Effective Date: January 1, 2026

Last Updated: January 1, 2026

1. Introduction

Welcome to The Velvet Buttercream. We are a Phoenix, Arizona-based bakery specializing in baked goods and custom cakes, and we are committed to protecting your privacy. This Privacy Policy describes how we collect, use, disclose, and safeguard your personal information when you visit our website at www.velvetbuttercream.com, place an order, or otherwise interact with our services.

By using our website or services, you agree to the collection and use of information in accordance with this policy. We encourage you to read this Privacy Policy carefully and contact us if you have any questions.
 

2. Information We Collect

We collect information in several ways to provide and improve our services to you. The types of information we collect are described below.

a. Personal Information You Provide

When you place an order, create an account, or contact us, you may provide the following information:

• Name, email address, phone number, and mailing/delivery address

• Payment and billing information — credit or debit card details processed securely through third-party payment processors (we do not store full payment card numbers)

• Order details — cake designs, custom requests, flavor preferences, dietary needs, event dates, and delivery instructions

• Account login credentials — username and password (if you create an account)

• Communications — messages, inquiries, reviews, and feedback submitted via contact forms, email, phone, or social media

b. Information Collected Automatically

When you visit our website, certain information is collected automatically through cookies and similar technologies:

• IP address, browser type, operating system, and device information

• Pages visited, time spent on pages, click patterns, and referring URLs

• Cookies and similar tracking technologies (see Section 4: Cookies and Tracking Technologies for details)

c. Information from Third Parties

We may receive limited information about you from third-party sources, including:

• Social media platforms — when you interact with our pages or profiles on platforms such as Facebook, Instagram, or Pinterest

• Payment processors — transaction confirmations and fraud-prevention data

• Analytics providers — aggregated and anonymized usage data about website traffic and user behavior

3. How We Use Your Information

We use the information we collect for the following purposes:

• Processing and fulfilling orders — including custom cake orders, baked goods, deliveries, and related customer service

• Communicating with you — responding to inquiries, confirming orders, providing order updates, and addressing customer service needs

• Sending promotional content — marketing offers, newsletters, seasonal specials, and business updates (you may opt out at any time; see Section 9)

• Improving our website and services — enhancing website functionality, user experience, and product offerings based on usage patterns and feedback

• Analyzing business performance — understanding usage trends, popular products, and customer preferences to improve operations

• Preventing fraud and ensuring security — detecting, investigating, and preventing fraudulent transactions and unauthorized access

• Complying with legal obligations — meeting applicable tax, regulatory, and legal requirements

4. Cookies and Tracking Technologies

Cookies are small text files placed on your device when you visit a website. They help the site remember your preferences, understand how you use the site, and improve your experience. We use the following types of cookies:

 

​

• Essential Cookies

Necessary for core site functionality. These cannot be disabled without affecting your ability to use the site.

Shopping cart contents, login session management, security tokens

• Analytics Cookies

Help us understand how visitors interact with our website by collecting information about page visits, traffic sources, and usage patterns.

Google Analytics, site performance monitoring

• Marketing Cookies

Used to deliver relevant advertisements and track the effectiveness of marketing campaigns.

Social media integration (Facebook Pixel, Instagram), targeted advertising

 

Managing Cookies: You can control and manage cookies through your browser settings. Most browsers allow you to block or delete cookies. Please note that disabling essential cookies may prevent you from using certain features of our website, such as the shopping cart or account login.
 

5. SMS/Text Messaging Terms

By opting in to receive SMS or text messages from The Velvet Buttercream, you agree to the following terms. These terms apply to all text messaging programs operated by The Velvet Buttercream, including customer service communications, order confirmations and status updates, delivery and pickup notifications, appointment and event reminders.

a. Consent and Opt-In

• By providing your mobile phone number and opting in, you consent to receive recurring automated text messages from The Velvet Buttercream at the number provided.

• Consent is not a condition of purchase. You may purchase goods or services without opting in to text messaging.

• You may opt in by texting a designated keyword (e.g., "INFO") to our phone number, or providing verbal consent to any employee at The Velvet Buttercream.

• By opting in, you confirm that you are the account holder or authorized user of the mobile number provided.

• We do not sell, share, transfer, or disclose SMS opt-in data, mobile numbers, or related consent information to any third party or external organization for marketing or any other purpose, except where strictly required by law.

b. Types of Messages

• Order confirmations and status updates

• Delivery and pickup notifications

• Appointment and event reminders

• Customer service communications

c. Message Frequency and Rates

• Message frequency varies based on your interactions and preferences. Promotional messages will not exceed 30 messages per month.

• Standard message and data rates may apply depending on your mobile carrier and plan. The Velvet Buttercream is not responsible for any charges incurred from your carrier.

• Carriers are not liable for delayed or undelivered messages.

d. Opt-Out and Cancellation

• You may opt out of receiving text messages at any time by replying STOP to any message you receive from us.

• You may also opt out by contacting us at info@velvetbuttercream.com or 602-734-1408.

• Opting out of text messages will not affect your ability to receive other communications from us (such as email) unless you separately opt out of those as well.

e. Help and Support

• For assistance with our text messaging program, reply HELP to any message or contact us at info@velvetbuttercream.com or 602-734-1408.

• You may also visit www.velvetbuttercream.com for additional support and information.

f. Privacy and Data Use

• We do not transfer, share, or disclose consumer data, including mobile phone numbers and SMS opt-in data, to any external organization for any purpose.

• We maintain internal access controls, employee training, and contractual/vendor restrictions to prevent unauthorized sharing of user data.

• Phone numbers and opt-in data collected through our SMS program are used solely for the purposes described in this policy.

• For more information on how we handle your personal data, please refer to the other sections of this Privacy Policy.

g. Terms and Conditions

• The Velvet Buttercream reserves the right to modify or discontinue the SMS program at any time, with or without notice.

• This SMS program is available to users with compatible mobile devices on participating carriers within the United States.

• The Velvet Buttercream is not responsible for messages that are undeliverable due to carrier issues, device incompatibility, or incorrect phone numbers provided by the subscriber.

• By participating in our SMS program, you agree to these terms as well as our full Privacy Policy and Terms of Service.

h. Opt-In Call to Action (CTA) Disclosure

When you opt in to receive text messages from The Velvet Buttercream, you will be presented with the following disclosure:

 

Opt-In Disclosure

Thank you for opting in to receive messages from The Velvet Buttercream. Message frequency varies. Message and data rates may apply. Reply STOP to unsubscribe or HELP for help. Privacy Policy & Terms: https://www.velvetbuttercream.com/privacy-policy

 

This disclosure covers the following message types: customer service communications, order confirmations and status updates, delivery and pickup notifications and reminders.
 

6. How We Share Your Information

 

❗ Important

The Velvet Buttercream does not sell your personal information to third parties.

 

We may share your information with the following categories of third parties, solely for the purposes described in this policy:

​​

• Business Partners — event venues, wedding coordinators, or other vendors with whom we collaborate to fulfill your order, but only with your prior consent.

• Legal Requirements — law enforcement agencies, regulatory authorities, or other parties when required by law, subpoena, court order, or legal proceedings, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

• Business Transfers — in the event of a merger, acquisition, sale of assets, or bankruptcy, your personal information may be transferred as part of that transaction. We will notify you of any such change in ownership or control.

• We do not sell, share, transfer, or disclose mobile numbers or SMS opt-in data to any external organization for any purpose, including with user consent, except as required for message delivery by our SMS service providers under strict confidentiality obligations.
   

7. Data Security

We take the security of your personal information seriously and implement a variety of measures to protect it:

• SSL/TLS encryption — all data transmitted between your browser and our website is encrypted using industry-standard Secure Sockets Layer (SSL) / Transport Layer Security (TLS) protocols

• Secure payment processing — all payment transactions are handled by PCI DSS-compliant third-party payment processors. We do not store your full credit or debit card numbers on our servers.

• Access controls — access to personal information is restricted to authorized employees and service providers who need it to perform their job functions

• Regular security reviews — we conduct periodic reviews of our data collection, storage, and processing practices to identify and address potential vulnerabilities

 

Please Note

While we strive to use commercially reasonable means to protect your personal information, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee the absolute security of your data.

 

8. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, or as required by law. The following guidelines apply:

​

• Order and transaction records

Retained for the period necessary to fulfill orders and comply with legal, tax, and accounting obligations (typically 7 years for financial records).

• Marketing and communications data

Retained until you opt out of marketing communications or request deletion of your information.

• Website usage data

Retained in aggregated and anonymized form for analytics purposes. Individual session data is not retained indefinitely.

• Account data

Retained for as long as your account is active, or until you request account deletion.

 

9. Your Privacy Rights

Depending on your location, you may have certain rights regarding your personal information. We are committed to honoring these rights in accordance with applicable law.

a. General Rights (All Users)

Regardless of where you reside, you have the right to:

• Access the personal information we hold about you

• Correct any inaccurate or incomplete personal information

• Request deletion of your personal information, subject to certain legal exceptions

• Opt out of marketing communications at any time by clicking the "unsubscribe" link in any promotional email or by contacting us directly

• Withdraw consent where processing is based on your consent

b. California Residents (CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA) provide you with the following additional rights:

• Right to Know — you may request that we disclose what categories and specific pieces of personal information we have collected, the sources of collection, the business purposes for collection, and the categories of third parties with whom we share it

• Right to Delete — you may request that we delete personal information we have collected from you, subject to certain exceptions

• Right to Opt Out of Sale or Sharing — we do not sell or share your personal information as defined under the CCPA/CPRA

• Right to Non-Discrimination — we will not discriminate against you for exercising any of your privacy rights

• Right to Limit Use of Sensitive Personal Information — you may request that we limit our use of sensitive personal information to purposes necessary to provide the services you requested

Submitting a Request: To exercise your rights under the CCPA/CPRA, please submit a verifiable consumer request by emailing info@velvetbuttercream.com with the subject line "California Privacy Request" or by calling 602-734-1408. We will verify your identity before fulfilling your request and will respond within 45 days.

c. European Economic Area / UK Residents (GDPR)

If you are located in the European Economic Area (EEA) or the United Kingdom, the General Data Protection Regulation (GDPR) and UK GDPR provide you with additional rights. Our legal bases for processing your personal information include:

• Consent — where you have given us clear, affirmative consent to process your personal information for a specific purpose

• Contractual Necessity — where processing is necessary to fulfill a contract with you (e.g., processing your cake order)

• Legitimate Interests — where processing is necessary for our legitimate business interests, provided those interests are not overridden by your rights

In addition to the general rights listed above, you also have the right to:

• Data Portability — receive a copy of your personal information in a structured, commonly used, machine-readable format

• Restrict Processing — request that we limit the processing of your personal information under certain circumstances

• Object to Processing — object to our processing of your personal information where we rely on legitimate interests as our legal basis

• Lodge a Complaint — file a complaint with a supervisory authority in your country of residence if you believe your rights have been violated

International Data Transfers: If you are located in the EEA or UK, please note that your information may be transferred to and processed in the United States, where our business is located. We will take appropriate safeguards to ensure that your personal information is protected in accordance with applicable data protection laws.
 

10. Children's Privacy

Our website and services are not directed at children under the age of 13 (or under 16 in the European Economic Area). We do not knowingly collect personal information from children. If we become aware that we have inadvertently collected personal information from a child under the applicable age, we will take prompt steps to delete that information from our records.

If you are a parent or guardian and believe that your child has provided us with personal information, please contact us at info@velvetbuttercream.com so that we can take appropriate action.
 

11. Third-Party Links and Services

Our website may contain links to third-party websites, services, or social media platforms that are not owned or controlled by The Velvet Buttercream. These may include links to our social media profiles, vendor partners, or other resources we believe may be helpful to you.

We are not responsible for the privacy practices, content, or security of any third-party websites or services. We encourage you to review the privacy policies of any third-party sites you visit before providing them with your personal information.
 

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will notify you by:

• Posting the updated policy on our website with a revised "Last Updated" date

• Sending an email notification to registered customers (for significant changes)

• Displaying a prominent notice on our website

Your continued use of our website or services after the updated Privacy Policy has been posted constitutes your acceptance of the changes. We encourage you to review this policy periodically to stay informed about how we protect your information.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us using the information below:

 

The Velvet Buttercream

602-734-1408

702 W. Camelback Road Suite #5, Phoenix, AZ 85013
 

Privacy Inquiries:

For privacy-related requests, please email info@velvetbuttercream.com with the subject line "Privacy Request."

 

We will make every effort to respond to your inquiry within a reasonable timeframe.