Privacy Policy

Last updated July 15, 2026 · This is a template under legal review and may change before public launch.

What we collect

Customers: name, mobile number, optional email, order details, pickup selections, and notes to the chef — collected at guest checkout to fulfil your order. Payment card details go directly to Stripe; OurCakewalk never sees or stores them.
Chefs: account email, business details, and Stripe account identifiers for payouts.

How we use it

To process orders and payments, send transactional messages (order confirmations, pickup reminders, lookup codes), operate chef storefronts and prep tools, prevent fraud, and improve the service. Marketing texts are sent only to people who gave express consent, and every one includes a STOP opt-out (CASL). We record when, how, and from where consent was given, and keep those records at least three years, as Canadian law expects.

Who we share it with

Service providers who run the platform on our behalf: Stripe (payments), Twilio (text messages), Resend (email), Supabase (database and storage), and Vercel (hosting and analytics). Chefs see the order details customers submit to them (name, phone, items, notes) so they can fulfil orders. We do not sell personal information.

Where it lives & how long

Data is stored with our providers, which may process it outside Canada (including the United States). Order and consent records are retained as required for tax, dispute, and anti-spam law purposes; we delete or anonymize data when it is no longer needed.

Your choices & rights

Reply STOP to any text to stop marketing messages. You may request access to, correction of, or deletion of your personal information (some records, like consent logs and tax records, must be retained for legal periods). Contact hello@ourcakewalk.com — we respond within 30 days. If you are unsatisfied, you may contact the Office of the Privacy Commissioner of Canada.

Cookies

We use a small number of functional cookies: your anonymous cart, chef sign-in sessions, and privacy-respecting analytics. No advertising trackers.