Privacy Policy

The inquiry form collects information needed to respond to your wish:

• Your name, email, optional phone, inquiry type, date needed, items or cake details, message and optional reference photo. The same form serves orders, custom cakes, cafe-cart bookings and general questions.

Each inquiry also stores its date, delivery status and a hashed network identifier for submission integrity. The site does not store your raw IP address with the inquiry.

Please don't include payment card numbers, health information beyond a food allergy, or other sensitive details in the notes field.

Enquiry details are collected for one purpose: to price, plan, and confirm your order and to reply to you. Submitting an inquiry permits a response to that specific request, not marketing emails. Collection is limited to this purpose under Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).

Your information is not sold, rented, or used for advertising. It is stored in a hosted database run by the site's hosting and backend provider, which processes it on my behalf and may store it on servers outside Canada. Resend processes the inquiry notification email to Bake-a-Wish, including your contact details and message. Your email is the reply address. Optional photos remain private and are shared using expiring links.

Inquiry details and reference photos are retained as private backups for responding to and managing requests. You can request deletion using the inquiry form or Instagram.

The site is served over HTTPS. Form submissions and photos are validated on the server, and the enquiry database is not publicly readable — records can only be written by the site's server function and read by me through an authenticated admin connection.

This site sets no advertising or analytics cookies and runs no third-party tracking pixels, so there is no consent banner to click. Browser storage may remember an announcement dismissal. The private admin uses a secure session cookie. Anonymous page and button events contain no inquiry details and respect browser privacy preferences.

Fonts are loaded from Google Fonts, which means your browser makes a request to Google's servers and Google receives your IP address as part of that request.

You can ask me what information I hold about you, ask for it to be corrected, or ask for it to be deleted. I'll respond within 30 days. If you're not satisfied with how I handle your request, you can complain to the Office of the Privacy Commissioner of Canada at priv.gc.ca.

Bake-a-Wish, Thunder Bay, ON, Canada. Contact details are listed on the home page.