Privacy Policy

1. Who We Are

ORI CAKES (“we”, “our”, or “us”) operates this website and online store. We are committed to protecting your privacy in accordance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and Quebec's Act respecting the protection of personal information in the private sector (Law 25).

2. Information We Collect

When you place an order, we collect:

• Name — to identify your order
• Phone number — to confirm and communicate with you
• Email address — to send confirmations
• Delivery address — to fulfill your order
• Notes — any special requests you provide

We do not collect payment card details, government IDs, or health information.

3. Why We Collect It

We use your information solely to:

• Confirm and manage your order
• Send confirmation and reminder messages
• Follow up if needed
• Maintain a record of your history for future visits

We will never sell, rent, or share your personal information with third parties for marketing purposes.

4. How We Protect Your Information

• All data is transmitted over encrypted HTTPS connections
• Access to customer records is restricted to authorized staff only
• Your contact details are masked by default in our management tools
• Our platform provider maintains SOC 2 Type II compliance

5. How Long We Keep Your Data

We retain your personal information for as long as necessary to provide our services — typically no longer than 3 years after your last order. You may request deletion at any time (see Section 7).

6. Cookies

This website uses only essential cookies necessary for cart functionality. We do not use advertising or tracking cookies.

7. Your Rights

Under PIPEDA and Quebec Law 25, you have the right to:

• Access — request a copy of the personal information we hold about you
• Correction — ask us to correct inaccurate information
• Deletion — request that we delete your personal information
• Portability — receive your data in a structured format
• Withdraw consent — opt out of future communications

To exercise any of these rights, contact us at the email address on our contact page. We will respond within 30 days.

8. Data Breach Notification

In the event of a data breach that poses a real risk of significant harm, we will notify affected individuals and the Office of the Privacy Commissioner of Canada within 72 hours of becoming aware of the breach.

9. Contact Us

For privacy-related questions or requests, please contact us:

If you are unsatisfied with our response, you may contact the Office of the Privacy Commissioner of Canada.