Privacy policy

PRIVACY POLICY

Last Updated: September 18, 2026

Charm Concepts LLC d/b/a Surprise Cake (“Surprise Cake,” “we,” “us,” or “our”) respects your privacy and is committed to protecting your personal information.

This Privacy Policy describes how we collect, use, disclose, and otherwise process personal information when you visit or use SurpriseCake.com (the “Site”), purchase our products, communicate with us, participate in our promotions, or otherwise interact with us (collectively, the “Services”).

By using our Services, you acknowledge the practices described in this Privacy Policy.

1. PERSONAL INFORMATION WE COLLECT

The personal information we collect depends on how you interact with us and may include the following categories.

Information You Provide to Us

We may collect information that you provide directly to us, including:

Name
Billing and shipping address
Email address
Telephone number
Payment and transaction information
Order history
Account information
Gift recipient information, including the recipient's name, address, telephone number, birthday or delivery date, and gift message
Communications you send to us
Customer service inquiries
Reviews, survey responses, or other information you choose to provide

Because many of our products are purchased as gifts, you may provide personal information about another person, such as a gift recipient. If you provide another person's information to us, you represent that you have the authority to provide that information for the purpose of fulfilling your order.

Payment Information

Payments made through our Site are processed by Shopify and/or third-party payment processors. We generally do not directly store complete payment card numbers.

Our payment processors may collect and process payment card details and other information necessary to complete your transaction, prevent fraud, and comply with applicable law.

Information Collected Automatically

When you visit or interact with our Site, we and our service providers and advertising partners may automatically collect certain information, including:

IP address
Browser type
Device type
Operating system
Device identifiers
Referring website or source
Pages viewed
Links clicked
Products viewed
Products added to a shopping cart
Checkout activity
Purchase activity
Date and time of visits
Approximate location derived from an IP address
Advertising identifiers
Cookie and similar technology information
Information regarding how you interact with our Site and advertisements

We may collect this information through cookies, pixels, tags, software development kits, APIs, and similar technologies.

2. HOW WE USE PERSONAL INFORMATION

We may use personal information for purposes including:

Processing and fulfilling orders
Delivering products to you or your designated gift recipients
Processing payments and refunds
Providing order confirmations and shipping updates
Communicating with you about an order
Providing customer service
Maintaining customer accounts
Remembering your preferences
Operating and improving our Site and Services
Understanding how customers use our Site
Measuring the effectiveness of our advertising
Personalizing advertisements and marketing
Sending marketing emails and promotional communications where permitted by law
Conducting promotions, surveys, or other marketing activities
Detecting and preventing fraud, abuse, security incidents, and illegal activity
Protecting our customers, employees, business, and others
Enforcing our terms and policies
Complying with legal, tax, accounting, regulatory, and other obligations
Establishing, exercising, or defending legal claims
Supporting a merger, acquisition, financing, restructuring, sale of assets, or similar business transaction

We may also use information for other purposes disclosed to you at the time it is collected or with your consent.

3. COOKIES, PIXELS, AND SIMILAR TECHNOLOGIES

We and third parties we work with use cookies, pixels, tags, and similar technologies to operate the Site, remember preferences, understand how visitors use our Site, measure advertising performance, and provide or help provide relevant advertising.

These technologies may collect information about your activity on our Site and, depending on the technology and your privacy settings, may associate that activity with information about your activity on other websites or services.

We currently use or may use technologies and services provided by companies including:

Shopify, which powers our ecommerce store and helps us process transactions and understand customer interactions;
Google, for analytics, advertising, measurement, and related services;
Meta, including the Meta Pixel, to measure advertising performance, understand customer interactions, create audiences, and provide advertising through platforms such as Facebook and Instagram;
TikTok, for advertising, analytics, conversion measurement, and audience-related services;
Microsoft, for advertising, analytics, measurement, and related services; and
Mailchimp, for email marketing, marketing automation, audience management, and related services.

These providers may use cookies, pixels, or similar technologies to collect information about your interaction with our Site.

Depending on how our advertising services are configured, information shared with advertising partners may include browser or device information, IP address, information about pages or products viewed, shopping activity, purchase activity, and certain identifiers.

Some providers may combine information received from us with information they receive from other businesses or through their own services, subject to their own privacy policies.

You may be able to control certain cookies and tracking technologies through the cookie or privacy controls available on our Site, through your browser settings, or through controls offered by the applicable third party.

Disabling cookies may affect the availability or functionality of portions of our Site.

4. ADVERTISING AND ANALYTICS

We may work with advertising and analytics providers to understand how people interact with Surprise Cake and to advertise our products.

For example, we may use information collected through the Meta Pixel, Google advertising technologies, TikTok advertising technologies, and Microsoft advertising technologies to determine whether an advertisement resulted in a visit or purchase, measure campaign performance, create advertising audiences, or deliver advertisements that may be more relevant to you.

Under certain U.S. state privacy laws, some of these activities may be considered “selling,” “sharing,” or processing personal information for “targeted advertising,” even though we do not receive money from an advertising company in exchange for your personal information.

Where required by applicable law, we provide consumers with the ability to opt out of these activities.

5. EMAIL AND MARKETING COMMUNICATIONS

If you provide us with your email address or otherwise opt in to marketing communications, we may send you promotional messages about Surprise Cake products, offers, promotions, or other news.

We use Mailchimp and may use other service providers to help manage and deliver these communications.

You may unsubscribe from promotional email communications at any time by using the unsubscribe link included in our marketing emails.

Even if you unsubscribe from marketing communications, we may continue to send you non-promotional communications, such as order confirmations, shipping notifications, customer service messages, or other communications regarding a transaction or our ongoing business relationship with you.

6. HOW WE DISCLOSE PERSONAL INFORMATION

We may disclose personal information to third parties when reasonably necessary to operate our business and provide our Services.

These parties may include ecommerce and technology providers such as Shopify; payment processors and financial institutions; shipping carriers and fulfillment providers; marketing, advertising, and analytics providers such as Meta, Google, TikTok, Microsoft, and Mailchimp; and professional service providers such as legal, accounting, IT, security, fraud prevention, insurance, and consulting providers.

We may also disclose personal information when necessary to comply with applicable law, legal process, or governmental requests; protect our rights, property, customers, employees, or others; detect or prevent fraud or security incidents; or establish, exercise, or defend legal claims.

Personal information may also be disclosed or transferred in connection with an actual or proposed merger, acquisition, financing, reorganization, bankruptcy, sale of assets, or other corporate transaction involving all or part of our business.

7. GIFT RECIPIENT INFORMATION

Surprise Cake is a gifting business, and customers frequently provide information about people other than themselves.

We use gift recipient information primarily to fulfill and deliver the requested gift, communicate regarding delivery when appropriate, provide customer service, prevent fraud, and operate our business.

Gift recipient information may be disclosed to service providers, fulfillment partners, and shipping carriers as necessary to fulfill and deliver the order.

We do not treat a gift recipient as having opted into Surprise Cake marketing merely because someone purchased a gift for that recipient.

8. DATA RETENTION

We retain personal information for as long as reasonably necessary for the purposes for which it was collected, including to fulfill transactions, maintain business and financial records, provide customer service, prevent fraud, resolve disputes, enforce agreements, and comply with legal, tax, accounting, and regulatory requirements.

Retention periods may vary depending on the type of information, the purpose for which it is processed, and applicable legal requirements.

When personal information is no longer reasonably necessary for these purposes, we may delete, anonymize, or otherwise dispose of it in accordance with our data retention practices and applicable law.

9. SECURITY

We use reasonable administrative, technical, and physical safeguards designed to protect personal information.

However, no method of transmission over the Internet or electronic storage system is completely secure. Accordingly, we cannot guarantee the absolute security of personal information.

10. YOUR PRIVACY CHOICES

Depending on where you live and applicable law, you may have certain rights regarding your personal information.

These rights may include the right to:

Request access to personal information we maintain about you;
Request correction of inaccurate personal information;
Request deletion of certain personal information;
Obtain a portable copy of certain personal information;
Opt out of the sale or sharing of personal information;
Opt out of targeted advertising;
Limit certain uses or disclosures of sensitive personal information, where applicable;
Withdraw consent where processing is based on consent; and
Appeal our decision regarding a privacy request where applicable.

These rights are subject to exceptions and limitations under applicable law and may differ depending on your place of residence.

We will not unlawfully discriminate against you for exercising applicable privacy rights. We may need to verify your identity before processing certain requests.

11. DO NOT SELL OR SHARE MY PERSONAL INFORMATION / TARGETED ADVERTISING

Surprise Cake does not sell personal information for money in the conventional sense.

However, our use of advertising and analytics technologies, including certain pixels, cookies, and similar technologies provided by advertising partners, may constitute “sale,” “sharing,” or “targeted advertising” under the privacy laws of certain U.S. states.

Residents of states providing these rights may opt out of eligible activities through the privacy or data-sharing opt-out controls available on our Site.

Where required by applicable law, we will also recognize applicable browser-based opt-out preference signals, such as Global Privacy Control (“GPC”), as a request to opt out for the browser or device sending the signal.

Because these signals are generally browser- and device-specific, you may need to enable the signal separately on each browser and device you use.

12. U.S. STATE PRIVACY RIGHTS

Residents of certain U.S. states may have additional rights under applicable state privacy laws.

Depending on your state of residence and whether the applicable law applies to Surprise Cake, these may include rights to access, know, correct, delete, or obtain a copy of personal information and rights to opt out of certain processing for targeted advertising, sale, or sharing.

You may exercise applicable rights by emailing hello@surprisecake.com or by using the privacy controls available on our Site.

Where permitted by law, you may designate an authorized agent to submit a request on your behalf. We may require proof that you authorized the agent and may separately verify your identity.

If we deny a privacy request, residents of states providing a right of appeal may appeal our decision by emailing hello@surprisecake.com and including “Privacy Appeal” in the subject line.

13. INTERNATIONAL USERS

Surprise Cake is based in the United States.

If you access our Services from outside the United States, your personal information may be transferred to, stored in, or processed in the United States or other countries where we or our service providers operate.

Where required by applicable law, we use appropriate safeguards for international transfers of personal information.

If you are located in the European Economic Area, United Kingdom, or Switzerland, applicable law may provide additional rights regarding your personal data, including rights to access, correct, erase, restrict, or object to certain processing; receive certain data in a portable format; and withdraw consent.

Depending on the circumstances, our legal bases for processing may include performance of a contract, our legitimate interests, compliance with legal obligations, and your consent where required.

You may also have the right to lodge a complaint with the applicable data protection authority.

14. CHILDREN'S PRIVACY

Our Services are not directed to children under 13, and we do not knowingly collect personal information directly from children under 13 through our Site.

Our products may be purchased for children as gifts. Information supplied by an adult purchaser about a child for purposes of fulfilling or delivering an order does not mean that the child is a user of our Services.

If you believe a child has provided personal information directly to us without appropriate authorization, please contact us at hello@surprisecake.com.

15. THIRD-PARTY WEBSITES AND SERVICES

Our Site may contain links to websites, platforms, or services operated by third parties.

We are not responsible for the privacy practices, security, or content of third-party websites or services. We encourage you to review their privacy policies before providing information to them.

16. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy periodically to reflect changes to our practices, technologies, legal requirements, or business operations.

When we update this Privacy Policy, we will revise the “Last Updated” date at the top of this page. Where required by law, we may provide additional notice regarding material changes.

17. CONTACT US

If you have questions about this Privacy Policy, our privacy practices, or would like to exercise an applicable privacy right, please contact us:

Charm Concepts LLC d/b/a Surprise Cake
907 Main Street
Woburn, MA 01801
United States

Email: hello@surprisecake.com
Website: SurpriseCake.com

Please include sufficient information for us to understand and respond to your request. We may ask you to provide additional information to verify your identity before fulfilling certain privacy requests.

Contacting Us

For any questions or concerns you may have regarding this Privacy Policy and our information and data collection and use practices, please ease contact us here.