Privacy Policy
This policy describes what this website collects, why it collects it, and what happens to it. It describes this site only. It is not legal advice.
Who we are
2 Cute 2 Eat Cookies is a home bakery run by Dianna and Nancy Gladstone in Livonia, Michigan. Our contact details are in the footer of every page.
What this site collects, and only when you send it
We collect nothing until you fill in a form. The forms on this site are the only way personal information reaches us.
- Order inquiry. Your name, email address, phone number, the date you need cookies, the type of event, a theme, a color palette, how many you want, any details you add, and any inspiration photos you choose to upload.
- Class registration. Your name, email address, phone number, the class date you picked, how many participants, any dietary needs you tell us, participant names if you enter them, a promo code if you use one, how you heard about the class, and the date you accepted the class waiver.
- Paint your own order. Your name, email address, phone number, the date you need the order, the designs and quantities you choose, and a delivery address if you choose delivery instead of pick-up.
What is recorded automatically
When you submit a form we record the time and your IP address. That is used to stop automated abuse and nothing else. Our web server keeps standard access logs, which are managed by our hosting provider.
Cookies, the browser kind
This site sets one cookie, and only when it is needed: a session cookie that keeps a form submission or an owner sign-in working. It expires when you close your browser or when the session ends. There is no advertising cookie, no analytics cookie, and no cross-site tracker on this site.
The accessibility and translate widgets store your choices in your own browser using local storage. That information never leaves your device and is never sent to us.
Payments
When a payment is taken, it is processed by PayPal. Your card details are entered on PayPal's own systems and are never seen by, sent to, or stored by this website. We record only what PayPal tells us: a transaction reference, an amount, and whether it completed.
Who else sees your information
Nobody, other than the two owners and the hosting provider who runs the server. We do not sell, rent or trade personal information. We do not send marketing email to people who have not asked for it. If you use the translate widget, the page address is sent to Google's translation service by your own browser; nothing you typed is sent with it.
How long it is kept
Order and registration records are kept as business records for as long as we need them for accounting and for handling a repeat order. Inspiration photos you upload are kept with the order they belong to and are never published. Form submissions that turn out to be spam are removed.
Your choices
You can ask us what we hold about you, ask for a correction, or ask us to delete it. Email or text us using the details in the footer and say what you would like us to do. If deleting something would leave us unable to honour an order you have paid for, we will tell you before we act.
Children
This site is not aimed at children, and we do not knowingly collect information from a child. Children are welcome at our classes with adult supervision, and a class is always booked by the adult.
Security
This site is served over HTTPS. Uploaded files are stored outside the public area of the website and are served only to the owners through a sign-in. Owner passwords are stored as one-way hashes and cannot be read by anyone, including us.
Changes
If this policy changes, the new version replaces this one on this page.