Privacy Policy
Effective July 7, 2026
Overview
Information We Collect
We collect information you provide directly when you:
- Place an order or catering request — name, email address, phone number, event details, and item selections.
- Create an account — email address and password (stored as a secure hash; we never store plaintext passwords).
- Submit a taste test survey — product ratings and preferences. This data is not linked to your identity unless you are signed in.
We do not collect payment card information. All payments are handled offline at the time of pickup.
How We Use Your Information
- To fulfill your order or respond to your catering inquiry.
- To send order confirmation and follow-up communications related to your request.
- To improve our products and website using aggregated, anonymized survey feedback.
- To maintain account security and session management.
We do not sell, rent, or share your personal information with third parties for marketing purposes.
Cookies and Session Data
This site uses essential cookies only — specifically a session cookie set by our authentication system to keep you signed in. We do not use advertising cookies, cross-site tracking, or third-party analytics services.
Because we only use cookies that are strictly necessary for the site to function, prior consent is not required under most jurisdictions. You may disable cookies in your browser, but doing so will prevent you from staying signed in.
Data Storage and Security
Your data is stored on a private server accessible only to Sugar Ghoul staff. All data is transmitted over HTTPS (TLS encryption). We retain order data for up to 24 months for record-keeping purposes, and account data for as long as your account is active.
Your Rights
Depending on your location, you may have rights including:
- Access — request a copy of the data we hold about you.
- Correction — request correction of inaccurate data.
- Deletion — request deletion of your personal data (“right to be forgotten”).
- Opt-out of sale — we do not sell personal data, so this right is already satisfied.
To exercise any of these rights, email us at [email protected]. We will respond within 30 days.
Children's Privacy
Changes to This Policy
Contact
Questions about this policy? Email us at [email protected].