Privacy Policy
Last updated: 13 May 2026
Who we are
WaraCake is a custom bakery based in Lagos, Nigeria. This policy explains what personal data we collect when you visit waracake.com or place an order, why we collect it, and the rights you have over it. Contact us at info@waracake.com.
What we collect
- Order details you submit through the order form: your name, email, phone number, delivery area and address, delivery date and time window, recipient name and relationship, gift message, cake details, dietary notes, and budget range.
- Technical data needed to deliver and secure the site: IP address, user-agent, and request timestamps. We use this to rate-limit abuse and detect spam.
- Cookies: only essential cookies by default. Optional analytics cookies are loaded only after you accept the cookie banner.
How we use it
- To prepare and deliver your cake order.
- To respond to enquiries and provide quotes.
- To detect and prevent fraud, abuse, and spam submissions.
- To meet our tax, accounting, and other legal obligations under Nigerian law.
Who we share it with
We do not sell personal data. We share order data only with the delivery rider assigned to your order, our hosting and database provider, and authorities when required by law. Payment data, when applicable, is handled by the payment processor — we do not store card details on our servers.
How long we keep it
Order records are retained for up to 7 years to comply with Nigerian tax and accounting requirements. Spam submissions and access logs are retained for up to 90 days for security review, then deleted.
Your rights
You can ask us to access, correct, or delete the personal data we hold about you, or to stop processing it. Email info@waracake.com from the address tied to your order and we will respond within 30 days. If you are in the EU, UK, or California you have additional rights under GDPR / UK GDPR / CCPA — the same email applies.
Security
We use TLS in transit, role-based database access, server-side input validation, and rate limiting. Vulnerability reports go to info@waracake.com — see our security.txt.
Changes
We may update this policy as the service evolves. The date above shows the last revision.