BECAUSE THE WORLD NEEDS MORE CHEESECAKE
privacy policy
cherryontopcheesecakes.ca
Last Updated: June 8, 2025
Welcome to Cherry on Top Cheesecakes (“we,” “our,” or “us”). We are committed to protecting your personal information in accordance with Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit cherryontopcheesecakes.ca (the “Site”), place an order, or otherwise interact with us.
Please read this policy carefully. If you disagree with its terms, please discontinue use of our Site.
1. Information We Collect
We may collect the following types of personal information:
Information You Provide:
• Name, email address, phone number, and mailing or delivery address
• Billing information (payment card details are processed securely by our third-party payment provider and are not stored on our servers)
• Order details, custom cake specifications, and dietary or allergy requirements
• Messages or inquiries submitted through our contact form or by email
Information Collected Automatically:
• IP address, browser type, and device information
• Pages visited, time spent on pages, and referring URLs
• Cookies and similar tracking technologies (see Section 5)
2. How We Use Your Information
We collect and use personal information only for purposes that a reasonable person would consider appropriate in the circumstances, including:
• Processing and fulfilling your orders, including custom cheesecake requests
• Communicating with you about your order status, delivery, or pickup arrangements
• Responding to customer service inquiries and support requests
• Sending promotional emails, newsletters, or seasonal offers — only with your express or implied consent as required by Canada’s Anti-Spam Legislation (CASL)
• Improving our website, products, and overall customer experience
• Complying with applicable legal and regulatory obligations
• Detecting and preventing fraudulent transactions
3. Consent
We obtain your consent before or at the time of collecting personal information, except where the law permits us to collect information without consent. You may withdraw your consent at any time, subject to legal or contractual restrictions, by contacting us as described in Section 9. Note that withdrawing consent may affect our ability to provide certain services.
For commercial electronic messages (e.g., marketing emails), we comply with CASL and will only send such messages with your express or implied consent. Every marketing email includes an unsubscribe mechanism.
4. Sharing Your Information
We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following limited circumstances:
• Service Providers: Trusted third parties (e.g., payment processors, delivery services, email marketing platforms) who assist us in operating our business. These parties are bound by confidentiality obligations and may only use your data to perform services on our behalf.
• Legal Requirements: Where required or permitted by law, court order, or governmental authority, including under PIPEDA’s lawful disclosure provisions.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred to a successor entity, subject to the same privacy protections.
5. Cookies & Tracking Technologies
Our Site uses cookies and similar technologies to enhance your browsing experience. Cookies are small data files stored on your device. We use:
• Essential Cookies: Required for the Site to function properly (e.g., shopping cart, session management)
• Analytics Cookies: Help us understand how visitors use our Site (e.g., Google Analytics)
• Marketing Cookies: Used to deliver relevant promotions, only where you have provided consent
You can control or disable cookies through your browser settings. Disabling certain cookies may limit the functionality of our Site.
6. Data Retention
We retain personal information only as long as necessary to fulfill the purposes for which it was collected, or as required by law. Order and financial records are typically retained for a minimum of seven (7) years to comply with Canadian tax and accounting requirements. When personal information is no longer required, we securely destroy or anonymize it.
7. Your Privacy Rights
Under PIPEDA, you have the right to:
• Access: Request access to the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete personal information
• Withdrawal of Consent: Withdraw consent to the collection, use, or disclosure of your information at any time (subject to legal restrictions)
• To exercise any of these rights, please contact our Privacy Officer using the information in Section 9. We will respond to requests within 30 days, as required by PIPEDA.
8. Data Security
We implement industry-standard safeguards to protect your personal information against unauthorized access, use, disclosure, or destruction. These include SSL/TLS encryption for data in transit and secure, access-controlled servers. However, no method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.
9. Contact Our Privacy Officer
If you have questions, concerns, or requests relating to this Privacy Policy or our privacy practices, please contact our designated Privacy Officer:
Cherry on Top Cheesecakes — Privacy Officer
Website: cherryontopcheesecakes.ca
Email: cherryontopcheesecakes@gmail.com
Address: 184 Marina Blvd, Unit 17, Peterborough, Ontario, K9H 6M9
10. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. Updated versions will be posted on this page with a revised “Last Updated” date. We encourage you to review this policy periodically. Continued use of our Site after changes are posted constitutes your acceptance of the updated policy.