Legal
Privacy Policy.
[PLACEHOLDER · REPLACE WITH LEGAL TEAM’S INTRO] The intro paragraph explains in plain language what this policy covers and why it exists. Two to three sentences, written for humans, before the formal clauses begin.
Last updated
[DATE]
[DATE]
Effective
[DATE]
[DATE]
Version
[1.0]
[1.0]
Contents
1
Introduction
[PLACEHOLDER · BODY TEXT] This is where the opening clause of the policy goes. Typically it identifies the company by name, explains the scope of the policy, and notes the user’s deemed consent on continued use of the site. Two to four paragraphs is normal here.
A second paragraph might define key terms used throughout the document. Definitions can also be rendered in the dedicated definition-list block shown below, which gives important terms more visual weight.
- “Personal Information”
- [PLACEHOLDER · LEGAL DEFINITION] The definition of personal information as the term is used throughout this policy, often referencing specific privacy legislation such as PIPEDA, GDPR, or CCPA.
- “Services”
- [PLACEHOLDER · LEGAL DEFINITION] The definition of “Services” as used in this policy, typically covering the website, courses, memberships, and any related platforms.
- “We”, “Us”, “Our”
- [PLACEHOLDER · LEGAL DEFINITION] The legal entity referenced, with full business name, address, and incorporation details.
2
Information we collect
[PLACEHOLDER · BODY TEXT] Opening paragraph describing the general categories of information collected, and the methods of collection (directly from the user, automatically through the site, or from third parties).
Information you provide directly
This subsection covers information collected when the user actively submits it: account creation, course purchases, newsletter signups, contact form submissions, and so on.
- [Example item] Name and email address when you create an account or sign up for our newsletter
- [Example item] Billing and payment information when you purchase a course or bundle
- [Example item] Messages and inquiries you send through our contact forms
- [Example item] Content you post in our community spaces and course discussions
Information collected automatically
This subsection covers passively-collected information: IP addresses, browser details, device information, pages viewed, time on site, referring URL, and similar technical data.
Information from third parties
This subsection covers any information received from third-party services: payment processors, social media authentication providers, analytics tools, or marketing platforms.
3
How we use your information
[PLACEHOLDER · BODY TEXT] Introduction paragraph explaining the purposes for which personal information is used, framed in the language of “lawful basis” if the policy is GDPR-compliant.
- To provide and deliver the services you request, including course access, member dashboards, and customer support.
- To process payments and fulfil orders.
- To send transactional emails such as order confirmations, password resets, and important policy updates.
- To send marketing communications, where you have consented to receive them.
- To improve our services through analytics and user-experience research.
- To comply with legal obligations and protect against fraud.
Plain-English summaryWe use your information to deliver what you’ve bought, keep your account working, send you emails you’ve asked for, and make our site better. We do not sell your information to third parties.
4
Sharing & disclosure
[PLACEHOLDER · BODY TEXT] Opening paragraph clarifying the general policy on sharing (typically: we don’t sell, we share only as necessary for the operation of the services).
Service providers
Description of the categories of third parties who receive personal information in order to provide services to the site (payment processors, email providers, hosting, analytics, etc.), and the contractual protections in place.
Legal disclosures
Description of when personal information may be disclosed in response to legal process, government requests, or to protect rights and safety.
Business transfers
Description of what happens to personal information in the event of a merger, acquisition, or sale of business assets.
5
Your rights
[PLACEHOLDER · BODY TEXT] Opening paragraph identifying the user rights available under applicable privacy laws (typically: access, correction, deletion, portability, withdrawal of consent, restriction of processing).
- Right to access — request a copy of the personal information we hold about you.
- Right to correction — request that we update inaccurate or incomplete information.
- Right to deletion — request that we delete your personal information, subject to certain legal exceptions.
- Right to portability — request your data in a structured, machine-readable format.
- Right to withdraw consent — withdraw consent for marketing or other consent-based processing at any time.
- Right to lodge a complaint — file a complaint with the relevant data protection authority in your jurisdiction.
To exercise any of these rights, contact us using the details at the bottom of this page.
6
Cookies & tracking
[PLACEHOLDER · BODY TEXT] Description of the cookies and similar technologies used on the site, the purposes (essential, functional, analytics, marketing), and how users can manage cookie preferences.
Types of cookies we use
- Essential cookies — required for the site to function (login, cart, checkout).
- Functional cookies — remember your preferences, language, and previously-viewed content.
- Analytics cookies — help us understand how visitors use the site so we can improve it.
- Marketing cookies — used to deliver relevant advertising and measure campaign performance.
You can manage cookie preferences through our cookie banner or in your browser settings. Note that disabling essential cookies will prevent the site from functioning normally.
7
Data retention
[PLACEHOLDER · BODY TEXT] Description of how long personal information is retained, framed by purpose (account information retained for the lifetime of the account, transaction records retained for tax-compliance periods, marketing data retained until consent is withdrawn, etc.).
8
Children’s privacy
[PLACEHOLDER · BODY TEXT] Statement that the services are not directed at children under a stated age (typically 13 or 16 depending on jurisdiction), and the procedure for parents who believe a child has provided personal information.
9
Changes to this policy
[PLACEHOLDER · BODY TEXT] Statement that the policy may be updated, the method of notifying users of material changes (email, banner notification, updated “Last updated” date), and the user’s right to discontinue use if they disagree with changes.
10
Contact us
[PLACEHOLDER · BODY TEXT] Opening paragraph inviting the user to get in touch with questions, concerns, or rights requests.
we’re here
Questions about this policy?
For any questions about this policy or to exercise any of your rights, please reach out to us using the details below.
Finespun Cakes & Pastries[Full legal business name]
970 Bathurst Street
Toronto, Ontario · Canada
Email[hello@finespuncakes.com]
Data protection officer (if applicable)[name + email]
970 Bathurst Street
Toronto, Ontario · Canada
Email[hello@finespuncakes.com]
Data protection officer (if applicable)[name + email]