The short version
- No ads, no tracking cookies, and we never sell or share your details for marketing.
- We only learn about you if you send an order request or contact us – and we use that only to answer you and make your topper.
- You can ask to see, fix or delete what we have about you at any time.
Who we are
Trillium Pastry is a small business in Ontario, Canada that makes handmade cake toppers. In this policy “we” and “us” mean Trillium Pastry, and “you” means anyone who visits this website or contacts us. We follow Canada's privacy law for businesses, thePersonal Information Protection and Electronic Documents Act (PIPEDA).
What we collect
When you just look around
Nothing that tells us who you are. Our website host, Cloudflare, briefly handles technical details every website receives – such as your IP address, browser and the page you asked for – to deliver the page and protect it from attacks. We count visits with Cloudflare Web Analytics, which uses no cookies and doesn't identify or follow you across other sites. We only see totals, such as how many people visited today.
When you send an order request
The order form asks for:
- your idea, the style, occasion, text for the topper and the date you need it by;
- your name and email address;
- optionally, a phone number or Instagram handle.
When you call, text or message us
Whatever you choose to send us, such as your number, messages and reference photos.
Saved on your own phone, not sent to us
While you fill in the order form, what you've typed is kept in your browser's storage on your device, so it is still there if you pop over to Instagram and come back. It is cleared once your request is sent. Your accessibility settingsare kept the same way. Neither is sent to us, and you can remove both by clearing this site's data in your browser.
How we use it
- to reply to you about your design, price and timing;
- to make your topper and arrange pickup or delivery;
- to keep the records a business must keep, such as sales records for taxes.
We don't sell, rent or trade your information, we don't use it for advertising, and we won't add you to a mailing list or send you promotional messages unless you ask us to (as Canada's Anti-Spam Legislation, CASL, requires).
Photos of your topper
We like to share photos of finished toppers on this website and on Instagram. If your topper shows a name, a photo or anything else personal and you'd rather we didn't share it, just tell us – before or after – and we won't, or we'll take it down. We never post photos of you, your family or your event without asking first.
Who else handles it
We use a few trusted services to run the site and receive your order. They may only use your information to provide their service to us:
- Cloudflare – hosts this website, counts visits and runs the order form;
- Resend – delivers your order request to us as an email;
- Google (Gmail) – where we receive and answer order emails;
- Instagram (Meta) – only if you follow a link to Instagram or message us there. Instagram's own privacy policy then applies.
These companies may store information outside Canada, mostly in the United States. While it is there, it is protected by their security and contracts, but the laws of that country apply and its authorities may be able to access it.
We may also share information if the law requires it, for example in response to a court order.
How long we keep it
- Order requests that don't go ahead are deleted within 12 months.
- For orders we make, we keep the basic details (name, contact, what was ordered, price and date) as long as Canadian tax law requires business records to be kept – usually six years – and then delete them.
Keeping it safe
The whole site runs over an encrypted connection (HTTPS), the order form checks what it receives and filters out spam, and order emails are read only by the Trillium Pastry owner. The site is built to block common attacks, such as being shown inside another site or loading code from elsewhere. No system is perfectly secure, though, so please don't send sensitive information such as payment card numbers through the form or by message.
If you think you've found a security problem with this website, please tell us using the contact details below. We're grateful for reports and will fix real problems as quickly as we can.
Your choices and rights
You can ask us at any time to:
- tell you what information we have about you and show it to you;
- correct anything that's wrong;
- delete it, unless we have to keep it by law (such as sales records for taxes);
- stop using it for something you agreed to earlier, such as sharing a photo of your topper.
We'll answer within 30 days, free of charge. We may ask a question or two to make sure the request really comes from you. If you're not happy with our answer, you can complain to theOffice of the Privacy Commissioner of Canada.
Children
This site is meant for adults planning a celebration. We don't knowingly collect information from children under 13; if you're younger, please ask a parent or guardian to order for you. If you think a child has sent us their details, contact us and we'll delete them.
Changes to this policy
If we change how we handle information, we'll update this page and the date at the top. If a change matters for information you've already given us, we'll tell you before it applies.
Contact us
For any privacy question or request, reach the Trillium Pastry owner, who looks after privacy here:
- Call or text (647) 292-0115
- Message @trilliumpastry on Instagram (profile)
