Privacy policy

Privacy Policy

Last updated: October 27, 2026

This Privacy Policy describes how Sweet Help Inc., a California corporation doing business as Gloria's Cake & Candy Supplies ("Gloria's", "we", "us", or "our"), collects, uses, and discloses your personal information when you visit or make a purchase from gloriascakeandcandy.com (the "Site"), shop in our store in Culver City, or otherwise communicate with us (collectively, the "Services"). This policy is also our notice at collection under California law, including for information we collect in our store.

Information We Collect

Information you give us directly — your name, billing and shipping address, phone number, email address, payment confirmation, account credentials, order history, class registrations, and anything you include when you contact us.

Information from in-store purchases — when you buy something in our store, we record what you bought, the amount, and the date. If you choose to give us your email address or phone number at the register (for example, to get an emailed receipt), or you already have an account with us, we link the purchase to that contact information. We may also note how you heard about Gloria's if you tell us. Giving us your email or phone number at the register is optional; a paper receipt is always available.

Photos and requests for edible image printing — when you use our edible image form, we collect the photo or artwork you upload, your name, email address, the size you choose, your requested pickup date, any notes you add, and how you reached the page (such as the web address you came from and advertising click identifiers from Google, Meta, and Microsoft).

Information collected automatically — when you use the Site, we and our service providers automatically collect certain information about your device and how you interact with the Site ("Usage Data"), using cookies, pixels, and similar technologies. Usage Data may include your IP address, device and browser information, approximate location derived from your IP address, and information about your interaction with the Site, such as pages viewed and items added to your cart.

Information from third parties — we may receive information about you from vendors and service providers, such as Shopify (our e-commerce and point-of-sale platform) and our payment processors.

Advertising and Analytics Technologies We Use

We want to be specific about the tracking technologies on the Site and why they are there:

Meta (Facebook/Instagram) Pixel and Conversions API — used to measure the effectiveness of our advertising on Meta platforms and to show you more relevant ads. Data shared may include pages viewed, items viewed or purchased, and browser and device identifiers. Learn more or adjust your Meta ad preferences at facebook.com/ads/preferences.
Google Analytics and Google Ads — used to understand how visitors use the Site and to measure and improve our Google advertising. Learn more at policies.google.com/technologies/partner-sites.
Microsoft Clarity — used to understand how visitors interact with the Site (for example, session replays and heatmaps) so we can improve it.
OpenAI Ads pixel — used on our edible image printing page to measure whether our advertising on OpenAI's platforms leads to edible image requests. Data shared may include the steps you take on that page and, if you submit a request, a hashed copy of your email address.
Shopify analytics — our store platform's built-in analytics, used to operate the store, prevent fraud, and understand sales.

"Hashed" means converted into a code before it leaves our systems. Hashing is not anonymous: the partner compares the code with information it holds to find matching accounts.

In-store purchases and Meta. If you give us your email address or phone number at the register, or your purchase is linked to your account with us, we send Meta Platforms, Inc. information about that purchase through Meta's Conversions API: your email address and phone number, first and last name, ZIP code and country, and a customer number we assign, each hashed; and the date and time, amount, and the products and quantities you bought. Meta uses this information to tell us whether people who saw our ads bought in our store and to help deliver and target our ads, and, as Meta's Business Tools Terms allow, may also use it to improve and personalize the ads and content it shows people. We do not send card numbers or payment details. We send only purchases made after we posted notice of this practice at our register, and never purchases by customers who have opted out.

Edible image requests. When you submit an edible image request, our form sends Meta and Google measurement events for that request so we can tell which ads bring people to us; any identifiers included are hashed first. Our OpenAI Ads pixel receives a hashed copy of your email address as described above.

Edible-image purchase measurement with Google. With your advertising permission, we share Google a hashed version of your email address, advertising click identifiers, and whether your edible-image request led to a paid purchase. This can include the purchase date, value, and an order reference. Your photo is not shared with Google for this measurement. You can decline advertising cookies and still request a print.

Customer lists. We have uploaded hashed lists of customer email addresses and phone numbers to Meta so that our ads can reach existing customers, and people similar to them ("Custom Audiences" and "Lookalike Audiences"). Before any future upload, we remove customers who have opted out.

Under California law, these disclosures to advertising partners may be considered a "sale" or "sharing" of personal information, or "targeted advertising." You can opt out as described below.

Your Cookie Choices and Consent

Where required by the law of your region (including California), advertising and analytics technologies on the Site do not run until you give consent through our cookie banner. You can change your choices at any time using the cookie preferences link in the Site footer or by clearing your cookies and making a new choice when the banner reappears. We also honor the Global Privacy Control (GPC) browser signal: if your browser sends GPC, we treat it as a request to opt out of the "sale" or "sharing" of your information for that browser. To make sure your opt-out also covers your in-store purchases and customer lists, use one of the ways below.

How to Opt Out of Sale or Sharing

You can opt out of our selling or sharing your personal information, including sending your in-store purchases to Meta and including you in customer lists, in any of these ways:

tell the cashier, during a sale or at any other time;
email hello@gloriascakeandcandy.com or call (323) 289-8807, and give us the email address or phone number you use with us; or
use our Your Privacy Choices page and enter the email address you use with us.

You do not need an account to opt out. We act on opt-outs as soon as we can and no later than 15 business days after we receive them. To keep honoring your choice, we keep a hashed code of your email address and phone number on our opt-out list.

How We Use Your Information

Providing the Services — processing orders and payments, fulfillment, shipping and pickup, returns, emailed receipts, class registrations, edible image requests, and customer support.
Marketing and advertising — sending marketing emails or texts you have signed up for, showing you relevant ads for our products, and measuring whether our ads lead to purchases and requests online and in our store (subject to your cookie and opt-out choices).
Understanding our business — for example, learning how customers heard about us.
Security and fraud prevention — protecting the Site, our business, and our customers.
Legal compliance — complying with applicable law and protecting or defending our legal rights.

How We Disclose Personal Information

Service providers — Shopify (hosting, e-commerce, and point-of-sale platform), payment processors, shipping and fulfillment partners, email and SMS providers, Cloudflare (which hosts our edible image form and its request log), Resend (which delivers edible image request and confirmation emails), and IT/support vendors, who process information on our behalf.
Advertising partners — Meta, Google, Microsoft, and OpenAI, as described above.
Legal and safety — where required by law, subpoena, or to protect our rights or the safety of others.
Business transfers — in connection with a merger, acquisition, or sale of the business.

We do not sell personal information for money, but some disclosures to advertising partners described above may count as a "sale" or "sharing" under California law. We do not sell your photos.

Your California Privacy Rights

What we collect, and who receives it. In the past 12 months we have collected the following categories of personal information, from the sources and for the purposes described above:

Identifiers (name, email address, phone number, postal address including ZIP code, account login, IP address, device and browser identifiers, advertising click identifiers) — disclosed to service providers; "sold" or "shared" (as California law defines those terms) with Meta, Google, Microsoft, and OpenAI as described above.
Customer records (name, address, phone number, payment confirmation) — disclosed to service providers. Card numbers are handled by our payment processors.
Commercial information (products purchased online and in our store, order history, class registrations, edible image requests, how you heard about us) — disclosed to service providers; purchase details "sold" or "shared" with Meta and, for edible-image requests with advertising permission, Google as described above.
Internet or other electronic network activity (pages viewed, clicks, items added to cart, session replays) — disclosed to service providers; "sold" or "shared" with Meta, Google, Microsoft, and OpenAI subject to your cookie choices.
Approximate geolocation (city or region derived from your IP address) — disclosed to service providers.
Photos (images you upload for edible image printing) — disclosed to service providers only, to prepare your order.

Account login credentials are used only to let you sign in. We do not use or disclose sensitive personal information for any purpose that would give you a right to limit its use.

If you are a California resident, you have the right to:

Know/Access — request the personal information we hold about you and how we use and disclose it.
Delete — request that we delete personal information we have collected from you.
Correct — request that we correct inaccurate personal information.
Opt out of "sale"/"sharing" — as described in "How to Opt Out of Sale or Sharing" and "Your Cookie Choices and Consent".
Non-discrimination — we will never penalize you for exercising your rights.

To exercise any of these rights, email us at hello@gloriascakeandcandy.com, call (323) 289-8807, or ask at the register. We will verify your request using information associated with your account or orders. You may use an authorized agent where the law allows. If we decline a request, you may appeal by replying to our decision.

Residents of other states with privacy laws (including Colorado, Connecticut, Texas, Oregon, and Virginia) may have similar rights and may exercise them the same way.

Data Retention and Security

We keep each category of personal information only as long as needed for the purposes above, then delete or de-identify it:

Order and purchase records (online and in-store), including the contact details on them — for as long as required for tax, accounting, returns, and legal purposes, generally up to seven years.
Account and marketing contact information — while you have an account or remain subscribed, and until you ask us to delete it.
Edible image photos and request details — until your order is complete, plus the time needed for our normal business records; ask us and we will delete them sooner.
Usage Data — for the retention period set in each of Shopify analytics, Google Analytics, and Microsoft Clarity, after which that tool deletes it.
Our opt-out list — hashed codes of opted-out email addresses and phone numbers, for as long as we share information with advertising partners.
Information we have sent to advertising partners — kept by those partners under their own terms, such as Meta's Business Tools Terms.

No system is perfectly secure, but we use commercially reasonable safeguards, and payment card data is handled by our PCI-compliant payment processors, not stored by us. Please send only images you have the right to print; we print the image you provide and cannot verify who owns it.

Children

The Site is not directed to children, and we do not knowingly collect personal information from children under 16 or knowingly "sell" or "share" the personal information of anyone under 16.

International Visitors

The Site is operated from the United States, and your information is processed in the United States.

Changes to This Policy

We may update this Privacy Policy from time to time. We will post the revised version here and update the "Last updated" date.

Contact Us

Sweet Help Inc. dba Gloria's Cake & Candy Supplies
11117 Washington Blvd, Culver City, CA 90232
(323) 289-8807 · hello@gloriascakeandcandy.com