LEGAL · PRIVACY
Privacy Policy
This policy explains what personal information Sestra’s Cakes & Pastries Shop collects when you order from us or visit sestraskitchen.com, why we need it, and how we keep it safe.
Last updated: October 11, 2026 · Effective: October 11, 2026
Privacy at a glance
The short version. The full details are below.
Your name, contact details, event date, cake details and where to deliver.
We don’t sell, rent or trade your information, and we don’t send marketing emails.
Google Analytics, Microsoft Clarity and Jetpack show us how the site is used. They don’t tell us who you are.
Ask us anytime to see, correct or delete your information.
1. Who we are
Sestra’s Cakes & Pastries Shop (“Sestra’s”, “we”, “us”) is a cake and pastry shop in Purok Nangka, Isagani, Maasin City, Southern Leyte 6600, Philippines. We make customized cakes, dessert buffets and pastries, and sell baking supplies.
We decide how the personal information in this policy is collected and used, so under the Data Privacy Act of 2012 (Republic Act No. 10173) we are the personal information controller. This policy covers information we collect through sestraskitchen.com, our Facebook Page and Messenger, phone calls and texts, email, and our shop.
2. What information we collect
Information you give us
When you ask about or place an order, book a dessert buffet, or contact us, we collect:
- Contact details: your name, mobile number, email address, and Facebook name if you message us on Messenger.
- Order details: your event date and time, the cake design, size, flavor and theme you want, any name, age or message to put on the cake, and design photos you send us.
- Delivery details: your delivery address or event venue, and a contact person on the day.
- Payment details: if you pay by GCash or online bank transfer, the screenshot or reference number you send us, which may show your account name and part of your account or mobile number. We never ask for your card numbers, PINs, passwords or one-time codes.
- Anything else you choose to tell us, such as food allergies or dietary needs so we can prepare your order safely.
Information collected automatically on our website
When you browse sestraskitchen.com, our analytics and website tools collect technical information such as:
- Your IP address (shortened or hashed where the tool allows), device type, browser and operating system
- The pages you view, how long you stay, how you scroll and click, and the site or search that brought you here
- Your approximate location (city or country level), worked out from your IP address
This information tells us how the site is used. We don’t use it to find out who you are. See section 6 and our Cookie Policy for details.
We don’t run a customer account system, newsletter or online checkout on the site right now. If we add online ordering later, we’ll update this policy first.
3. How we use your information
We use your information to:
- Reply to your questions and send you quotes
- Prepare, bake, decorate and deliver your order, or have it ready for pickup
- Confirm your payment and keep records of orders and payments
- Contact you about your order, for example to check a design detail or confirm delivery time
- Keep allergy or dietary notes with your order so we prepare it safely
- Understand how people use our website so we can improve it
- Keep our website secure and working well
- Meet our legal, tax and accounting duties
Our legal basis. We process your information because it’s needed to fulfil your order (contract), because we have a legitimate interest in running and improving our shop and website, because the law requires it (for example, keeping sales records), or because you’ve given us your consent.
We don’t use your information for automated decision-making or profiling, and we don’t send promotional emails or texts. If we ever want to, we’ll ask you first.
4. Photos of our cakes
We love sharing our work. We may post photos and videos of the cakes and dessert setups we make on our website and social media pages.
- We photograph the cakes and setups only, not you or your guests.
- If a cake has a name, age or message on it, it may be visible in the photo.
- Don’t want your cake posted, or want the name blurred? Just tell us when you order, or message us anytime and we’ll edit or take the photo down.
5. Who we share it with
We don’t sell, rent or trade your personal information. We only share it when it’s needed to serve you or when the law requires it:
- Our team: only the people preparing, decorating or delivering your order see the details they need.
- Delivery: our delivery team or rider receives your name, number and delivery address to bring your order.
- Payment providers: when you pay by GCash, Maya or bank transfer (such as BPI), your payment is handled by that provider under its own privacy policy. We only see the confirmation you send us.
- Messaging and social platforms: messages you send on Facebook Messenger are handled by Meta under its own privacy policy.
- Website service providers: our web host, Google (Google Analytics), Microsoft (Clarity) and Automattic (Jetpack) process website data on our behalf.
- Government and legal: when required by law, a court order or a government agency, or to protect our rights, property or safety, or the safety of others.
Some of these providers (Google, Microsoft, Meta, Automattic) store data on servers outside the Philippines. We use well-known providers that protect data under their own security standards and agreements.
6. Cookies and website analytics
Cookies are small files a website saves on your browser. We use them to understand how visitors use our site, not to show you ads.
Tools we use
| Tool | What it does | Provider |
|---|---|---|
| Google Analytics 4 | Counts visits and shows which pages people view and how they found us | |
| Microsoft Clarity | Shows anonymous heatmaps and session replays (clicks, scrolling) so we can fix confusing pages. Text you type is masked. | Microsoft |
| Jetpack | Basic site stats, security and faster image loading | Automattic |
| LiteSpeed Cache | Makes pages load faster. It doesn’t track you. | LiteSpeed (on our host) |
You can block or delete cookies in your browser settings, or use Google’s opt-out add-on for Google Analytics. Our site still works without them. The full list of cookies, what each one does and how long it lasts is in our Cookie Policy.
7. How long we keep your information
We keep your information only as long as we need it:
- Order, payment and delivery records: for as long as tax and accounting rules require us to keep business records, then we delete or destroy them.
- Messenger and email conversations: for as long as needed to handle your order and any follow-up questions. You can ask us to delete our copy sooner (see section 9).
- Allergy or dietary notes: only until your order is completed, unless you ask us to remember them for future orders.
- Website analytics: according to each tool’s retention settings, which we keep to the shortest practical period (GA4: 14 months · Clarity: up to 13 months for heatmaps and 30 days for most session recordings).
8. How we protect your information
- Our website uses HTTPS encryption.
- Only team members who need your details to complete your order can see them.
- Our devices and accounts are password-protected.
- We don’t store card numbers, PINs or banking passwords, and we’ll never ask for them.
No system is completely secure. If we learn of a data breach that could harm you, we’ll notify you and the National Privacy Commission as the law requires.
9. Your rights
Under the Data Privacy Act, you have the right to:
- Be informed about how your personal data is collected and used
- Access the personal data we hold about you
- Correct data that’s wrong or out of date
- Object to processing, and withdraw consent you’ve given
- Ask us to delete or block your data when it’s no longer needed or was processed unlawfully
- Get a copy of your data in a format you can use (data portability)
- Claim damages if you’re harmed by inaccurate, incomplete, outdated or unlawfully used data
- File a complaint with the National Privacy Commission
To use any of these rights, message us on Messenger, email info@sestraskitchen.com or call 0956 597 6185. We may ask you to confirm who you are first, and we’ll reply within 15 days.
If you’re not happy with our answer, you can contact the National Privacy Commission at privacy.gov.ph or info@privacy.gov.ph.
10. Children’s privacy
Our services are for adults ordering for themselves or their families. Many of our cakes are for children’s birthdays and christenings, and the child’s name or age usually comes from the parent or adult placing the order. We don’t knowingly collect personal information directly from children under 18. If you think a child has sent us their personal information, contact us and we’ll delete it.
11. Links to other websites
Our site links to other sites and apps, such as Facebook, Messenger, Google Maps, Instagram, TikTok, YouTube and Pinterest. Their privacy practices are their own, so please read their privacy policies.
12. Changes to this policy
We may update this policy when our services, tools or the law change, for example if we add online ordering. We’ll post the new version here and change the “Last updated” date at the top.
DATA PRIVACY CONTACT
Questions about your data?
Contact our data protection officer, Apple Gil, about this policy or your personal information.
Read our Terms & Conditions, Cookie Policy and Refund & Returns Policy.
MessengerSestra’s Cakes & Pastries Shop
Phone0956 597 6185
AddressPurok Nangka, Isagani, Maasin City, Southern Leyte 6600, Philippines