Privacy Policy
Carloti Treats ("we," "our," or "us") respects your privacy. This Privacy Policy explains how we collect, use, and protect your personal information when you visit our site or place an order with us.
Information We Collect
When you place an order or interact with our website, we may collect:
- Contact information: name, email address, phone number and, for deliveries, your delivery address.
- Order details: the treats you choose, your event date, design notes and any inspiration photos you upload.
- Payment information: we do not take card payments on this website. Deposit payment instructions are sent by email after we confirm your order.
- Technical data: IP address, browser type, device information, and cookies for analytics and site functionality.
How We Use Your Information
We use your information to:
- Process and fulfill your orders.
- Confirm your order, price, pickup or delivery details by email, phone or WhatsApp.
- Respond to customer inquiries.
- Improve our website and service quality.
- Send occasional marketing emails (only if you opt in — you can unsubscribe at any time).
- Comply with legal obligations.
Third-Party Services
We share limited information with trusted service providers who help us operate our business:
- Cloudinary (image storage and processing)
- Resend (transactional email delivery)
- Vercel (website hosting)
- Google Analytics (website traffic analysis)
These providers are contractually bound to protect your data and use it only for the services they provide to us.
Your Uploaded Images
Inspiration photos you upload with an order are stored on Cloudinary so we can design your treats. We do not use, share, distribute or sell your photos for any purpose other than preparing your order.
Cookies
Your order (the treats you add before sending a request) is saved in your own browser so it is still there if you leave and come back. We also use cookies to understand how visitors use our site. You can disable cookies in your browser settings, though some features may not work correctly without them.
Your Rights (Canada — PIPEDA)
Under Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), you have the right to:
- Access the personal information we hold about you.
- Request correction of inaccurate information.
- Request deletion of your personal information (subject to legal retention requirements).
- Withdraw consent for marketing communications.
To exercise these rights, email us at glenj.belmar@gmail.com.
Data Security
We use industry-standard measures to protect your information, and our website is served over an encrypted (HTTPS) connection. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.
Children's Privacy
Our services are not directed to individuals under 18. We do not knowingly collect information from minors. If you believe a minor has provided us with personal information, please contact us for immediate deletion.
Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with a new "Last updated" date. Continued use of our services after changes constitutes acceptance.
Contact
Questions about this Privacy Policy?
Email: glenj.belmar@gmail.com
Address: London, Ontario, Canada