Privacy Policy

Effective Date: 5 October 2024
Website: wilmariscakesbakes.com
Business Name: Wilmari’s Cakes and Bakes
Email: wilmari.cakes@gmail.com
Address: 27 El Dorado Crescent, Brackenfell, South Africa

Wilmari’s Cakes and Bakes (“we,” “our,” or “us”) is committed to protecting your personal data and respecting your privacy. This Privacy Policy outlines how we collect, use, and protect the personal information of individuals visiting or using our website, wilmariscakesbakes.com. It explains your rights regarding the personal data we collect and how you can exercise them in accordance with the General Data Protection Regulation (GDPR).

1. Data Controller

Wilmari’s Cakes and Bakes is the Data Controller responsible for the processing of personal data collected via wilmariscakesbakes.com. If you have any questions or concerns about how your personal data is handled, please contact us at:

2. Information We Collect

We collect and process the following categories of personal data:

2.1. Personal Data You Provide Voluntarily

When you use our services or interact with our website, we may collect the following personal information directly from you:

  • Name
  • Email Address
  • Phone Number
  • Postal Address (for order fulfillment and billing purposes)
  • Payment Information (credit card or other payment details)
  • Details of your orders (e.g., cakes, cookies, decorating services, etc)
  • Messages, feedback, or other information you provide through contact forms, emails, or inquiries.

2.2. Automatically Collected Information

When you visit our website, we automatically collect the following data:

  • IP Address
  • Device information (e.g., browser type, operating system)
  • Usage data (e.g., pages visited, time spent on the website)
  • Cookies and similar tracking technologies (see our Cookie Policy for more details).

3. How We Use Your Data

We use the personal data collected for the following purposes:

  • Order Fulfillment: To process and deliver your orders for cakes, cookies, and decorating services.
  • Communication: To respond to your inquiries, provide customer support, and communicate updates related to your orders.
  • Marketing: To send promotional emails or newsletters (only if you have opted in to receive such communications).
  • Personalization: To improve your experience on our website by tailoring content and offers based on your preferences.
  • Legal Obligations: To comply with our legal obligations, such as tax and accounting requirements.

Legal Bases for Processing

Under the GDPR, we rely on the following legal bases to process your personal data:

  • Contractual Necessity: To fulfill the contract when you place an order.
  • Consent: For marketing communications, where you have given your explicit consent.
  • Legitimate Interests: To improve our website, prevent fraud, and provide relevant content.
  • Legal Compliance: To fulfill our legal and regulatory obligations.

4. How We Store and Secure Your Data

We are committed to ensuring the security of your personal data. We take appropriate technical and organizational measures to protect your information from unauthorized access, disclosure, or loss, including:

  • Data Encryption: Payment information is processed securely using encryption.
  • Access Controls: Access to personal data is restricted to authorized personnel only.
  • Secure Hosting: Our website is hosted on secure servers to prevent breaches.

Your data is stored only as long as necessary for the purposes outlined in this policy, or as required by law (e.g., for accounting purposes). When your data is no longer needed, we securely delete or anonymize it.

5. Sharing Your Data

We will not sell or rent your personal data. However, we may share your personal data in the following circumstances:

5.1. Service Providers

We may share your personal information with trusted third-party service providers that assist us in providing our services, such as:

  • Payment processors for handling payments securely.
  • Delivery companies to fulfill orders.
  • IT service providers to maintain and improve our website.

These third parties are bound by confidentiality agreements and are not permitted to use your data for any purpose other than fulfilling their specific obligations.

5.2. Legal Compliance

We may disclose your personal data if required to do so by law, court order, or legal process, or if necessary to protect our rights, property, or the safety of our customers.

5.3. Business Transfers

If our business undergoes a merger, acquisition, or sale, your data may be transferred as part of that transaction, but it will remain subject to the commitments made in this Privacy Policy.

6. Your Rights

Under the GDPR, you have certain rights regarding your personal data. You can exercise these rights by contacting us at wilmari.cakes@gmail.com. These rights include:

6.1. Right to Access

You have the right to request access to the personal data we hold about you and to receive a copy of that data.

6.2. Right to Rectification

You have the right to request the correction of inaccurate or incomplete data.

6.3. Right to Erasure (Right to Be Forgotten)

You can request that we delete your personal data in certain circumstances, such as when it is no longer needed for the purposes for which it was collected.

6.4. Right to Restrict Processing

You have the right to request the restriction of the processing of your personal data under certain conditions (e.g., if you contest the accuracy of the data).

6.5. Right to Data Portability

You can request your data in a structured, commonly used, and machine-readable format to be transferred to another data controller.

6.6. Right to Object

You have the right to object to the processing of your personal data for direct marketing purposes or on grounds relating to your particular situation.

6.7. Right to Withdraw Consent

Where you have given your consent for specific processing activities (e.g., marketing), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of the processing carried out before the withdrawal.

7. Data Transfers Outside the EEA

If your data is transferred outside the European Economic Area (EEA), we ensure that such transfers are made in compliance with GDPR and protected by appropriate safeguards (e.g., using Standard Contractual Clauses or relying on a lawful transfer mechanism).

8. Cookies and Tracking Technologies

Our website uses cookies to improve user experience and analyze website performance. Cookies are small text files stored on your device. You can manage your cookie preferences through your browser settings. For more details on how we use cookies, please see our Cookie Policy.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated effective date. We encourage you to review this policy periodically to stay informed about how we protect your privacy.

10. Contact Us

If you have any questions, concerns, or requests related to this Privacy Policy or the way we handle your personal data, please contact us at: