Privacy Policy

Last updated: October 22, 2026

This page is a template and is not legal advice. Have it reviewed by a lawyer or the shop owner before relying on it.

This policy explains how SweetPhie by Czarelle ("SweetPhie", "we") handles personal information when you use our cake pre-order website.

1. What we collect

• Account details: your name, email address and an encrypted (hashed) password.
• Mobile number, if you save it or enter it when ordering.
• Profile picture, if you upload one.
• Order history and pickup details: the cakes you order, pickup date, totals and order status.
• GCash payment proof images and reference numbers you submit for GCash orders.
• Your notification preferences.
• If you sign in with Google: only your verified email address, your name and your Google account ID ("sub"). We do not receive your Google password.

2. Why we use it

To create and secure your account, take and prepare your pre-orders, verify payments, send password reset emails, send order notifications you have chosen, and answer your questions.

3. Passwords and security

Passwords are stored only as one-way hashes. Password reset PINs are stored only as hashes, expire after 10 minutes and can be used once. Payment proof images are stored in a private folder and can only be viewed by shop staff who are logged in. We limit repeated login attempts and use HTTPS. No system is perfectly secure, but we work to protect your data.

4. Sharing

We do not sell your personal data. We share it only as needed to fulfil your order (for example with our staff and our hosting and email providers) or when required by law.

5. Cookies, sessions and local storage

We use session cookies to keep you signed in and to protect forms against forgery. Your browser may also use localStorage to remember things such as your cart. These are needed for the site to work, and we do not use them for advertising.

6. How long we keep data

We keep account and order records for as long as your account is active and as needed for business, tax and dispute purposes. You can ask us to delete your account and personal data (see Your rights).

7. Your rights under the Data Privacy Act of 2012 (RA 10173)

You may ask to access the personal data we hold about you, correct it, object to its processing, or have it deleted or blocked, and you may file a complaint with the National Privacy Commission. Contact us using the details below.

8. Children

Our website is not meant for children under 13. If you believe a child has given us personal data, contact us and we will delete it.

9. Changes to this policy

We may update this policy. The "Last updated" date above shows the latest version.

Contact us

SweetPhie by Czarelle, Roxas City, Capiz, Philippines.
Email: YOUR_CONTACT_EMAIL
Phone: 0910 157 6974