Privacy Policy

Information You Provide

When you place an order, create an account, or contact us, we may collect:

• Full name, email address, and phone number
• Delivery and billing address
• Order details, preferences, and special requests (including dietary or allergy information)
• Payment information — processed securely via our payment platform; we do not store card details
• Any communications you send us via enquiry forms, messages, or email

Information Collected Automatically

When you visit our website, we may automatically collect:

• IP address and browser type
• Pages visited and time spent on site
• Referring website or search terms used
• Device type and operating system

This data is collected via cookies and similar technologies. See Section 07 for more detail.

We use your personal information to:

• Process, fulfil, and communicate about your order
• Send order confirmations, receipts, and delivery updates
• Respond to enquiries and provide customer support
• Manage bookings, invoices, and run sheets
• Comply with our legal and regulatory obligations
• Send promotional emails or updates — only with your consent; you may unsubscribe at any time
• Improve our website, products, and services

We may share your information with trusted third parties only where necessary to operate our business:

• Payment processors (e.g. Shopify Payments, Afterpay, Stripe) — to securely process transactions
• Delivery and courier services — to fulfil delivery orders
• Email and communication platforms — to send order communications
• Website and IT service providers — to operate and maintain our online store
• Legal or regulatory authorities — where required by Australian law

All third-party providers are required to handle your information securely and only for the purposes for which it is shared.

We take reasonable steps to protect your personal information from misuse, loss, unauthorised access, modification, or disclosure. Our security measures include:

• SSL/TLS encryption across our website
• Secure payment processing via PCI-compliant platforms
• Restricted internal access to customer data
• Regular review of our data handling practices

While every reasonable precaution is taken, no internet-based data transmission is completely secure. We cannot guarantee the absolute security of information you transmit to us.

We retain your personal information only for as long as necessary to:

• Fulfil the purpose for which it was collected
• Comply with legal and tax obligations — typically 7 years for financial records under Australian law
• Resolve disputes and enforce our agreements

Once your information is no longer required, we will take reasonable steps to securely destroy or de-identify it.

Under the Australian Privacy Act, you have the right to:

• Access the personal information we hold about you
• Correct information that is inaccurate, out of date, or incomplete
• Withdraw consent for marketing communications at any time
• Request deletion of your data, subject to legal retention obligations
• Lodge a complaint if you believe your privacy has been breached

To exercise any of these rights, please contact us using the details below. We will respond within a reasonable timeframe, generally within 30 days.

Our website uses cookies — small text files stored on your device — to improve your browsing experience. We use cookies to:

• Remember items in your shopping cart
• Keep you logged into your account
• Analyse website traffic and usage patterns (e.g. Google Analytics)
• Understand how customers find and navigate our site

You can control or disable cookies through your browser settings at any time. Please note that disabling cookies may affect the functionality of certain parts of our website, including checkout.

Our website may contain links to external websites (e.g. social media platforms, payment providers). Mum’s Baking is not responsible for the privacy practices of any third-party websites. We encourage you to review the privacy policies of any external sites you visit.

Our website and services are intended for use by individuals aged 18 years and over. We do not knowingly collect personal information from children under 18. If you believe a child has provided us with personal information, please contact us and we will promptly take steps to delete it.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or business operations. Any updates will be posted on this page with a revised date.

Continued use of our website or services after any changes constitutes your acceptance of the updated policy. We encourage you to review this page periodically.