Privacy Policy
This explains how Whipped Possibilities collects, uses, and protects your information when you place an order or reach out to us through this site, in line with the Data Privacy Act of 2012 (Republic Act 10173) and the guidance of the National Privacy Commission.
What we collect
When you place an order or send an inquiry, we collect:
- Your name, phone number, and email address
- Your delivery address, if you're requesting delivery
- Your event date and details about the cake you want, including any inspiration photos you upload
- Proof of payment you upload, such as a GCash receipt screenshot
- Basic technical information sent with your order, such as your IP address and browser type, used only to help catch spam and abuse
We don't collect payment card numbers or GCash passwords. Payments happen directly between you and Whipped Possibilities through GCash or in person, not through this website.
Why we collect it
- To prepare, confirm, and fulfil your cake order
- To contact you about your order
- To protect the order form from spam and abuse
- To keep basic business records
We don't use your information for advertising, and we don't sell or rent it to anyone.
Who we share it with
Only two outside services touch your information, both as the technical infrastructure that runs this site: Supabase, which securely stores order data on our behalf, and Resend, which sends the automated emails about your order. Neither is allowed to use your information beyond providing that service to us. The Whipped Possibilities team are the only people who read your order details.
How long we keep it
- Order and contact details: kept for 24 months after your order is completed, then personally identifying details are removed from our active records.
- Inspiration or reference photos you upload: kept for 90 days after your event date, then deleted. If Whipped Possibilities would like to feature your cake in the public gallery, we'll ask you directly, uploading a photo to your order is never treated as permission to publish it.
- Payment receipt screenshots: kept for 6 months after your balance is marked fully paid, then deleted.
- Technical spam-prevention data: kept for 90 days, then deleted.
Your rights
Under the Data Privacy Act, you have the right to be told what information we hold about you and why, to ask for a copy of it, to ask us to correct anything that's wrong, to ask us to delete it once it's no longer needed, to object to how we're using it, and to file a complaint with the National Privacy Commission if you believe we've mishandled it.
To use any of these rights, email hello@whippedpossibilities.com. We'll respond within a reasonable time.
How we protect it
Your information is stored with access controls limited to the Whipped Possibilities team, it's never publicly browsable. Payment screenshots and reference photos are kept in private storage, not public folders.
Changes to this policy
If this policy changes in a meaningful way, we'll update the date at the top and note what changed.
Questions
Email hello@whippedpossibilities.com or call 0916 466 6209.