Privacy policy
Last updated October 30, 2026
Orchid Cakes is run by Orchid & Ember Inc., 83 Holland Avenue, Ottawa, Ontario. This page explains, in plain words, what we collect when you visit orchidcakes.ca, write to us or ask for a cake, and what we do with it.
What we collect
When you send a cake request: your name, email, phone number, the date of your celebration, the number of guests, your choices and description, and any photos you add. Before it is sent, we email you a code to confirm the address is yours.
When you chat with us on the site: your messages and, if you leave them, your name, email and phone number.
When you write to us by email: your message and your email address.
When you visit the site: which pages are viewed and a few taps (for example on the map or the order button), the website or ad that brought the visit, the type of device (phone, tablet or computer) and the language. We do not record your IP address and do not give you any identifier, so these numbers never tell us who you are.
Why we use it
To answer your request or message, prepare your cake and get in touch about your order. We do not send you newsletters or advertising unless you ask for them.
To see, in total, how visitors find us and which pages help them, so we can improve the site and choose where to advertise.
Cookies and advertising
Our site uses no advertising or tracking cookies. To keep a chat conversation open, your browser keeps a random code on your device; clearing your browsing data removes it.
We advertise on Google. If you arrive by clicking one of our ads, we only note that the visit came from an ad. How Google handles your search and your click is covered by Google’s own privacy policy.
To keep spam out of the chat and the cake request form, we use Cloudflare Turnstile, which checks silently that a real person is writing. How Cloudflare handles this check is described in its Turnstile Privacy Addendum: cloudflare.com/turnstile-privacy-policy
Who else handles your information
We never sell or rent your information. A few trusted services store or carry it for us, only to run the site and answer you: Supabase (our database, hosted in Canada), Cloudflare (website hosting), Google Workspace (our email) and Resend (emails sent by the site). Some of these services may process information outside Canada, for example in the United States, where it may be subject to local laws.
The first answers in our chat come from an AI assistant, clearly marked as such; the owners read every conversation and take over whenever needed. To answer you, the messages you send in the chat are processed by Cloudflare's AI service (Workers AI), which also hosts this site, or, if we switch to it, by Anthropic (Claude). Neither uses them to train its models.
How long we keep it
We keep requests, conversations and photos as long as we need them to answer you and complete your order, and order records as long as the law requires for our accounts. You can ask us at any time to delete information we are not required to keep.
Security
Your information travels over encrypted connections. Only the owners can read requests and conversations, in a space protected by a code sent by email and a password.
Your rights
You can ask to see the information we hold about you, have it corrected, or withdraw your consent by writing to hello@orchidcakes.ca. We answer within 30 days. If you are not satisfied with our answer, you can contact the Office of the Privacy Commissioner of Canada (priv.gc.ca).
Contact us
The owners of Orchid & Ember Inc. are responsible for your information. Questions: hello@orchidcakes.ca, or at the shop, 83 Holland Avenue, Ottawa.
If we change this policy, the new version will appear on this page with its date.
