Privacy Policy

Last updated: July 8, 2026

1. Who We Are

This Privacy Policy applies to the Amy's Bakes website and platform, operated by Amys Bakes LLC ("we", "us", "our"), located at 21110 Waze Lewis Dr, New Caney, TX 77357, USA. We are responsible for determining how and why your personal information is processed on this platform.

2. Collection of Data

We collect personal information (such as your name, email address, phone number, event date, and order details) when you register on our platform, make a purchase, or fill out the cake quote form. Account registration and authentication are securely managed by our identity provider Clerk Auth.

3. Cookies & Tracking Technologies

We use cookies and browser local storage to keep you signed in, remember your preferred language, and remember whether you already responded to our cookie notice. We do not currently use third-party advertising or analytics cookies. For full detail on each cookie, its purpose, and duration, see our Cookie Policy.

4. Payment Processing & Security

We take financial security very seriously. We never store or directly process your credit card information. All e-commerce transactions are delegated and processed through Stripe, under strict PCI-DSS security certification standards.

5. Shipping & Logistics

When you place an order that requires physical shipping, we share your name, address, city, state, zip code, and phone number with our shipping management provider EasyPost and the relevant carrier (e.g., UPS), solely to generate the shipping label, calculate rates, and deliver your order.

6. Cloud Storage & CDNs

Files and reference photos uploaded to the platform by users are distributed and stored securely on the content delivery network (CDN) managed by UploadThing, ensuring technical protection and integrity of your data.

7. Data Retention

We retain your personal information for as long as your account remains active, plus any additional time needed to meet legal, tax, and accounting obligations (generally up to 7 years after your last transaction), or until you request deletion under the section below.

8. US Privacy Compliance (CCPA/CPRA, COPPA & Other States)

Pursuant to United States laws: we do not knowingly collect data from children under the age of 13 (complying with COPPA). If you are a California resident, under the CCPA/CPRA you have the right to: (i) know the categories and sources of personal information collected and the categories of third parties it is shared with; (ii) request access, correction, deletion, or portability of your information; (iii) not be discriminated against for exercising these rights; and (iv) opt out of the "sale" or "sharing" of your information — we do not currently sell or share personal information for cross-context behavioral advertising. You may exercise these rights by writing to academia@amysbakes.com or carlosderoux38@gmail.com; we will respond within 45 days as required by law. If you reside in another US state with an applicable privacy law (such as Virginia, Colorado, Connecticut, Utah, Texas, or Oregon, among others), we recognize equivalent rights of access, correction, and deletion of your information.

9. EU, UK & Other International Visitors

If you are located in the European Economic Area, the United Kingdom, or any jurisdiction with GDPR-like protections, we process your personal information based on your consent, the performance of a contract (e.g., processing your purchase), or our legitimate interest in operating and improving the platform. You have the right to access, rectify, erase, restrict, or object to the processing of your data, as well as data portability, and to lodge a complaint with your country's data protection authority. Some of our providers (Clerk, Stripe, UploadThing, EasyPost) process data in the United States; by using the platform you acknowledge this international data transfer.

10. Marketing Communications

If we send you promotional emails, each message will include an unsubscribe link, in accordance with the US federal CAN-SPAM Act. Transactional emails related to your order or account (confirmations, receipts, shipping updates) are not optional while you maintain an active account.

11. Information Security

We implement reasonable technical and organizational measures to protect your information, including encryption in transit, role-restricted access to our database, and the use of certified providers (Clerk, Stripe) for handling credentials and payments. No system is 100% secure; in the event of a security breach affecting your data, we will notify you as required by applicable law.

12. Changes to This Notice

We may update this Privacy Policy from time to time. The "last updated" date at the top of this document reflects the current version. We recommend reviewing it periodically.

13. Contact

If you have questions about this Privacy Policy or wish to exercise your data protection rights, contact us at academia@amysbakes.com or in writing to Amys Bakes LLC, 21110 Waze Lewis Dr, New Caney, TX 77357, USA.