Privacy notice

What we collect

When you place an order, we collect the contact, product, timing, fulfilment and optional notes you submit so Estee can review and fulfil it. If you upload a cake inspiration image, it is attached to that order. When you submit a review, we collect the name, rating, review text and optional photo you provide so it can be moderated before publication.

Optional order-tracking accounts

Creating an account is optional and unchecked by default at checkout. If you choose to track an order online, we use your email address to send a secure one-time sign-in code. No password is stored for customer accounts. The verified email is used only to authenticate you and attach the correct orders to your account. Account creation is not a marketing opt-in.

You can update your name, phone number and preferred contact method in your profile. You may request account deletion from the profile page. Deleting an account removes your login and profile. Order records needed for legitimate bakery operations may be retained and detached from your login rather than erased automatically.

Payments

For fixed-price orders, we send your email address, the amount in Ghana cedis, an order reference and limited order metadata to Paystack so it can securely process and receipt the payment. Card, Apple Pay and other payment credentials are entered in Paystack’s checkout and are not collected or stored by Cakes by Estee. We store the Paystack transaction reference, payment status, channel, paid time and refund status so the order can be reconciled.

Orders that need a final custom quote are saved without starting payment. Paystack’s own privacy terms apply when you open its checkout.

How long we keep information

Active and upcoming orders are kept in full while they are being fulfilled. Completed and cancelled order records with identifiable customer details are retained for up to seven years, subject to confirmation with Estee’s accountant or legal adviser for business-record requirements. Customer accounts remain while you use them or until you request deletion; accounts with no activity for seven years may be reviewed for deletion or anonymization. Anonymized sales and product statistics may be kept indefinitely because they no longer identify you.

Anonymous website analytics

Analytics runs by default unless you decline it. It records public page paths, broad referral or campaign labels, product and cart actions, and whether an order or review was submitted. Random browser and 30-minute session IDs are irreversibly hashed before storage. Analytics does not contain your name, phone number, order items, order notes, review text or raw IP address. Event-level analytics is retained for up to 13 months.

A one-year preference cookie remembers whether you acknowledged the notice or declined analytics. While analytics is enabled, a one-year anonymous visitor cookie and a 30-minute session cookie are used. An incoming network address may be transformed into a one-way fingerprint solely to limit abusive submission rates; the raw address is not stored by the website.

Who helps us provide the service

Supabase stores website orders, payment references and statuses, optional account authentication, review submissions and analytics. Paystack processes online payments and may send payment receipts. Resend may deliver authentication emails from hello@esteesbakery.com. A private Telegram notification may deliver order details to Estee, and you may choose to continue the conversation through WhatsApp. The reviews page can display content supplied by Google Maps, including reviewer attribution images and links; Google’s own terms and privacy practices apply to that content.

Read the Google Privacy Policy and Google Maps terms.

Your choices and questions

You can opt out of analytics above at any time. Declining removes the anonymous browser and session identifiers from this browser and stops future analytics events. To track an existing order online, visit Track your orders. To ask about, correct or request deletion of information you submitted, use the account deletion request in your profile or contact Cakes by Estee through the details on the contact page. Some records may need to be retained where required for legitimate business, security or legal purposes.