Privacy Policy
Effective Date: 1 March 2025
Santither Bakes, operated by Little Cupcakes, is committed to protecting the privacy of every individual who visits our website, places an order or communicates with our team. This Privacy Policy outlines the types of personal information we collect, the purposes for which we use that information, the measures we take to safeguard it and the rights you hold in relation to your data. By using our website at santither.com or engaging with our services, you acknowledge that you have read and understood this policy.
Information We Collect
We collect personal information that you voluntarily provide to us when you interact with our website and services. This includes, but is not limited to, the following categories of data:
- Contact Details: Your full name, email address, phone number and postal address. These are collected when you place an order, submit an enquiry through our contact form or sign up for our newsletter.
- Order Information: Details of the products you order, including cake specifications, flavour preferences, dietary requirements, delivery dates and delivery addresses. This information is necessary for us to fulfil your order accurately.
- Payment Information: When you make a purchase, your payment is processed through our secure third-party payment gateway. We do not store your full credit card number, expiry date or security code on our servers. We may retain a transaction reference number for record-keeping purposes.
- Communication Records: Any correspondence you send to us via email, phone, social media or our website contact form, including the content of your messages and any attachments.
- Technical Data: When you browse our website, we automatically collect certain technical information such as your IP address, browser type, operating system, referring URL, pages visited, time spent on each page and the date and time of your visit. This data is collected through cookies and similar tracking technologies.
- Preferences and Feedback: Information you share with us regarding your taste preferences, past orders, allergy information and any feedback or reviews you provide about our products and services.
How We Use Your Information
We use the personal information we collect for the following purposes:
- Order Fulfilment: To process, prepare and deliver your orders, including confirming order details, managing special requests, coordinating delivery logistics and providing order status updates.
- Customer Communication: To respond to your enquiries, provide customer support, send order confirmations and delivery notifications, and follow up on feedback or complaints.
- Service Improvement: To analyse usage patterns on our website, understand customer preferences and improve the quality of our products, services and overall user experience.
- Marketing: With your explicit consent, we may send you promotional emails about new products, seasonal specials, events and exclusive offers. You can unsubscribe from marketing communications at any time by clicking the unsubscribe link in any email or by contacting us directly.
- Legal Compliance: To comply with applicable laws, regulations and legal processes, including food safety regulations, tax obligations and consumer protection laws in the state of Victoria and across Australia.
- Safety and Allergen Management: To maintain records of dietary requirements and allergy information you provide, ensuring that we can prepare your orders safely and minimise the risk of allergen exposure.
Cookies and Tracking Technologies
Our website uses cookies and similar technologies to enhance your browsing experience. Cookies are small text files stored on your device that help us recognise returning visitors, remember your preferences and analyse website traffic. We use the following types of cookies:
- Essential Cookies: These are necessary for the basic functionality of our website, such as maintaining your session and remembering your cookie consent preferences.
- Analytics Cookies: These help us understand how visitors interact with our website by collecting information about pages visited, time spent on the site and any errors encountered. This data is aggregated and anonymised.
- Preference Cookies: These remember choices you make on our website, such as your preferred language or region, to provide a more personalised experience.
You can manage your cookie preferences through your browser settings or by using the cookie consent tool on our website. For more detailed information, please refer to our Cookie Policy.
Third-Party Disclosure
We do not sell, trade or rent your personal information to third parties for their marketing purposes. We may share your information with trusted third-party service providers who assist us in operating our website, processing payments, delivering orders and conducting our business. These service providers are contractually obligated to use your information solely for the purposes of providing services to us and to maintain appropriate security measures. Third parties with whom we may share data include:
- Payment processing providers for secure transaction handling.
- Delivery and courier services for order fulfilment.
- Email marketing platforms for sending newsletters and promotional content, only with your consent.
- Website analytics services for understanding traffic patterns and improving our site.
We may also disclose your information if required to do so by law, in response to a valid legal request or to protect our rights, property or safety.
Data Retention
We retain your personal information only for as long as is necessary to fulfil the purposes for which it was collected, including satisfying any legal, accounting or reporting requirements. Order records and associated customer details are retained for a period of seven years to comply with Australian tax and business record-keeping obligations. Contact form submissions that do not result in an order are retained for 12 months and then securely deleted. If you request the deletion of your data, we will comply within 30 days, subject to any overriding legal obligations that require us to retain certain information.
Data Security
We take the protection of your personal information seriously and implement a range of technical and organisational measures to safeguard it against unauthorised access, alteration, disclosure or destruction. These measures include encrypted data transmission via SSL/TLS protocols, secure server infrastructure, access controls limiting data access to authorised personnel only, and regular security reviews of our systems. While we strive to protect your personal data, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.
Your Rights
Under the Australian Privacy Act 1988 and applicable state legislation, you have the following rights in relation to your personal information:
- Access: You have the right to request a copy of the personal information we hold about you.
- Correction: You have the right to request that we correct any inaccurate or incomplete personal information.
- Deletion: You may request that we delete your personal information, subject to any legal obligations requiring us to retain certain data.
- Objection: You may object to the processing of your personal information for direct marketing purposes at any time.
- Complaint: If you believe we have breached the Australian Privacy Principles, you have the right to lodge a complaint with the Office of the Australian Information Commissioner.
To exercise any of these rights, please contact us using the details provided below.
Contact Us
If you have any questions, concerns or requests regarding this Privacy Policy or our handling of your personal information, please contact us:
We may update this Privacy Policy from time to time to reflect changes in our practices, technology or legal requirements. Any updates will be posted on this page with a revised effective date. We encourage you to review this policy periodically to stay informed about how we are protecting your information.