Privacy Policy

Last updated: 6 October 2026

This Privacy Policy explains how GNT Ventures Pty Ltd, trading as Num Num's Bakery ("we", "us", "our"), collects, uses, stores, and discloses personal information in connection with the website numnumsbakery.com.au and our bakery operations at Harris Park and Riverstone, Sydney.

We are committed to complying with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

1. Information We Collect

Information you provide to us

When you place a cake order, create an account, or enquire via WhatsApp or phone, we may collect:

We never see or store your card details. Online payments are taken on Stripe’s own secure checkout page, so your card number is entered on Stripe’s systems and never on ours. Stripe tells us only that a payment succeeded, and for how much. Payments made in store at pick-up are handled at the counter.

Marketing messages

We only send marketing emails or texts if you have ticked the box asking us to. Those boxes are never pre-ticked, and we do not treat placing an order — or giving us a phone number so we can tell you your cake is ready — as permission to market to you. Every marketing message carries a way to unsubscribe, and we act on it. Messages about an order you have actually placed (a receipt, a “your cake is ready” text) are not marketing and are sent regardless.

Who we share it with

We do not sell your details, and we do not share them for anyone else’s marketing. We use a small number of providers to run the shop — Stripe for payments, Supabase for our order records, and our email and SMS senders — and they may only use your details to provide that service to us.

Information collected automatically

When you visit our website, we automatically collect certain technical information through cookies and analytics tools, including:

2. Cookies and Analytics

Our website uses the following third-party tools that set cookies:

You can control cookies through your browser settings. Disabling cookies will not affect your ability to browse this website.

3. How We Use Your Information

We use the information we collect to:

We do not use your personal information for unsolicited marketing without your consent.

4. Disclosure of Personal Information

We do not sell, rent, or trade your personal information to third parties. We may share information with:

5. Data Storage and Security

Order information communicated via WhatsApp is stored on WhatsApp's platform, subject to Meta's Privacy Policy. We take reasonable steps to protect your personal information from misuse, interference, and loss, and from unauthorised access, modification, or disclosure.

Our website is hosted on Netlify (United States). Your data may be processed outside of Australia, but is subject to appropriate privacy safeguards.

6. Your Rights

Under the Australian Privacy Act 1988, you have the right to:

To exercise any of these rights, please contact us using the details below.

7. Contact Us

For privacy-related enquiries, corrections, or complaints, please contact:

If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC).

8. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision. Continued use of our website after changes constitutes acceptance of the updated policy.