Privacy Policy

Last updated: 23 July 2026

Cake Wonderland respects your privacy. This Privacy Policy explains what personal information we collect, why we use it, when it may be disclosed and the choices available to you when you visit our store, contact us or place an order.

Who we are

Cake Wonderland is an independent food business based in County Sligo, Ireland.

Email: cakewonderland.tubbercurry@gmail.com
Postal address: 29 Cnoc Na Sí, County Sligo, F91 D5W6, Ireland

Information we collect

Depending on how you use the store, we may collect:

Your name, email address, telephone number, billing address and delivery or collection details.
Order information, product choices, customisation requests, uploaded reference images and messages you send us.
Payment and transaction information. Full payment-card details are handled by payment providers and are not normally visible to us.
Account information, where customer accounts are available.
Technical information such as IP address, browser, device, cookie identifiers and information about how the store is used.
Marketing preferences and records of consent.

How we use your information

We use personal information to:

Process, prepare, fulfil and deliver orders or arrange collection.
Discuss custom cakes, dietary information, designs, dates and other order requirements.
Process payments, refunds and transaction records.
Provide customer service and respond to enquiries.
Secure the store, detect fraud and prevent misuse.
Comply with tax, accounting, food-business and other legal obligations.
Improve our products, services and website.
Send marketing communications where you have subscribed or where otherwise permitted by law.

Our legal bases

Where European data protection law applies, we process information because it is necessary to perform a contract with you, comply with a legal obligation, pursue a legitimate business interest that does not override your rights, protect vital interests, or because you have given consent.

We do not sell your personal information

We do not sell personal information. We do not rent customer lists to other businesses. We do not disclose personal information for another company's independent direct-marketing use without your consent.

When information is shared

We may disclose only the information reasonably necessary to trusted providers that help us run the business, including Shopify, payment processors, website and form providers, email services, professional advisers, delivery companies and fraud-prevention or security providers.

We may also disclose information where required by law, to respond to valid legal process, to protect customers or the business, or in connection with a genuine sale or reorganisation of the business. Providers handle information under their own legal and contractual obligations.

Shopify

Our online store is hosted by Shopify. Shopify processes technical, account and transaction information to provide the storefront, checkout, security and related services. Information may be processed in countries outside Ireland or the European Economic Area, subject to applicable transfer safeguards.

Cookies

The store uses cookies and similar technologies for essential functions such as the shopping cart, checkout and security. It may also use analytics, preference or marketing technologies. Where the law requires consent, non-essential technologies should only be activated after you make a choice through the store's privacy controls.

Marketing

We may send promotional emails when you have subscribed or where otherwise legally permitted. You can unsubscribe at any time using the link in an email or by contacting us. We may still send non-promotional messages relating to an order, payment, collection or delivery.

How long we keep information

We retain information only for as long as reasonably necessary for the purpose for which it was collected, including order fulfilment, customer service, accounting, tax, dispute resolution, fraud prevention and legal compliance. Different records may be retained for different periods.

Security

We use reasonable administrative and technical measures designed to protect personal information. No online service or transmission method can be guaranteed completely secure, so please do not send sensitive information through ordinary email unless necessary.

Your rights

Depending on where you live, you may have rights to access, correct, erase, restrict or object to processing of your information, withdraw consent, receive portable data and complain to a supervisory authority. European customers can read our GDPR & Your Data page for more detail.

To make a privacy request, email cakewonderland.tubbercurry@gmail.com with the subject line Data Protection Request. We may need to verify your identity.

Children

Our online store is intended for adults making purchases. We do not knowingly seek to collect personal information directly from children who are not legally able to provide it.

Third-party links and social media

Our website may link to services such as Instagram and Facebook. Those services operate independently and have their own privacy practices. Information you post publicly on a social-media service may be visible to others.

Changes to this policy

We may update this policy to reflect changes in our services, providers or legal obligations. The latest version will appear on this page with a revised date.