Privacy Policy

Effective date: 9 April 2026

Cake.Shop Pty Ltd (ABN 44 673 700 411) ("Cake.Shop", "we", "us", "our") is committed to protecting your privacy and handling your personal information in accordance with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). This policy explains how we collect, use, disclose and store personal information across our products and services.

1. Who We Are

Cake.Shop is an Australian programmatic advertising technology and transparency business. We provide infrastructure, tools and services that help media agencies and brands run transparent, fee-efficient programmatic advertising campaigns. Our product suite includes:

2. Information We Collect

2.1 Information you provide directly

When you engage with us as a client, partner or website visitor, we may collect:

2.2 Information collected through our advertising technology

When delivering programmatic advertising services on behalf of our clients, our platforms may process:

ATOM — Clean Room Data: Where clients use ATOM for data collaboration, all matching and analysis occurs within Snowflake's clean room environment. Raw personal data is never shared between parties. Only aggregated, privacy-safe outputs leave the clean room.

2.3 Website analytics

Our website (gocake.shop) may use analytics tools that collect standard usage data such as pages visited, time on site and referral source. We do not use this data to personally identify visitors.

3. How We Use Your Information

We use the information we collect for the following purposes:

  • Providing, operating and improving our products and services
  • Managing client accounts and commercial relationships
  • Delivering, measuring and optimising programmatic advertising campaigns on behalf of clients
  • Fraud detection and prevention in ad delivery
  • Invoicing and financial administration
  • Communicating with you about our services, updates and industry developments
  • Complying with legal and regulatory obligations

4. Legal Basis for Processing

Under the Australian Privacy Principles, we collect and process personal information where:

  • It is reasonably necessary for our business functions and activities
  • You have provided consent (for example, by submitting an enquiry form)
  • We are required or authorised by law

Where our services operate in jurisdictions subject to the EU General Data Protection Regulation (GDPR) or similar frameworks, we rely on legitimate interest, contractual necessity or consent as applicable.

5. How We Share Information

We do not sell personal information. We may share information with:

  • Demand-side platforms (DSPs) such as Google DV360, Xandr and Amazon DSP, as required to execute campaigns on behalf of clients
  • Supply-side platforms (SSPs) such as Magnite, to facilitate ad inventory transactions
  • Data infrastructure providers such as Snowflake and Amazon Web Services (AWS), who host and process data under strict contractual obligations
  • Measurement and verification partners for viewability, brand safety and campaign performance reporting
  • Professional advisors including legal, accounting and auditing professionals where necessary
  • Regulatory authorities where required by law or regulation

All third-party partners are bound by contractual obligations to protect personal information and use it only for the specified purposes.

6. Data Retention

We retain personal information only for as long as reasonably necessary to fulfil the purposes for which it was collected, or as required by law. Specifically:

  • Client account information is retained for the duration of the relationship and for a reasonable period thereafter for legal and accounting purposes
  • Ad delivery and campaign data (bid logs, impression data) is retained for up to 90 days for optimisation and reporting, then aggregated or deleted
  • Financial records are retained for the period required under Australian taxation law (generally 5 years)

7. Data Security

We take reasonable steps to protect personal information from misuse, interference, loss and unauthorised access, modification or disclosure. Our measures include:

  • Encryption of data in transit and at rest
  • Access controls and role-based permissions across our systems
  • Regular review of security practices and infrastructure
  • Use of enterprise-grade cloud infrastructure (AWS, Snowflake) with SOC 2 compliance

8. Cookies and Tracking Technologies

Our website may use cookies and similar technologies for analytics and site functionality. Our advertising technology platforms use cookies and device identifiers as part of standard programmatic ad delivery on behalf of clients.

You can manage cookie preferences through your browser settings. Disabling cookies may affect your experience on our website but will not affect the ads you see from campaigns run through our platforms (which are governed by the relevant publisher's cookie consent mechanisms).

9. Your Rights

Under the Australian Privacy Act, you have the right to:

  • Access — Request access to the personal information we hold about you
  • Correction — Request correction of inaccurate, incomplete or out-of-date information
  • Complaint — Lodge a complaint about our handling of your personal information

If our services process data subject to the GDPR, additional rights may apply including the right to erasure, data portability and restriction of processing. Please contact us to exercise any of these rights.

10. International Data Transfers

Some of our technology partners and platform providers operate infrastructure outside Australia, including in the United States and European Union. Where personal information is transferred overseas, we take reasonable steps to ensure that the overseas recipient handles it in accordance with the APPs and any applicable international privacy frameworks.

11. Children's Privacy

Our products and services are designed for business-to-business use. We do not knowingly collect personal information from children under the age of 16. Our programmatic advertising services do not knowingly target children or serve ads in contexts directed at children.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes to our practices, technology or legal requirements. The updated policy will be published on our website with a revised effective date. We encourage you to review this page periodically.

13. Contact Us

If you have any questions about this Privacy Policy, wish to exercise your rights, or want to make a complaint about how we handle personal information, please contact us:

Cake.Shop Pty Ltd

Email: hello@gocake.shop

Website: gocake.shop

If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

8. Cookies and Tracking Technologies

Our website may use cookies and similar technologies for analytics and site functionality. Our advertising technology platforms use cookies and device identifiers as part of standard programmatic ad delivery on behalf of clients.

You can manage cookie preferences through your browser settings. Disabling cookies may affect your experience on our website but will not affect the ads you see from campaigns run through our platforms (which are governed by the relevant publisher's cookie consent mechanisms).

9. Your Rights

Under the Australian Privacy Act, you have the right to:

  • Access — Request access to the personal information we hold about you
  • Correction — Request correction of inaccurate, incomplete or out-of-date information
  • Complaint — Lodge a complaint about our handling of your personal information

If our services process data subject to the GDPR, additional rights may apply including the right to erasure, data portability and restriction of processing. Please contact us to exercise any of these rights.

10. International Data Transfers

Some of our technology partners and platform providers operate infrastructure outside Australia, including in the United States and European Union. Where personal information is transferred overseas, we take reasonable steps to ensure that the overseas recipient handles it in accordance with the APPs and any applicable international privacy frameworks.

11. Children's Privacy

Our products and services are designed for business-to-business use. We do not knowingly collect personal information from children under the age of 16. Our programmatic advertising services do not knowingly target children or serve ads in contexts directed at children.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes to our practices, technology or legal requirements. The updated policy will be published on our website with a revised effective date. We encourage you to review this page periodically.

13. Contact Us

If you have any questions about this Privacy Policy, wish to exercise your rights, or want to make a complaint about how we handle personal information, please contact us:

Cake.Shop Pty Ltd

Email: hello@gocake.shop

Website: gocake.shop

If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.