Last updated: 26th November 2025

At Spongedrop Cakery, we respect your privacy and are committed to protecting your personal information. This policy explains what we collect, how we use it, and your rights under the New Zealand Privacy Act 2020.

1. Information We Collect

We collect information that helps us process orders and provide customer service, including:

• Your name.
• Contact details (email, phone number, address).
• Order details and payment information.
• Any dietary notes or custom cake information you provide.
• Website usage information (e.g., cookies or analytics data).

We do not store full credit card numbers (payments are processed securely through Shopify).

2. How We Use Your Information

We use your personal information to:

• Process and deliver your orders.
• Communicate with you about your order.
• Respond to enquiries and provide customer support.
• Improve our website and services.
• Send marketing emails (only if you have opted in).

We do not sell or rent your personal information to third parties.

3. Sharing Your Information

We may share information with trusted third parties only when necessary to run our business, such as:

• Payment processors.
• Delivery providers.
• Website hosting or analytics services.
• Email marketing platforms (opt-in only).

These providers must protect your information and cannot use it for their own purposes.

4. Cookies & Website Analytics

Our website may use cookies and analytics tools to improve your browsing experience and understand how visitors use our site. You can disable cookies in your browser settings, though some features may not work properly.

5. Storage & Security

We take reasonable steps to keep your information safe from loss, misuse, and unauthorised access. Information is stored securely using Shopify systems and password-protected devices.

6. Your Rights

Under the NZ Privacy Act, you have the right to:

• Access the personal information we hold about you.
• Request corrections to your information.
• Withdraw marketing consent at any time.

To make a request, email us at: hello@spongedrop.co.nz

7. Data Retention

We keep personal information only as long as needed for:

• completing your order,
• business and accounting purposes, or
• meeting legal requirements.

After this, information is securely deleted or anonymised.

8. Links to Other Websites

Our website may link to third-party sites. We are not responsible for their privacy practices or content.

9. Changes to This Policy

We may update this Privacy Policy occasionally. Updated versions will be posted on our website with the revised date.

10. Contact Us

If you have any questions about this Privacy Policy or how we handle your information, please contact us at:

Spongedrop Cakery
Email: hello@spongedrop.co.nz
Phone: (07) 572 0059
Address: 10 Salisbury Avenue, Mount Maunganui 3116