Privacy Policy

This Privacy Policy describes the practices regarding the collection, use and disclosure of personal information collected by CAKES Body, LLC, Cakes International UK Ltd., and its affiliated entities (“CAKES Body” or “we,” “us,” or “our”) through our websites and platforms that include a link to this Privacy Policy (collectively, the “Services”). This Privacy Policy also describes the measures we take to safeguard the information and tell you how to contact us about our privacy practices and to exercise your privacy rights. For purposes of this Privacy Policy, “personal information” refers to any data that identifies, relates to, or could reasonably be linked to a consumer or their household.

Please review this Privacy Policy carefully. In addition, please review the Terms of Service, which govern your use of the Services. If you do not agree to the terms of this Privacy Policy and the applicable Terms of Service, please do not use the Services or provide personal data to us.

Information You Provide Us Directly
Information We Collect By Automated Means
Information We Collect From Third Parties About You
Business or Commercial Purposes for Which Information is Collected
How We Share Your Information
Third Party Advertising and Analytics
Global Privacy Control
Changing Your Information
Your Options
Third Party Content and Links
How We Protect Personal Information
Consent to Transfer
General Audience Site
Updates to Our Privacy Policy
Your Privacy Rights - Notice to California, Nebraska, and Texas Residents
Additional Notice to California Residents
Notice to Nevada Residents
Notice to Canada Residents
Notice to EEA, UK, and Switzerland Residents
How to Contact Us

Information You Provide Us Directly

We may collect personal data from you directly, automatically when you visit the Services through cookies and other technologies, and sometimes from third parties.

We use the term “personal data” and “personal information” to mean any data that could be used to identify you, including “personal information” such as your contact data (name, address, email address, phone number), demographic data (birth date), account data, financial data (credit or debit card number through a third party payment provider, shipping/billing data, and transaction history). We will treat additional data, including IP addresses and cookie identifiers, as “personal information” or “personal data” where required by applicable law, and we will treat certain personal data as “sensitive data” as required by applicable law.

Note that we may de-identify or pseudonymize personal data so that it is non-personal, such as aggregating or converting it to a code, sometimes using a function commonly known as “hash”. We maintain and use de-identified data without attempting to re-identify it, except where permitted by applicable law, such as to determine whether our de-identification processes satisfy legal requirements. We will treat de-identified or pseudonymized data as non-personal to the fullest extent allowed by applicable law. If we combine non-personal data with personal data, then we will treat the combined data as personal data under this Privacy Policy and as required by applicable law.

We may collect the following:

Identifiers, such as name, mailing address, IP address, email address.
Demographic information, such as age and gender
Commercial information, such as your purchasing history, payment information, or research data that you provide when you agree to participate in our surveys or research activities.
Non-Precise geolocation, information related to your non-precise location, including your IP address.
Internet or electronic network activity, such as browsing history, search history, banners you click, and pages you visit on the Services.
Inferences drawn from other personal information, such as preferences, characteristics, predispositions and behaviors.

Information We Collect By Automated Means

When you visit or otherwise interact with our Services, we and partners may collect certain “Usage Information” by automated means, using technologies such as cookies, web server logs, image pixels, web beacons and JavaScript (collectively referred to as “Tracking Technologies”). Usage Information may include your device IP address or other unique device identifier, web browser characteristics, device characteristics, operating system, language preferences, referring URLs, clickstream data, and dates and times of website visits. In some cases, we may directly collect location information through your device. You may be able to turn off the collection of location information through the settings on your device.

We use the following types of Tracking Technologies to automatically collect information when you interact with us online:

Cookies and Local Storage. A “cookie” is a text file that websites send to a visitor’s computer or other internet-connected device to uniquely identify the visitor’s browser or to store information or settings in the browser. These technologies may be used for many purposes by us, our service providers, and our third-party business partners, such as automatically collecting Usage Information, enabling features, serving advertisements to you online, and remembering your preferences. We may use cookies and other technologies to help keep your use of the Services more secure, to study traffic patterns on the Services, to study the effectiveness of our customer communications, to maintain the integrity of the Services, to measure crash analytics and other maintenance related information, to manage and measure the performance of advertisements displayed on or delivered by or through the Services, and to personalize your experience through the Services, such as to recognize you when you return to the Services. If you do not want to accept cookies, you can block them by adjusting the settings on your Internet browser or via settings we make available on our Services. You can find more information about cookies and how they work at www.allaboutcookies.org.

Pixel Tags. Pixel Tags (also known as web beacons or clear) are small pieces of code used to collect usage analytics. They help us to determine, for instance, whether a page has been viewed or not and, if so, how many times. When you ask us to send you information on a promotion or a newsletter, we may use pixel tags to establish when an email is opened.

Embedded Scripts. An embedded script is programming code designed to collect information about your interactions with our Services, such as the links you click on. The code is temporarily used by our server or a third-party service provider or business partner while you browse or interact with our Services and is deactivated or deleted when you disconnect from our Services.

We may record session interactions with Service user interfaces, including what pages you visit on the Services, how long you visit those pages, the links you click, and your path through the Services, for website analytics purposes, solely for our internal business purposes, to improve the Services and our products and services.

Information We Collect From Third Parties About You

We may receive information about you from third parties, such as business partners (including companies that assist us with online advertising and analytics), data providers who enhance the information we have about you, sources of publicly available information, our parent company, affiliates and subsidiaries, and other users of the Services (such as when they provide your information to send you one of our products).

We may also facilitate interactions with social media platforms, like Instagram. When you interact with social media through the Services, we will receive information about you from the social media service and you will be choosing to share information about your interactions with CAKES Body with that social media service.

The information collected and stored by the third party remains subject to the third party’s privacy practices, including, without limitation, whether the third party continues to share information with us, the types of information shared, and your choices with regard to what is visible to others on that third-party website or service. The third party may allow you to remove the application or feature, in which case we will no longer collect information about you through the application or feature but may retain the information previously collected.

If you choose to post information to a third-party platform, that information may be public.

Business or Commercial Purposes for Which Information is Collected

We may use your personal information for any of the following purposes:

Providing our services to you and allowing you to participate in the features the Services offer, including to create and manage your account;
Recognizing you across devices so as to improve your experience with us;
Identifying your preferences and tailor our content and recommendations for you;
Processing your transactions;
Providing information on products we think you may be interested in;
Responding to your requests;
Verifying your identity, including without limitation, for purposes of product reviews;
Provide interest-based content and advertising to you based on the way you browse or shop on the Services and other platforms;
Improving our services and marketing endeavors;
Communicate with you about your requests, questions and comments, and administer your participation in special events, programs, surveys, contests, sweepstakes, and other offers or promotions from us and third party marketing offers from our trusted partners, as well as from other companies;
Contact you about your use of the Services or similar administrative communications, or to provide you with Service updates, newsletters and other informational materials;
Operate, evaluate and improve our Services and business (including developing new products and services; determining the effectiveness of our sales, marketing and advertising; and analyzing and enhancing our products and Services);
For internal business purposes;
Complying with the law and protecting the safety, rights, property, or security of CAKES Body, the Services, consumers, and the general public;
Investigating and preventing fraud, illegal activities, and activities that violate our policies, and resolving technical issues reported about the Services;
Other purposes disclosed to you at the time you provide your information, or otherwise with your consent.

How We Share Your Information

We may share your personal information as allowed by law and as disclosed at the time you provide your information, as described in this Privacy Policy, with your consent, and in the following circumstances:

Third Party Service Providers. We may share personal information with third party service providers or allow those third parties to collect information about you, to enable them to perform services on our behalf, such as website hosting, conducting website usage analytics, sending email, text, or other communications, fulfilling orders, providing marketing assistance and data analysis, processing payments, and other services. Additionally, we may share various information relating to our users and fraudulent or potentially fraudulent activities with our fraud prevention and similar service providers, and they will use this information to help us and their other clients prevent fraudulent and illegal transactions.

Our Business Partnerships. When you use the Services to interact with third parties who operate certain portions of the Services, those third parties may share certain information about you with us (as described above) and we may also share certain information with that third party. It also includes information regarding your use of the Services and the products you purchase.

At Your Request and When You Post Content Publicly. We may share information when you direct us to do so. For example, you may be presented with an opportunity to receive marketing offers from a third party, or you may choose to write a product review, send a message, or engage with a social media service or third party application or feature, through which information about you is shared. Please note that we are not responsible for the privacy practices of third parties.

In addition, we or a third-party social networking or review platform may offer features, such as message boards and other public areas, where you can choose to interact with others and/or submit content or post publicly. Content that you post publicly may be viewed, collected, and used by others, and the protections of this Privacy Policy will not apply.

Affiliated Entities: We may share information with our affiliated companies for internal business, analytical, and operational purposes.

Sweepstakes, Contests and Promotions: We may offer sweepstakes, contests, and other promotions (any, a “Promotion”) that may require registration. By participating in a Promotion, you are agreeing to the provisions, conditions, or official rules that govern the Promotion, which may contain specific requirements of you (including, except where prohibited by law, allowing the sponsor(s) of the Promotion to use your name, voice, likeness or other indicia of persona in advertising or marketing materials). If you choose to enter a Promotion, personal information may be disclosed to third parties or the public in connection with the administration of such Promotion, including, without limitation, in connection with winner selection, prize fulfillment, as required by law, or as permitted by the Promotion’s terms or official rules (such as on a winners list).

Administrative/Legal Reasons. We also may disclose information about you (i) if we are required to do so by law, regulation or legal process (such as a court order or subpoena), (ii) in response to requests by government agencies, such as law enforcement authorities, (iii) when we believe disclosure is necessary or appropriate to prevent physical harm or financial loss or in connection with an investigation of suspected or actual illegal activity; (iv) to protect and/or defend the Terms of Service, or other policies applicable to a Service; or (v) to respond to an emergency.

Business Transitions. We reserve the right to transfer any information we have about you in the event we sell or transfer all or a portion of our business or assets (including in the event of a reorganization, dissolution or liquidation); by providing your information, you understand and agree that we may transfer such information to the acquiring entity without your further consent, where permitted by law.

SMS/MMS/RCS Message Data. Notwithstanding anything else in this policy, CAKES Body does not share personal data we collect specific to our SMS/MMS/RCS text message programs (such as mobile number and record of consent) with unaffiliated third parties for their own direct marketing purposes without your consent.

Third Party Advertising and Analytics

We work with third party business partners (such as network advertisers, ad agencies, analytics providers, and other advertising partners) to serve CAKES Body ads online, to serve third party ads on the Services, and to provide us with information regarding the use of the Services and the effectiveness of our advertisements. These third parties may set and access their own tracking technologies on your device (including cookies and web beacons), and they may otherwise collect or have access to Usage Information and other information about you, some of which may be personal information under various state laws. Some of these parties may collect personal information over time when you visit the Services or other online websites and services. We may share information, typically information that has been hashed or otherwise de-identified or pseudonymized (including hashed email addresses), Usage Information, and location information, with third party advertising companies, analytics providers and other third parties for the purpose of serving you more relevant ads on and off the Services.

We may use a variety of companies to serve our advertisements. Some of these companies are members of the Network Advertising Initiative (“NAI”) or the Digital Advertising Alliance (“DAA”) Self-Regulatory Program for Online Behavioral Advertising and you may want to visit the following webpages, which provide “opt-out” mechanisms for participating companies: https://optout.networkadvertising.org and https://optout.aboutads.info.

Google Analytics. Provided by Google, Inc. (“Google”). Google Analytics uses cookies to help us analyze how users use the Services. The data generated by the cookie about your use of the Services will be transmitted to and stored by Google. Google will use this data for the purpose of evaluating your use of the Services, compiling reports on Services activity for operators and providing other services relating to Services activity and internet usage, including tracking which pages of our Services you visit so we can optimize your experience with the Services. Google may also transfer this data to third parties where required to do so by law, or where such third parties process the data on Google’s behalf. You can opt-out from the collection of this data by Google by downloading and installing a browser plug-in at https://tools.google.com/dlpage/gaoptout. For more information on Google Analytics privacy practices, here.

Please note opting out through these mechanisms does not opt you out of being served advertising and you will continue to receive generic ads while online.

Global Privacy Control

Global Privacy Control (“GPC”) is a technical specification in your browser settings that you can use to automatically inform websites of your privacy preferences with regard to third party online tracking. To find out more about and set up GPC, please visit https://globalprivacycontrol.org/#about.

Changing Your Information

You are responsible for maintaining the accuracy of the information you submit to us, such as your contact information provided as part of registration. Certain Services allow you to correct or update certain personal information you have provided. Note that when you edit your personal information or change your preferences on a Service, information that you remove may persist internally for our administrative purposes or within backup media. If you have made any public postings on a Service, these communications cannot generally be removed.

Your Options

We offer you certain choices about how we communicate with you and what information we collect from you.

You can always opt out of receiving marketing emails by following the opt-out instructions provided to you in those e-mails. Please note that we reserve the right to send you certain communications relating to your account or use of the Services or other service functions, such as administrative and services announcements. These transactional account messages may be unaffected if you choose to opt out from marketing emails.

To update your preferences, ask us to remove your information from our mailing lists or submit a request, you can also contact us as specified in the How To Contact Us section of this Privacy Policy.

Third Party Content and Links

The Services may contain content that is served by someone else or links to third-party content or websites. We do not control this content or these sites. The third-party operators and content providers use their own cookies or other tracking technologies, and they may independently collect information from or about you. We are not responsible for the privacy practices employed by any third party. The Services may contain content that is served by someone else or links to third-party content or websites. We do not control this content or these sites. The third-party operators and content providers use their own cookies or other tracking technologies, and they may independently collect information from or about you. We are not responsible for the privacy practices employed by any third party.

How We Protect Personal Information

We maintain commercially reasonable and appropriate administrative, technical and physical safeguards designed to maintain the personal information we collect in a secure manner. Even though we follow reasonable procedures to try to protect the information in our possession, no data transmission over the Internet, wireless transmission or electronic storage of information can be guaranteed to be 100% secure. We cannot ensure or warrant the security of any information we collect. You use the Services and provide us information at your own risk.

Consent to Transfer

We are based in the United States and the information we collect is governed by United States law. By accessing or using a Service or providing us with any information, you consent to the transfer, processing and storage of your information outside of the United States and other countries, jurisdictions in which the privacy laws may not be as comprehensive as those in the country where you reside and/or are a citizen. Personal information processed or stored in another jurisdiction may be subject to access requests from governments, courts, or law enforcement in accordance with the laws of that jurisdiction.

General Audience Site

Our Services are intended for a general audience and are not intended for use by anyone younger than the age of 18 (or the age of majority in their jurisdiction) and we do not knowingly collect personal information of individuals younger than 18.

Updates to Our Privacy Policy

To the extent allowed by applicable law, we reserve the right to change this Privacy Policy at any time without prior notice. We will notify you of material changes by posting the changed or modified Privacy Policy on our Services. We may also provide notice to you in other ways, such as through contact information you have provided. Any changes will be effective immediately upon the posting of the revised Privacy Policy unless otherwise specified. Your continued use of any of the Services after the effective date of the revised Privacy Policy will constitute your consent to those changes to the fullest extent allowed by applicable law. However, we will provide notice and obtain your consent if required. Note that you may need to consent to our new policies in order to continue to use the Services.

Your Privacy Rights - Notice to California, Nebraska, and Texas Residents

Residents of California and Nevada, see below. If you are a resident of California, Nebraska, or Texas depending on your state of residence, you may have the following rights with respect to the personal information we have collected about you:

To know what categories of data we have collected about you, the categories of sources of this data, the categories of personal information we have disclosed to third parties, and the categories of such third parties (“Right to Know”)
To confirm whether we are processing your personal information and request to access such data ("Right to Access").
That we correct inaccurate personal information we hold about you (“Right to Correct”).
That we delete the personal information we hold about you (“Right to Delete”).
To obtain a copy of the personal information previously provided by you to us and, to the extent feasible and legally permitted, in a readily usable format to allow data portability (“Right to Obtain”/"Data Portability").
To opt-out out of:

the processing of your personal information for the purposes of targeted advertising (“Right to Opt-Out of Targeted Advertising”). Please review the Third Party Advertisers and Analytics and Similar Third Parties section above for information on industry tools and device settings that may be available to you.
the processing of your personal information for the purposes of a sale (“Right to Opt-Out of Sale”).
profiling in furtherance of legal or similarly significant effects ("Right to Opt-Out of Profiling").

How to Submit a Privacy Request

You may submit a request to exercise your rights by emailing us at privacy@cakesbody.com.

We will respond to your request within the time required under the applicable law in the covered state. If we require more time, we will inform you of the reason and extension period in writing where permitted by the applicable law.

We will not discriminate against you for exercising any of your data privacy rights.

Authorized Agents

Where permitted by law, you may designate an authorized agent to submit requests to exercise the right to opt out of sales or targeted advertising on your behalf. If you do use an authorized agent, we may require verification that you provided the authorized agent permission to make a request on your behalf.

Verification Procedures

In order to process your request to exercise some of your rights, we must first verify it. We may do this by asking you to: Provide personal identifiers we can match against information we may have collected from you previously; and/or

Confirm your request using the email and/or telephone account stated in the request.

We will not collect additional personal information from you for the sole purpose of your exercising your rights under the data protection laws. Similarly, we will not require you to create an account with us, solely for the purpose of exercising your rights under the data protection laws.

Appealing Your Request

If, for any reason, you are not satisfied with our handling of your privacy request, you have the right to submit an appeal and can do so by emailing us.

Additional Notice to California Residents

This California Privacy Notice is Updated and Effective as of July 21, 2025.

This California Privacy Notice supplements the CAKES Body Privacy Policy and applies only to California residents. This California Privacy Notice sets forth the disclosures and rights for California Consumers regarding their Personal Information, as required by the California Consumer Privacy Act of 2018, the California Privacy Rights Act of 2020, and any implementing regulations adopted thereunder (collectively, the “CCPA”). Terms (including defined capitalized terms) used in this California Privacy Notice have the same meanings given in the CCPA, unless otherwise defined herein.

EXERCISING YOUR CALIFORNIA RIGHTS

California Consumers have the right to request: (1) that we disclose to you what Personal Information we collect, use, disclose, and sell, including the right to request that we provide to you the categories and specific pieces of Personal Information we have collected about you ("Right to Know"); (2) that we delete the Personal Information we collect about you ("Right to Delete"); (3) that we correct inaccurate Personal Information we hold about you (“Right to Correct”); (4) to opt-out of the sharing of your Personal Information to a third party for cross-context behavioral advertising (i.e., targeted advertising) (“Right to Opt-Out of Sharing”); and (5) to opt-out from the sale of their Personal Information (“Right to Opt-Out of Sale”), all subject to the meanings and exceptions set forth in the CCPA. More information on each of these rights is below.

In your request, you must provide enough information to allow us to verify you are the person about whom we collected personal information, or their authorized representative. You must also describe your request with enough detail so that we can understand, evaluate, and respond to it. We can’t respond to your request if we can’t verify your identity. Making such a request does not require you to create an account with us, and we will only use the information you provide in a request to verify your identity.

Verifying Requests

We will take reasonable steps to verify your identity based upon the information you provide and the type of request you are making. When you exercise your Right to Know, Right to Delete, and/or Right to Correct, we may ask that you provide us with information, beyond your full name, in order to verify your identity and fulfill your request. If we are unable to verify that the individual submitting the request is the same individual about whom we have collected information (or someone authorized by that individual to act on their behalf), we will not be able to process the request. Pursuant to the CCPA, we will not require you to verify your identity, beyond asking for the information necessary to complete your request, when you exercise your Right to Opt-Out of Sharing or Right to Opt-Out of Sale.

Authorized Agents

If you are an authorized agent submitting a request on a user’s behalf, please complete the applicable request per the instructions below. We will follow up to request a signed, written permission signed by the individual who is the subject of the request authorizing you to make the request on their behalf. The written permission must state your full legal name, the full legal name of the individual who is the subject of the request and must be clear about the permission granted. Alternatively, you as authorized agent may submit a copy of a power of attorney under Probate Code sections 4000-4465. In either case, please also indicate in your email the nature of your request. The consumer’s identity, in addition to your own as an authorized agent, will need to be independently verified in order for us to be able to fulfill your request. We may also ask the consumer to directly confirm with us that they provided you permission to submit a request. Please keep in mind that if we do not receive adequate proof that you are authorized to act on the consumer’s behalf, we may deny the request.

Right to Know, Correct, and Delete

California Consumers have the right to know what information we have collected about you (the categories and the specific pieces of information), to request that we delete information we have collected about you, and to correct inaccurate information we hold about you.

If you are a California Consumer and would like to exercise your Right to Know, Correct, or Delete please email your request to us at privacy@cakesbody.com.

In order to have us provide specific pieces of information, we may require a signed declaration under penalty of perjury that you are the consumer whose Personal Information is the subject of the request.

Please note that as part of the verification process, once you submit a request to delete, we may follow up and require you to confirm that you want your information deleted.

A Note on the Right to Limit the Use and Disclosure of Sensitive Personal Information

Under the CCPA, a business must only provide the Right to Limit the Use and Disclosure of Sensitive Personal Information when such use is not collected or processed for the purpose of inferring characteristics about a consumer, or does not fall under certain statutory exceptions, pursuant to CCPA §1798.121. We do not collect or use such data for non-permitted purposes, and we therefore do not offer such opt-out right at this time.

Do Not Share or Sell

California Consumers have the right to opt-out of the sales and sharing of your Personal Information to a third party for cross-context behavioral advertising (i.e., targeted advertising), whether or not for monetary or other valuable consideration. If you are a California Consumer and would like to exercise your Right to Opt-Out of Sale or Sharing, please email us at privacy@cakesbody.com

In addition, the Digital Advertising Alliance also offers tools for California consumers to send requests under the CCPA to opt out of the sale of personal information by some or all of the participating companies. Please visit the DAA website to learn more and utilize their opt-out tools: https://www.privacyrights.info/.

Submit an Appeal

If, for any reason, you would like to appeal our decision relating to your request, you may submit an appeal and do so by emailing privacy@cakesbody.com. Please include your full name, the basis for your appeal, and any additional information to consider.

Data Retention

We will retain all categories of your Personal Data for as long as it is reasonably necessary for the purposes set out in this Privacy Policy and this California Privacy Notice, considering the time period reasonably necessary to: provide the Services to you; exercise the choices and rights you have requested; comply with our contractual obligations; enforce our terms for use of the Services; and, comply with legal and regulatory requirements. Except as noted differently on specific pages, we retain your personal information while you have an account with us, or while you are using our Services or continuing to visit us.

Users Younger than 18

CAKES Body does not knowingly sell or share Personal Information of California consumers younger than 18 years of age.

Right to Non-Discrimination for the Exercise of a Consumer’s Privacy Rights

California consumers have the right to not receive discriminatory treatment for exercising CCPA rights. We will not discriminate against you for exercising your CCPA rights.

Notice of Financial Incentive

Under California regulation, certain aspects of promotion which we may offer from time to time, may provide certain benefits to consumers and be considered a financial incentive program. We may collect personal information from you in connection with any such programs, e.g., contact information (name, email address, residential address) and commercial information (like purchase history) for a number of reasons, including to administer the program, contact you with regard to your account (if any), to provide the benefits to you, to better serve you, and to fulfill your requests associated with the program.

To opt into such programs, as set forth herein you will need to provide certain information, and potentially register for an account, agree to certain applicable program terms, or otherwise follow the instructions associated with the programs.

To the extent that CAKES Body provides programs that may be considered a financial incentive because the program is directly or reasonably related to the collection, deletion or retention of consumer personal information, the value is reasonably related to the overall value we receive from the personal information participants provide specific to the program minus the costs and expenses we incur in providing the program.

Do Not Track Signals

Some browsers have incorporated "Do Not Track" (DNT) features that can send a signal to the websites you visit indicating you do not wish to be tracked. To find out more about "Do Not Track," you may wish to visit here.

Global Privacy Control

PERSONAL INFORMATION THAT CAKES BODY COLLECTS

The Personal Information we collect about you will depend upon how you use our Services or otherwise interact with us. Accordingly, we may not collect all of the below information about you.

In addition to the below, we may collect and/or use additional types of information and will do so after providing notice to you and obtaining your consent to the extent such notice and consent is required by the CCPA.

Category of Personal Information Collected	Business or Commercial Purposes for which Information is Collected We use PI for purposes as described below and in the section titled “Business or Commercial Purposes for Which Information is Collected	Categories of Third Parties with whom this Information is Disclosed for Business Purposes We share PI with third parties as described below and in the section titled “How We Share Your Information	Categories of Third Parties to Whom this Type of Information is Shared or Sold for Cross-Context Advertising (i.e., targeted advertising)
Identifiers This category includes information such as name, mailing address, IP address, email address, or account name. We may collect this type of information from: · Consumers; · Cookies and tracking technologies; · Third party social media companies; · Third party business partners.	We may use this type of information to: · Enable you to use Services, such as to process your requests or orders, contact you about administrative matters, and provide customer service; · Send you marketing communications; · Enhance and personalize your Services experience; · Administer contests, promotions, events, market research, or other marketing campaigns; · Statistical analysis and research, and demographic profiling purposes; · Troubleshoot, protect, and improve the Services; · Carry out other purposes required by law or for internal business purposes; · Carry out other purposes which are disclosed to you and to which you consent (where required by law).	We may disclose this type of information to: · Third party service providers; · Third parties when you agree to or direct that we share your information with them; · Third parties as needed for legal or business purposes; · Third parties who may acquire your information in a business transfer.	We may disclose this type of information to: Third party advertising, analytics, and other marketing business partners may have access to this data.
Any categories of personal information described in subdivision (e) of Section 1798.140 This category includes information such as name, signature, address, or phone number. Note: Information in this category may overlap with other categories. We may collect this type of information from: · Consumers; · Cookies and tracking technologies; · Our affiliates; · Third party social media companies; · Third party business partners.	We may use this type of information to: · Enable you to use Services; · Send you marketing communications; · Enhance and personalize your Services experience; · Administer contests, promotions, events, market research, or other marketing campaigns; · Statistical analysis and research, and demographic profiling purposes; · Troubleshoot, protect, and improve the Services; · Carry out other purposes required by law or for internal business purposes; · Carry out other purposes which are disclosed to you and to which you consent (where required by law).	We may disclose this type of information to: · Third party service providers; · Third parties when you agree to or direct that we share your information with them; · Third parties as needed for legal or business purposes; · Third parties who may acquire your information in a business transfer.	We may disclose this type of information to: Third party advertising, analytics, and other marketing business partners may have access to this data.
Protected classification characteristics This category includes information such as age, sex (including gender), race, ethnicity, religion, marital status, and veteran/military status We may collect this type of information from: · Consumers	We may use this type of information to: · Enable you to use Services; · Enhance and personalize your Services experience; · Administer contests, promotions, events, market research, or other marketing campaigns; · Statistical analysis and research, and demographic profiling purposes; · Troubleshoot, protect, and improve the Services; · Carry out other purposes required by law or for internal business purposes; · Carry out other purposes which are disclosed to you and to which you consent (where required by law).	We may disclose this type of information to: · Third party service providers; · Third parties when you agree to or direct that we share your information with them; · Third parties as needed for legal or business purposes; · Third parties who may acquire your information in a business transfer.	We do not “sell” or “share” this information with third parties for cross-context behavioral advertising (i.e., targeted advertising).
Commercial information This category includes, for example, information about your transactions with us, including records of items considered, purchased, and returned, reviews you have written, information about your customer service contact history (such as when you interact with our customer service team), and your information about your participation in promotions and our program. We may collect this type of information from: · Consumers; · Cookies and tracking technologies; · Third party social media companies; · Third party business partners.	We may use this type of information to: · Enable you to use Services; · Enhance and personalize your Services experience; · Administer contests, promotions, events, market research, or other marketing campaigns; · Statistical analysis and research, and demographic profiling purposes; · Troubleshoot, protect, and improve the Services; · Carry out other purposes required by law or for internal business purposes; · Carry out other purposes which are disclosed to you and to which you consent (where required by law).	We may disclose this type of information to: · Third party service providers; · Third parties when you agree to or direct that we share your information with them; · Third parties as needed for legal or business purposes; · Third parties who may acquire your information in a business transfer.	We may disclose this type of information to: Third party advertising, analytics, and other marketing business partners may have access to this data.
Sensory data This category includes, for example, audio, electronic, visual, or similar information. We may collect this type of information from: · Consumers	We may use this type of information to: · Enable you to use Services; · Enhance and personalize your Services experience; · Administer contests, promotions, events, market research, or other marketing campaigns; · Statistical analysis and research, and demographic profiling purposes; · Troubleshoot, protect, and improve the Services; · Carry out other purposes required by law or for internal business purposes; · Carry out other purposes which are disclosed to you and to which you consent (where required by law).	We may disclose this type of information to: · Third party service providers; · Third parties when you agree to or direct that we share your information with them; · Third parties as needed for legal or business purposes; · Third parties who may acquire your information in a business transfer.	We do not “sell” or “share” this information with third parties for cross-context behavioral advertising (i.e., targeted advertising).
Internet or other electronic network activity information This category includes information such as details about the hardware and software you use to visit the Services, areas of the Services you visit, search history, banners you click, and login information. We may collect this type of information from: · Consumers · Cookies and tracking technologies; · Third party business partners.	We may use this type of information to: · Enable you to use Services; · Enhance and personalize your Services experience; · Administer contests, promotions, events, market research, or other marketing campaigns; · Statistical analysis and research, and demographic profiling purposes; · Troubleshoot, protect, and improve the Services; · Carry out other purposes required by law or for internal business purposes; · Carry out other purposes which are disclosed to you and to which you consent (where required by law).	We may disclose this type of information to: · Third party service providers; · Third parties when you agree to or direct that we share your information with them; · Third parties as needed for legal or business purposes; · Third parties who may acquire your information in a business transfer.	We do not “sell” or “share” this information with third parties for cross-context behavioral advertising (i.e., targeted advertising).
Inferences drawn from other personal information These inferences may relate to your preferences, characteristics, predispositions, or behaviors. We may collect this type of information from: · Consumers; · Cookies and tracking technologies; · Third party social media companies; · Third party business partners.	We may use this type of information to: · Enhance and personalize your Services experience; · Administer contests, promotions, events, market research, or other marketing campaigns; · Statistical analysis and research, and demographic profiling purposes; · Troubleshoot, protect, and improve the Services; · Carry out other purposes required by law or for internal business purposes; · Carry out other purposes which are disclosed to you and to which you consent (where required by law).	We may disclose this type of information to: · Third party service providers; · Third parties when you agree to or direct that we share your information with them; · Third parties as needed for legal or business purposes; · Third parties who may acquire your information in a business transfer.	We do not “sell” or “share” this information with third parties for cross-context behavioral advertising (i.e., targeted advertising).

California “Shine the Light”

A California resident who has provided Personal Information, as defined under California Civil Code section 1798.83, to a business with whom he/she has established a business relationship for personal, family, or household purposes (a “California Customer”) may request information about whether the business has disclosed personal information to any third parties for the third parties’ direct marketing purposes. In general, if the business has made such a disclosure of Personal Data, upon receipt of a request by a California Customer, the business is required to provide a list of all third parties to whom Personal Data was disclosed in the preceding calendar year, as well as a list of the categories of Personal Data that were disclosed. California Customers may request further information about our compliance with this law by emailing privacy@cakesbody.com. Please note that we are required to respond to one request per California Customer each year, and we are not required to respond to requests made by means other than through this email address.

Notice to Nevada Residents

Nevada provides consumers with the ability to opt out of the sale of their personal information. If you are a Nevada resident, you may submit an opt-out request by sending an email to privacy@cakesbody.com. Your request must include your full name, street address, city, state, zip code, and a valid email address so that we can contact you if needed regarding your request. If you previously provided a phone number, including it will assist us in making sure we identify you as someone who wants to opt out. You may be required to take reasonable steps as we determine from time to time to verify your identity and/or the authenticity of your request.

Notice to Canada Residents

Quebec residents please also see the Notice to Quebec Residents below.

If you are a Canadian resident and would like to submit a request to access, correct, or update your personal information, or to withdraw consent to the processing of your personal information, please email us at privacy@cakesbody.com to submit your request to our General Counsel. You may also use this contact to submit any requests for information on our privacy practices or to submit a complaint regarding our practices.

Your request or complaint must include your full name, street address, city, province, postal code, and an email address so that we are able to contact you if needed regarding this request. We may require additional information to verify your identity and/or the authenticity of the request. We cannot properly process requests that do not come through the designated request mechanism or do not contain sufficient information.

Notice to Quebec Residents

All CAKES Body personnel handling personal information will be subject to a duty of confidentiality and will ensure that personal information is handled in accordance with standard security measures. By using the Services, you acknowledge and agree that your personal information will be transferred outside of Quebec.

We will only use your personal information for the purposes stated at the point of collection or as otherwise noted in this privacy policy. Subject to applicable law, if you are a Quebec resident and would like to submit a request to be informed, access, erasure, rectification, portability, or to withdraw or restrict processing, you must submit your request by sending it to privacy@cakesbody.com or by calling 855-423-2253. You may also ask us to clarify the categories of persons that have access to your personal information and the applicable retention period. Your request or complaint must include your full name, street address, city, province, postal code, and an email address so that we are able to contact you if needed regarding this request.

Our data protection officer is in charge of the protection of personal information. You may contact our data protection officer by emailing privacy@CAKESBody.com or calling 855-423-2253.

You may submit a complaint to the Commmision d’accès à l’information du Québec (CAI) by visiting: https://www.cai.gouv.qc.ca/a-propos/nous-joindre/.

You and we confirm that it is our wish that this Privacy Policy, any terms of use, and all other related policies be drawn up in English. Vous reconnaissez avoir exigé la rédaction en anglais du présent document ainsi que tous les documents qui s'y rattachent.

Notice to EEA, UK, and Switzerland Residents

If you are a resident of the European Union or other EEA countries, or of the UK or Switzerland, the following information applies.

Purposes of processing and legal basis for processing: As explained above, we process personal data in various ways depending upon your use of our Services. We process personal data on the following legal bases: (1) with your consent; (2) as necessary to perform our agreement to provide Services; and (3) as necessary for our legitimate interests in providing the Services where those interests do not override your fundamental rights and freedoms related to data privacy.

Right to lodge a complaint: Users that reside in the EEA, UK, and Switzerland have the right to seek information and assistance or lodge a complaint about our data collection and processing actions with the supervisory authority where they reside. Contact details for data protection authorities are available here. EEA: https://edpb.europa.eu/about-edpb/board/members_en, UK: https://ico.org.uk/, Switzerland: https://www.edoeb.admin.ch/edoeb/en/home/the-fdpic/links/data-protection---switzerland.html.

Transfers: Personal data we collect may be transferred to, and stored and processed in, the United States or any other country in which we or our affiliates or subcontractors maintain facilities. We ensure that transfers of personal data to a third country or an international organization are subject to appropriate safeguards as described in Article 45-49 of the GDPR.

Withdraw consent: If we have collected personal data with your consent, you have the right to withdraw that consent at any time.

Access: You have the right to request access to personal data we collected about you and information about its sources, purposes, and sharing.

Correction: You have the right to request that we correct the personal data we hold about you if it is inaccurate or incomplete.

Erasure: You have the right to request that we erase data we have collected from you. Please note that we may have a reason to deny your deletion request or delete data in a more limited way than you anticipated, e.g., because of a legal obligation or right to retain it.

Portability: You have the right, in certain circumstances, to request that we provide your personal data to you in a format that can be transferred to another entity.

Restrict Processing: You have the right, in certain circumstances, to request that we limit our processing of your personal data if you are (1) contesting the accuracy of your personal data, (2) asserting that our processing is unlawful; (3) asserting that we no longer need to keep the data for reasons related to the establishment, exercise, or defense of legal claims, or you object to our processing.

Object: You have the right to object to our processing if we are processing your personal data based on legitimate interests, using your personal data for direct marketing (including profiling), or processing your personal data for purposes of scientific or historical research and statistics.

Automated Decision-making: You have the right, in certain circumstances, not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects on you.

Verification Procedures: We must verify your identity for everyone’s protection, so we may require you to provide us with verification information prior to accessing any records containing personal data about you. We do this by:

Asking you to provide personal identifiers we can match against information we may have collected from you previously and confirm your request using the email or telephone account stated in the request; or
Having you submit your request through your account page, which will automatically verify your identity and will result in faster processing of your request.

We will use the data you provide for verification only for the purpose of verification. We may have a reason under the law why we do not have to respond to your request or respond to it in a more limited way than you anticipated. If we do, we will explain that to you in our response.

How to Contact Us

If you have any questions about this Privacy Policy or would like to update your preferences, you may contact us by sending an email to privacy@cakesbody.com