Privacy

Layers by Zahra Asad is a home-based dessert business in Thornhill/Vaughan, Ontario. Zahra Asad is responsible for the personal information described here. To reach us about anything on this page, email zahrahyder2020@gmail.com or call (416) 388-3249.

When you place an order:

• Your name, email address and phone number.
• Whether you chose pickup or delivery, the date and time window, and for delivery your street address, city and postal code.
• What you ordered, including the options you picked and any message or note you added.
• Anything you type into the order notes box.

If you create an account, we also keep your name, phone number and whether you asked for occasional emails about new flavours.

If you send a custom order request, we keep what you described, the date you want it and your contact details.

We record the network address your request came from for a short period. This is only used to stop automated abuse of our order and contact forms.

When you place an order, we also record the network (IP) address it came from, the approximate area that address is in, your device's time zone and the type of device and browser you used, and we check whether the address belongs to a VPN or proxy service. Only we see this, to spot orders that may not be genuine before we bake them. It is deleted after 90 days.

We do not see or store card numbers. Card payments are handled entirely by Stripe on their own pages, and they tell us only that a payment succeeded. Passwords are handled by our login provider and are stored in a scrambled form we cannot read.

• To bake the right thing and get it to the right person on the right day.
• To send you an order confirmation and to contact you if something about your order needs sorting out.
• To keep the records Canadian tax rules require us to keep.
• To spot orders that may not be genuine before we bake them.
• To send you occasional emails about new flavours, but only if you asked for those.

We use a small number of services to run the shop. Each one only receives what it needs:

• Stripe processes card payments and receives your name, email and order total.
• Resend delivers our emails and receives your email address and the contents of the confirmation.
• Supabase stores our database, accounts and photos, on servers in Canada.
• Vercel hosts the website itself.
• Google receives the delivery address you type, to suggest matching addresses and to work out how far away it is for the delivery fee. Nothing else about you or your order is sent.
• proxycheck.io receives the network address an order came from, and tells us whether it belongs to a VPN or proxy service. Nothing else about you or your order is sent.

We do not sell your information, and we do not share it for advertising.

Your cart is stored in your own browser, not on our servers, until you check out. If you sign in, we set a cookie so you stay signed in. We do not use advertising or tracking cookies.

Order records are kept for at least six years, because Canadian tax rules require it. Account details are kept until you ask us to close your account. Custom order requests are kept while we are talking about them and for a reasonable period afterwards. The network address and approximate location recorded with an order are deleted after 90 days.

• You can ask what we hold about you, and we will tell you.
• You can ask us to correct anything that is wrong.
• You can ask us to delete your account and your details, except for order records we are legally required to keep.
• You can stop marketing emails at any time, using the link in the email or by replying to us.

Email us and we will act on it. If you are not happy with how we handled a request, you can contact the Office of the Privacy Commissioner of Canada.

This shop is meant for adults placing orders. We do not knowingly collect information from children.

If this page changes we will update the date at the top. See also our terms of sale.