top of page

Privacy Policy

​

Sinner Buns Last updated: July 31, 2026

Sinner Buns ("we," "us," or "our") operates the website sinnerbuns.net (the "Site"). This Privacy Policy explains what personal information we collect, how we use it, who we share it with, and the privacy rights available to you — including rights for California residents under the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA).

We are a pop-up bakery based in San Diego, California. If you have any questions about this policy, contact us at daria@ohmycakecali.com or (619) 904-2283.

1. Information We Collect

We collect only the information we need to take and fulfill bakery orders and to run our website. Depending on how you use the Site, this may include:

Information you give us directly:

  • Contact and order details — name, email address, phone number, and pickup details when you place an order, sign up for an event, or contact us.

  • Payment information — payment card details are collected and processed by our third-party payment processor. We do not store full card numbers on our own systems.

  • Account details — if you create a members account, your login information and any preferences you save.

  • Communications — messages you send us through forms, email, or social media.

  • Marketing sign-ups — your email or phone number if you opt in to receive promotions or newsletters.

Information collected automatically:

  • Usage and device data — IP address, browser type, device information, pages visited, and how you interact with the Site, collected through cookies and similar technologies (see Section 4).

  • Analytics and advertising data — collected through Google Analytics and the Meta (Facebook/Instagram) Pixel where you have consented (see Sections 3 and 4).

We do not knowingly collect personal information from children under 13.

2. How We Use Your Information

We use your information to:

  • Take, prepare, and fulfill your bakery orders and manage pickups;

  • Process payments and send order confirmations, receipts, and invoices;

  • Respond to your questions and provide customer support;

  • Manage your members account, if you create one;

  • Send you marketing or promotional messages only where you have opted in, and let you opt out at any time;

  • Understand how visitors use our Site so we can improve it (analytics);

  • Show and measure advertising, where you have consented;

  • Keep the Site secure and prevent fraud;

  • Comply with our legal obligations.

3. Third-Party Services We Share Information With

We do not sell your personal information for money. We share information only with service providers that help us run our business, and only as needed:

  • Wix — our website hosting, online store, forms, events, gift cards, invoicing, and members area platform.

  • Payment processor — securely processes your card payments. (Card data is handled by the processor, not stored by us.)

  • Google Analytics (Google LLC) — helps us understand website traffic and usage.

  • Meta Pixel (Meta Platforms, Inc.) — helps us measure and target Facebook and Instagram advertising.

  • Email/SMS marketing provider — sends promotional messages to people who have opted in.

Some of these providers may use the information for their own purposes as described in their own privacy policies. Under CCPA/CPRA, certain data sharing for cross-context behavioral advertising (such as through the Meta Pixel) may be considered "sharing," and you have the right to opt out (see Section 6).

We may also disclose information when required by law, to enforce our Terms, or to protect the rights, safety, and property of Sinner Buns, our customers, or others.

4. Cookies and Tracking Technologies

We use cookies and similar technologies to run the Site, remember your preferences, understand usage, and support advertising. We group cookies into categories:

  • Essential — required for the Site and checkout to work. Always active.

  • Functional — remember choices you make to improve your experience.

  • Analytics — help us understand how visitors use the Site (e.g., Google Analytics).

  • Marketing/Advertising — used to deliver and measure ads (e.g., Meta Pixel).

When you first visit the Site, our cookie consent banner lets you Accept or Decline non-essential cookies. Non-essential cookies (analytics and marketing) are blocked until you consent. You can change your choices at any time using the Cookie Preferences link, and you can also control cookies through your browser settings.

For more detail, see our separate Cookie Policy.

5. How We Protect Your Information

We use industry-standard measures to protect your information, including HTTPS/SSL encryption on our Site, secure payment processing through our processor, and access controls. No method of transmission or storage is 100% secure, but we work to protect your information and limit what we collect to what we actually need.

We keep personal information only as long as necessary to fulfill the purposes described in this policy or as required by law.

6. Your California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have the right to:

  • Know / Access — request the categories and specific pieces of personal information we have collected about you, the sources, the purposes, and the third parties we share it with.

  • Delete — request that we delete personal information we collected from you, subject to legal exceptions.

  • Correct — request that we correct inaccurate personal information.

  • Opt out of sale/sharing — opt out of the "sharing" of your personal information for cross-context behavioral advertising (such as through the Meta Pixel). We do not sell personal information for money.

  • Limit use of sensitive information — to the extent we process any sensitive personal information, request that we limit its use.

  • Non-discrimination — we will not discriminate against you for exercising these rights.

How to exercise your rights: Email us at daria@ohmycakecali.com or call (619) 904-2283. We will verify your request (for example, by confirming details associated with your order or account) and respond within the timeframes required by law. You may also use an authorized agent to submit a request on your behalf.

Opt-out signals: Where required, we honor browser-based opt-out preference signals such as Global Privacy Control (GPC).

7. Your Marketing Choices

If you have opted in to marketing emails or texts, you can opt out at any time by clicking "unsubscribe" in any email, replying STOP to a text, or contacting us directly. Opting out of marketing does not affect transactional messages such as order confirmations.

8. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will change the "Last updated" date above and, where appropriate, notify you. Please review this page periodically.

9. Contact Us

Sinner Buns 780 Hollister Street, San Diego, CA 92154 Email: daria@ohmycakecali.com Phone: (619) 904-2283

Cookie Policy

Last updated: July 31, 2026

This Cookie Policy explains how Sinner Buns uses cookies and similar technologies on sinnerbuns.net, and how you can control them. It should be read together with the Privacy Policy above.

What are cookies?

Cookies are small text files placed on your device when you visit a website. They help the site work, remember your preferences, and understand how the site is used. We also use similar technologies such as pixels and local storage, which we refer to collectively as "cookies" in this policy.

Categories of cookies we use

Essential cookies (always active) Required for the website and checkout to function — for example, keeping items in your cart, processing an order, and keeping the site secure. The Site cannot work properly without these, so they do not require consent.

Functional cookies (consent-based) Remember choices you make to improve your experience, such as your language or preferences, and enable certain features like our members area.

Analytics cookies (consent-based) Help us understand how visitors find and use the Site so we can improve it. We use Google Analytics for this. These cookies are only set after you consent.

Marketing / Advertising cookies (consent-based) Used to deliver and measure advertising on platforms like Facebook and Instagram. We use the Meta Pixel for this. These cookies are only set after you consent.

How to change or withdraw your consent

When you first visit the Site, our cookie consent banner lets you Accept or Decline non-essential cookies. You can change your choice at any time by clicking the Cookie Preferences link, which reopens the banner.

You can also manage or delete cookies through your browser settings. Note that blocking essential cookies may cause parts of the Site — including checkout — to stop working. Where required, we also honor browser-based opt-out signals such as Global Privacy Control (GPC).

Third-party cookies

Some cookies are set by the third-party services described in the Privacy Policy (for example, Google and Meta). These providers may use the information they collect in accordance with their own privacy policies. We only allow their analytics and marketing cookies to load after you have given consent.

California Privacy Notice (CCPA/CPRA)

Last updated: July 31, 2026

This notice supplements the Privacy Policy above and applies to California residents. It describes the categories of personal information we collect and your rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act.

Categories of personal information we collect

In the past 12 months, we may have collected the following categories of personal information (as defined by the CCPA):

  • Identifiers — name, email address, phone number, IP address, account login.

  • Customer records — order and pickup details, and payment information processed by our payment provider.

  • Commercial information — products purchased or considered, and order history.

  • Internet/network activity — browsing and interaction data on the Site, collected through cookies where you consent.

  • Geolocation data — approximate location derived from IP address.

  • Inferences — limited preferences drawn from your activity, used to improve service and (with consent) advertising.

We do not collect government identifiers, biometric information, or financial account numbers directly (card data is handled by our payment processor). We do not knowingly collect information from children under 16.

Sources of personal information

We collect this information directly from you (when you order, sign up, or contact us), automatically through cookies and similar technologies, and from service providers such as Wix, Google, and Meta.

Why we collect it

We use personal information for the purposes described in Section 2 of the Privacy Policy — fulfilling orders, processing payments, customer support, running our members area, marketing (with consent), analytics, security, and legal compliance.

Sale and sharing of personal information

We do not sell your personal information for money. However, our use of advertising technologies such as the Meta Pixelmay be considered "sharing" for cross-context behavioral advertising under the CPRA. You have the right to opt out of this sharing (see below), and declining marketing cookies in our banner opts you out.

Your rights

As a California resident, you have the right to:

  • Know and access the personal information we have collected about you;

  • Delete personal information we collected from you, subject to legal exceptions;

  • Correct inaccurate personal information;

  • Opt out of the sharing of your personal information for cross-context behavioral advertising;

  • Limit the use of any sensitive personal information;

  • Not be discriminated against for exercising your rights.

How to submit a request

Email daria@ohmycakecali.com or call (619) 904-2283. We will take reasonable steps to verify your identity — for example, by confirming details tied to your order or account — before responding, and we will reply within the timeframes required by law. You may use an authorized agent to submit a request on your behalf, and we may ask that agent for proof of authorization.

If we deny your request, you may appeal by replying to our response. We honor Global Privacy Control (GPC) opt-out signals where required.

bottom of page