Privacy Policy

Last updated 15 September 2026

Who we are

Sweet & Swirl is a home baking business on the Northern Beaches of Sydney, baking for parties and events. This policy covers the website at sweetandswirl.au. If you have a question about any of it, please get in touch.

What we collect

Website analytics

We use Google Analytics 4 to understand how the site is used. It places cookies in your browser and tells us:

• which pages you looked at, and how long for
• how you arrived (a search, a link from somewhere else, or typing the address in)
• roughly where you are, usually to the level of a city or suburb, worked out from your IP address
• your device type, browser and screen size

We also record an event when somebody clicks one of our email links, which tells us that an enquiry was started and which page it came from. It does not tell us who you are, and it cannot see the email you go on to write.

This is reported to us as totals and trends. We have no way to pick an individual visitor out of it, and we do not try to.

Email

The only way to contact us through this site is by email. If you write to the address on our contact page, we receive whatever you choose to put in that email: your name, your address if you are arranging delivery, and the details of your order. Our email runs on Google Workspace. We keep enquiries so we can reply to you and keep a record of orders. We do not add you to a mailing list, because we do not have one.

Hosting

The site is hosted by Vercel, which keeps standard server logs including visitor IP addresses. These exist for security and reliability, not for us to read.

Fonts

The page loads its typefaces from Google Fonts, which means Google receives your IP address when the page loads, in the same way it would for any site using them.

What we do not collect

• There are no forms anywhere on this site, so there is nothing to fill in and nothing submitted.
• The delivery suburb checker runs entirely inside your browser. The suburb you tap is never sent to us or to anybody else.
• We take no payments on this site, so we never see card details.
• There are no accounts and no logins.
• There are no advertising, remarketing or social media tracking tags.
• We do not sell your information, and we never will.

Cookies

The only cookies this site sets are the two used by Google Analytics. One tells repeat visits apart from new ones, the other keeps track of a single browsing session. Both expire on their own, and neither holds your name, your email address or anything you have typed.

Turning analytics off

You are welcome to. Any of these work, and none of them will break the site:

• Install Google's official Analytics opt-out add-on for your browser.
• Block or clear cookies in your browser settings, or use a private window.
• Use a content blocker. Most of them stop Google Analytics by default.

Who else sees it

We do not sell or trade anything we collect. The only outside parties involved are the services that run the site and our email: Google, for Analytics, Workspace and Fonts, and Vercel, for hosting. Both are large providers who process data on servers outside Australia, including in the United States. We would also disclose information if the law required us to, which has never happened.

How long we keep it

Google Analytics holds the visit level data for 14 months, after which Google deletes it automatically. Figures that have already been totalled up into our reports, such as how many people visited in a particular month, stay after that, but they are counts rather than anything tied to a person.

Emails stay in our mailbox so we have a record of orders. If you would like us to delete an email exchange with you, ask and we will.

Seeing or correcting what we hold

Email us and we will tell you what we have, correct anything that is wrong, or delete it. In practice this will be the emails you have sent us, since the analytics side holds nothing that identifies you.

Children

We bake a lot of birthday cakes, but this site is aimed at the adults ordering them. We do not knowingly collect information from children.

Where the law sits

Small businesses under the turnover threshold in the Australian Privacy Act 1988 are generally not bound by the Australian Privacy Principles. We have written this policy and set the site up this way regardless, because it is a reasonable way to treat people's information.

Changes

If we change how any of this works, we will update this page and the date at the top of it.