Privacy Policy

Privacy Policy – Bouncy Bakes Effective Date: January 6, 2026

Introduction

Welcome to Bouncy Bakes (“we”, “us”, “our”). This Privacy Policy explains how we collect, use, disclose, and protect the personal information you provide when you visit our website (bouncybakes.com) or interact with us through any of our services (e.g. ordering cakes, submitting contact‑form inquiries, or signing up for newsletters). By using our site or services, you consent to the practices described herein. If you do not agree with any part of this policy, please do not use the site.

Information We Collect

Analytics Data

Automatically gathered to understand how visitors use the site and improve performance. IP address, browser type, device type, pages visited, timestamps, referral URLs.

Contact Form Submissions

Information you voluntarily provide when you send us a message. Name, email address, phone number, message content.

Order & Payment Information

Data required to process purchases and fulfill orders. Billing/shipping address, email, phone, order details, transaction ID.

Newsletter & Updates Subscriptions

Optional data you provide when opting in to receive marketing communications, email address, preferences for frequency/content.

We only collect the data that is necessary for the purpose described in each section below.

How We Use Your Information

Provide & Fulfill Services

Process orders, arrange deliveries/pick‑ups, and communicate order status. Share necessary payment details with our third‑party payment processor (e.g. Stripe, PayPal) solely to complete transactions.

Communications

Respond to inquiries submitted via the contact form. Send order confirmations, receipts, and transactional updates.

Marketing & Newsletter (if you opt‑in)

Distribute newsletters, promotional offers, and product updates. Manage subscription preferences and allow you to unsubscribe at any time.

Analytics & Site Improvement

Analyse visitor behaviour to enhance site navigation, performance, and overall user experience. Aggregate data for statistical reporting; individual identifiers are removed wherever possible.

Legal & Safety Obligations

Comply with applicable laws, regulations, and legitimate business interests (e.g. fraud prevention, dispute resolution).

Sharing & Disclosure

Payment Processor

Process payments securely. PCI‑DSS compliant contracts; only minimal transaction data shared.

Service Providers (hosting, email delivery, analytics)

Operate and maintain the website, send emails, analyse traffic. Data Processing Agreements (DPAs) ensuring GDPR/CCPA‑level protection.

Legal Authorities

Respond to lawful requests, protect rights, prevent fraud.Disclosure only when legally required or to protect vital interests.

Aggregated/Anonymized Data

Internal reporting, market research. Personal identifiers removed; data presented in summary form.

We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

Cookies & Tracking Technologies

Essential Cookies

Required for core site functionality (e.g., session management, cart persistence).

Analytics Cookies

Used by Google Analytics (or similar) to collect usage metrics. You may disable these via your browser settings or through the Google Analytics Opt‑Out Browser Add‑on.

Marketing Cookies

Set when you subscribe to newsletters; enable us to track email engagement.

You can manage cookie preferences through your browser or by adjusting settings in any email you receive from us.

Data Retention

Order & Payment Data

Retained for 7 years to satisfy tax, accounting, and legal obligations.

Contact‑Form Messages

Stored for 2 years unless a longer period is required for dispute resolution.

Newsletter Subscribers

Retained until you unsubscribe or request deletion.

Analytics Data

Kept in aggregated form for up to 24 months; raw logs are purged after 90 days.

Your Rights

Depending on your jurisdiction (e.g. GDPR, CCPA), you may have the following rights:

Access

Request a copy of the personal data we hold about you.

Rectification

Request correction of inaccurate or incomplete data.

Erasure (“Right to be Forgotten”)

Request deletion of your personal data, subject to legal exceptions.

Restriction

Request limitation of processing in certain circumstances.

Data Portability

Receive your data in a structured, commonly used format.

Object

Object to processing for direct marketing or legitimate‑interest purposes.

To exercise any of these rights, please contact us at allison@bouncybakes.com. We will respond within 30 days as required by law.

Security

We implement reasonable administrative, technical, and physical safeguards to protect your data against unauthorized access, alteration, disclosure, or destruction. While no method is 100 % foolproof, we regularly review and update our security measures.

International Transfers

If you are outside the United States or European Economic Area, your data may be transferred to servers located in those regions. We rely on standard contractual clauses and other lawful mechanisms to ensure an adequate level of protection.

Children’s Privacy

Our services are not directed at children under 13 years of age. We do not knowingly collect personal information from children. If we become aware of such collection, we will promptly delete the data.

Changes to This Privacy Policy

We may update this policy from time to time. Any material changes will be posted on this page with a new “Effective Date”. Continued use of the site after revisions indicates acceptance of the updated terms.

Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy, please reach out to: Email: allison@bouncybakes.com