ask us to, or when required by law.
Retention
We keep order information only for as long as reasonably needed to respond, fulfil the order, resolve questions and meet legal or accounting requirements. Information that is no longer needed should be deleted or anonymised.
Cookies and browser storage
We do not use advertising or analytics cookies. The site uses essential browser storage to remember your cookie choice. The secure admin area uses a temporary in-memory authentication session and requires the password again after a page refresh.
Security
We use HTTPS, restricted administrator access, database row-level security, private storage for customer reference images and validation controls. No online system can promise absolute security, so please avoid including unnecessary sensitive information in your order instructions.
Children
Order requests should be submitted by an adult or with the involvement of a parent or legal guardian. Please do not submit a child’s personal information unless it is necessary for the order and you are authorised to provide it.
Contact and grievances
For privacy questions, complaints, access, correction, deletion or consent withdrawal requests, contact Two Sisters Home Bakery using the current contact details displayed on the website. We will review and respond within a reasonable period.
Changes to this policy
We may update this policy when our services or legal obligations change. The effective date at the top identifies the latest version.
Important: Sending an order request does not confirm an order. The bakery will contact you to confirm availability, final price and fulfilment details.