Privacy policy

Make Bake Privacy Policy

Effective Date: January 1, 2020

Last Updated: September 20, 2025

This Privacy Policy covers Schlegel Made, LLC dba Make Bake (“Make Bake” “we,” “us,” “our”) policies on the collection, use, and disclosure of personal information and data as defined by applicable law (referred to as “Personal Information”), including, but not limited to, the California Consumer Privacy Act of 2018 (as amended by the California Privacy Rights Act of 2020) (collectively, the “CCPA”) and the consumer privacy laws enacted in Colorado, Connecticut, Oregon (effective July 1, 2024), Texas, Utah and Virginia, and other consumer privacy laws enacted and effective after the date of this Privacy Policy (collective “U.S. State Privacy Laws”) when visitors and customers (collectively “Users”) access, use, or otherwise interact with letsmakebake.com and/or Company’s related mobile applications (collectively the “Platform”) and the software and services made available through the Platform (collectively the “Services”).

Make Bake maintains offices solely within the United States. Make Bake collects Personal Information from its users around the world and processes, transfers and stores data within the United States.  By agreeing to this Privacy Policy and subject to your opt-in/opt-out preferences, you consent to the collection, use and disclosure practices identified in this Privacy Policy. Users may withdraw their consent at any time through by email at  hello@letsmakebake.com. 

Section 8 is intended to provide the Notice of Collection required under the California Consumer Privacy Act. 

1. Information Collected by Make Bake

Account Creation Information.  Users may create an account by providing a name and/or email and a password. Make Bake may send an email to the designated email address to verify an account before finalizing registration. The collection of this information is necessary to fulfill our contractual obligations and to provide the Services to you.  Your email may also be utilized to (i) provide information regarding our products and services; and/or (ii) to communicate material changes to our Terms of Service and Privacy Policy.  

Email Addresses & Contact Information.  Users may optionally provide their email address and/or other contact information to Make Bake (a) with questions about our programs, products or services, or (b) to receive Make Bake related marketing communications or newsletters.  Users may unsubscribe at any time through the opt-out link contained within those communications. 

Purchase Information.  When you purchase products, Make Bake will collect shipment and payment information as follows:  

• Shipment:  Users will be required to provide a shipping address for the delivery of products purchased, including an email and mobile phone number in the event Make Bake or the common carrier needs to contact you to facilitate delivery of the products to the appropriate location. At your request, shipping information may be saved for faster checkout on future orders.

• Payment:  Make Bake requires users to input the following payment information: credit or debit card information, first and last name, billing address, card expiration date, and three-digit security code. Make Bake does not itself store debit or credit card information on its servers.  Make Bake utilizes a third party payment processor, Stripe, to manage and process payments in order to guarantee the security of  Personal Information. See Section 2 for more detail.

• IP Address.  A user’s “IP Address”  is identified and logged automatically in our server log files whenever you visit the Platform, along with the time of the visit and the page(s) that were visited. Company uses IP Addresses for calculating usage levels of the Platform, helping diagnose server problems, and administering the Platform and Services.

• Web Beacons.  Pages of our Site and/or emails form Company may contain small electronic files known as web beacons that permit Company, for example, to count users who have visited those pages or opened an email and for other related Site statistics.

• Log Files.  “Log-Files” track actions occurring on the Platform and collect data including a user’s IP address, browser type, Internet service provider, referring/exit pages, and date/time stamps.  “Web beacons” “tags” or “pixels” are electronic files used to record information about how you browse the Platform.  

• Cookies.  The Platform uses cookies to provide users with a better browsing experience -- cookies are only collected with your express consent.  In addition, by accepting Make Bake’s Privacy Policy upon purchase of the Services, you are consenting to Make Bake’s use of cookies in connection with the Services itself.  Make Bake utilizes cookie technology to gather information on Internet use in order to serve you more effectively.  Cookies are files with a small amount of data, which may include an anonymous unique identifier.  Cookies are sent to your browser from a website and transferred to your device. Make Bake's website uses cookies to help keep track of items you put into your shopping cart, including when you have abandoned your cart. This information is used to determine when to send cart reminder messages via SMS (pursuant to your consent, see below Section 2).  You can set your browser to remove or reject cookies; however some Platform features or Services may not work properly without cookies. 

How You Can Control Advertising Cookies.  Cookies are also utilized to deliver advertising on our site. Among other uses, they allow us to show more relevant advertising to people who visit the site by showing you ads that are based on your browsing patterns and the way you have interacted with our sites. You can find information about how to opt out of the cookies provided by our advertising partners here:

• Meta Advertising. Meta may use cookies, web beacons, and other storage technologies to collect or receive information and use that information to provide measurement services and target ads. Company may use  “Visitor action pixels” from Facebook on the Platform. This allows user behavior to be tracked after they have been redirected to the provider’s website by clicking on a Facebook ad. This enables us to measure the effectiveness of Facebook ads for statistical and market research purposes. The data collected in this way is anonymous to us, i.e. we do not see the Personal Information of individual users. Please see the Meta Privacy Policy for additional information. Users can opt-out of the collection and use of information for ad targeting. To opt-out, go to Privacy Settings through your Facebook account and opt out under the Ad Preferences settings.  

• Google Display Network. Make Bake utilizes Google Display Network to target advertisements to its Users.   Users can manage ad settings on Google Advertising Opt-Out and revisit their privacy preferences on Google’s Privacy Checkup tool

• Pinterest. Pinterest Ads is an advertising service provided by Pinterest, Inc. that allows the Owner to run advertising campaigns on the Pinterest advertising network. Users may opt out of behavioral advertising features through their device settings, their Pinterest settings within your account or as otherwise described in the Privacy Policy - Pinterest Policy.

Even if you opt out of cookies/ads personalization, you may still see ads based on factors such as your general location derived from your IP address, your browser type, and your search terms. You can also manage cookies for any online advertising service via the consumer choice tools created under self-regulation programs, such as the US-based aboutads.info choices page or the European Union (“EU”)-based Your Online Choices.  For additional options, see also the Network Advertising Consumer Opt-Out and/or the Digital Advertising Alliance Opt-Out.

2. Personal Information Received by Company or Disclosed or Shared by Company 

Personal Information is collected to facilitate the Services offered, for marketing of our Services and products, or for internal analysis relating to product improvements and data security.  Company shares Personal Information with only those contractors, service providers and other third parties who are bound by contractual obligations to keep Personal Information confidential and to limit such use only for the purpose for which it is disclosed.  Personal Information collected is processed by the following service providers to facilitate provision of the Services on the Platform or as otherwise disclosed at the time of collection to: 

Provide Services.  Personal Information is used to:

• Provide, operate and improve the Platform and Services; 

• Process payments and complete transactions;

• Update you and provide marketing communications about new features and services;

• Respond to inquiries and provide customer support and feedback;

• Detecting, preventing, and investigating security incidents that compromise the availability, authenticity, integrity or confidentiality of stored or transmitted personal information;

• Protecting against malicious, deceptive, fraudulent or illegal activity directed at Make Bake;

• Debugging to identify and repair errors that impair existing intended functionality.

• Analyze data to assess, understand and improve the services and personalize user experiences, including creation of anonymized aggregated, statistical and benchmark data. Aggregated data is utilized to help develop and market products or services and present targeted content and advertising

• Enable functionality of the services to authenticate a user, prevent fraud, and implement security measures 

• Undertaking activities to verify or maintain the quality of a service or product that is developed or provided, and to improve, upgrade, or enhance any service or product that is developed or provided by Make Bake.

Share with Service Providers.  Make Bake has engaged with third party service providers to facilitate the Make Bake services and operate our business, including without limitation, database management hosting, information technology, email/SMS delivery, customer support, analytics, data security and compliance services necessary to provide the Services. Company also engages with third-party service providers to better understand and enhance user experience. These service providers, including Google Analytics (website traffic), Klaviyo (email and SMS consent marketing campaigns and user engagement), and Yotpo (customer review collection and publishing), collect and analyze information on our behalf to offer insights and optimize our application's performance.  If you do not want your Personal Information to be used by Google Analytics, you may opt-out by installing Google Analytics Opt-out Browser Add-on. For each service provider, Make Bake will have in place written contracts that describes the purpose of the service and disclosure of Personal Information, and requires the service provider to both keep the Personal Information confidential and not use it for any purpose except performing the services pursuant to such contract, and includes provisions for data protection and security in accordance with applicable laws and regulations.

SMS Notifications – Notice & Consent.  Make Bake may prompt you to provide your mobile phone number when making a purchase to receive transaction and marketing messages.   Make Bake utilizes a third party service provider to enable SMS notifications, which are provided with your consent pursuant to its Mobile Terms.  By providing consent, are agreeing to receive recurring text messages relating to the Services to the mobile number associated with your account or otherwise provided to Make Bake. You understand and agree that text messages sent to your mobile number may be generated using automated technology,  Message and data rates may apply. Reply STOP to opt-out or HELP for info. Consent is not a condition of any purchase.

Analytics: Make Bake uses Google Analytics for data analytics to generate insights and recommendations. For more information please see Google’s Privacy Policy. However, if you do not want your Personal Information to be used by Google Analytics, you may opt-out by installing the Google Analytics Opt-out Browser Add-on.

Compliance and Protection. Personal Information may be disclosed to serve our legitimate business interests as follows: (1) as required by law, such as to comply with a subpoena, or similar legal process, (2) if Make Bake is involved in a merger, acquisition, or sale of all or a portion of its assets, (3) to investigate, prevent, or take action regarding suspected or actual illegal activities or to assist government enforcement agencies; (4) enforce our agreements with you, and/or (5) investigate and defend ourselves against any third-party claims or allegations. We will use commercially reasonable efforts to notify you about law enforcement or court ordered requests for data unless otherwise prohibited by law.

3. Personal Information of Minors

 

Make Bake does not knowingly collect Personal Information from anyone under the age of 16. If we learn we have collected or received Personal Information from anyone under the age of 16 without verification of parental consent, we will delete that information. If a parent or guardian becomes aware that his or her child under the age of 16 has provided Make Bake with Personal Information without their consent, he or she should contact Make Bake at hello@letsmakebake.com. Make Bake will delete such Personal Information from our files within a commercially reasonable time, but no later than required under the applicable law. 

4. Retention and Deletion of Personal Information; De-Identified Data 

Unless erasure is otherwise requested under applicable law or as otherwise stated in this Privacy Policy,  Make Bake will retain account data for as long as it is necessary to provide services to our customers, but not exceeding the maximum retention period prescribed by GDPR and other applicable laws and regulations.  Personal Information obtained from Platform visitors will be maintained as long as it is necessary to provide requested communications and information-based services or until a visitor exercises the right to opt-out of requested communications or information-based services.  Anonymized and pseudo-anonymized data will be retained as long as Make Bake determines such data is commercially necessary for its legitimate business interests.

To the extent Make Bake de-identifies any Personal Information, Make Bake shall maintain and use such de-identified data without attempting to re-identify the data.

5. Make Bake’s Security Practices. 

We have implemented reasonable administrative, technical and physical security measures that comply with industry standards and applicable laws and regulations to protect Personal Information against unauthorized access, destruction or alteration. However, it is important to note that no security system can ever be 100% secure.  

6. Response To “Do Not Track” Signals

Do Not Track” is a feature enabled on some browsers that sends a signal to request that a website disable its tracking or cross-website user tracking. 

Make Bake shall treat any user-enabled global privacy controls, such as a browser plug-in or privacy setting, device setting, or other mechanism, that communicate or signal the consumer’s choice to opt-out of the sale of their Personal Information as a valid request submitted pursuant to the CCPA for that browser or device, or, if known, for the consumer.

 

 7. Changes to this Privacy Policy 

If we make material changes to our Privacy Policy, we will notify you by (i) changing the Effective Date at the top of the Privacy Policy, or (ii) sending an electronic notification to all active account holders, or (iii)  adding a banner/notification to the Site itself.  

 

8. Supplemental U.S. State-Specific Notices – Notice of Collection

This supplemental notice sets forth the disclosures and rights applicable to residents of California, Connecticut, Colorado, Virginia, Oregon, Texas and Utah.  Such consumer privacy notices and rights shall also apply to other state residents to the extent other state consumer privacy laws are implemented following the last effective update to this Privacy Policy.  

Make Bake collects, uses and/or discloses Personal Information as follows: 

Make Bake retains a Consumer's Personal Information only for the periods necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required to provide the Services or permitted by law. Specific retention periods for different categories of Personal Information can be provided upon written request.

Other Potential Third Party Disclosures:  Personal Information may also be disclosed to serve our legitimate business interests as follows: (a) as required by law, such as to comply with a subpoena, or similar legal process, (b) as part of a merger, acquisition, bankruptcy or other transaction in which a third party assumes control of all or part of the business, (c) to investigate, prevent, or take action regarding suspected or actual illegal activities or to assist government enforcement agencies as required by law; (d) enforce our agreements with you, and/or (e) investigate and defend ourselves against any third-party claims or allegations. 

A. Sale of Personal Information; Sharing of Personal Information; Right to Opt-Out

Make Bake does not sell your Personal Information. However, Make Bake does share Personal Information with its advertising partners to provide you with personalized and/or retargeted ads and for cross-context behavioral advertising - except the preceding excludes text messaging originator opt-in data and consent, which is not shared with any third parties.

You have the right to opt-out of “sale” or “sharing” of your personal information with third parties who are not our service providers (as those terms are defined by applicable laws) and/or to opt out of cross-context behavioral advertising and targeted advertising.  To exercise this right, click the Do Not Sell or Share My Personal Information link on the bottom of the Platform page where your information is being collected or go to your account settings. You can also submit a request to opt-out by emailing us at hello@letsmakebake.com with the subject line “Do Not Sell or Share.” Finally, if your browser supports it, you can turn on the Global Privacy Control to opt-out of the “sale” or “sharing” of your personal information.

 B. Collection of Sensitive Information Make Bake does not collect Sensitive Information as that term is defined by the CCPA or applicable U.S. State Privacy Laws. 

C. Consumer Rights.   Consumers may contact Make Bake to exercise the following consumer rights: 

1. Request Make Bake Disclose At No Charge (“Right to Know”): 

• Specific pieces of personal information it has collected about you; 

• categories of Personal Information collected, used, and/or disclosed about you;

• categories of sources from which Personal Information is collected;

• business and/or commercial purposes for collecting and disclosing your Personal Information; 

• categories of third parties with whom your Personal Information has been disclosed/shared; and

Right to Know Requests can be submitted to Make Bake by email at hello@letsmakebake.com. 

2. Request Make Bake to Delete At No Charge (“Right to Delete”):

Deletion Requests can be submitted to Make Bake by email at hello@letsmakebake.com  or by mail to Make Bake at:  Make Bake, Attention: Privacy Request to Delete, Palos Verdes Mall, #417, Walnut Creek, CA 94597. 

D. Request Make Bake Correct At No Charge (“Right to Correct”): 

Requests that Make Bake correct any inaccurate Personal Information collected by Make Bake can be submitted by email to hello@letsmakebake.com 

   

E. Verified Request Process

Make Bake will verify all consumer requests prior to taking any action in response to such request.  For consumers that maintain an account with Make Bake, the identity of the consumer making the request may be verified by either matching information with the account information on file or through existing account authentication credentials.  

Under  the CCPA and applicable U.S. State Privacy Laws, you may exercise these rights yourself or you may designate an authorized agent to make these requests on your behalf.  Authorized agents must demonstrate they have written authorization from you to make requests on your behalf. Make Bake may additionally require the consumer to confirm their identity and verify the authorized agent’s permission before complying with any request. 

F. Consumer Request Limitations  

Please note that these rights are not absolute and in certain cases are subject to conditions or limitations as specified in the applicable state laws, including, but not limited to: 

• Make Bake is obligated to disclose/delete only upon a verifiable Consumer (as defined by applicable law) request from the Consumer or an authorized agent acting on behalf of Consumer.

• Consumers may only make a personal information request twice in a 12-month period.

• Deletion is not required if it is necessary for Make Bake to maintain the Personal Information to fulfill applicable permissible purposes enumerated pursuant to applicable state consumer privacy laws. 

Make Bake will confirm and respond to all requests within the timeframe required under applicable state law.  In responding to any request to disclose/delete, Make Bake shall maintain a record of the requests as required under applicable state law. 

G. Non-Discrimination Policy

You have the right not to receive discriminatory treatment for exercising any rights conferred by the CCPA and applicable U.S. State Privacy Laws.  Make Bake shall not discriminate against a consumer for exercising any statutory consumer privacy rights, including, but not limited to, (a) denying goods or services, (b) charging different prices or rates (including discounts/penalties) that is not directly related to the value provided to Make Bake for the Personal Information, (c) suggesting Consumer will receive a different rate/price or different level of quality of goods/services, or (d) providing a different level of quality of goods/ services. 

Make Bake employees, applicants and independent contractors have the right not to be retaliated against for the exercise of their CCPA rights.

H. Right to Appeal

If you are in a jurisdiction that recognizes your ability to appeal a decision made in connection with your attempt to assert a right under applicable U.S. State Privacy Laws, you may file an appeal of our decision refusing your request to exercise your rights under this privacy notice. You may request an appeal of such decision by contacting us at hello@letsmakebake.com.  Please provide the state that you are writing from, accompanied with documentation you may have regarding the matter you are appealing. Company will respond to your appeal request within the timeframe required under the U.S. State Privacy Laws applicable to your state of residence.

If your jurisdiction allows you to file a complaint with the state’s Attorney General’s Office regarding any concerns with the result of your appeal request, you may do so by using the following links as may be applicable to you. You may submit a complaint to the Attorney General’s Office by selecting the appropriate link: Virginia (www.oag.state.va.us/consumer-protection/index.php/file-a-complaint), Colorado (coag.gov/file-complaint), and Connecticut (portal.ct.gov/AG/Common/Complaint-Form-Landing-page).  

I. Your California Privacy Rights under California Civil Code Section 1798.83 & Business and Professions Code Section 22581 

California law permits Consumers to request and obtain from Make Bake once a year, free of charge, certain information about their Personally Identifiable Information (“PII”) (as defined by California law) disclosed to third parties for direct marketing purposes in the preceding calendar year (if any). If applicable, this information would include a list of the categories of PII that was shared and the names and addresses of all third parties with which we shared information in the immediately preceding calendar year. 

In addition, a business subject to California Business and Professions Code Section 22581 must allow California residents under age 18 who are registered users of online sites, services or applications to request and obtain removal of content or information they have publicly posted. Your request should include a detailed description of the specific content or information to be removed. Please be aware that your request does not guarantee complete or comprehensive removal of content or information posted online and that the law may not permit or require removal in certain circumstances.

A. Accessibility of this Policy. 

• You can download and print a copy of this Notice here

B. Contact Us

If you have any questions regarding your Personal Information or about our privacy practices, please contact us at: Make Bake, Attention: Privacy Department, PPalos Verdes Mall, #417, Walnut Creek, CA 94597 or by email at:  hello@letsmakebake.com . 

 

9. Applicable EU GDPR Notices

Data Controller  Make Bake is the controller of all Personal Information input by a Customer in connection with a Customer’s use of the Make Bake Services. Data Protection Offer can be reached at Make Bake, Attention: Privacy Department, Palos Verdes Mall, #417, Walnut Creek, CA 94597. You may contact us at any time through by emailing us at hello@letsmakebake.com 

For applicable EU Users, we will only collect and process Personal Information about you where we have lawful bases. Lawful bases include consent (where you have given consent), contract (where processing is necessary for the performance of a contract with you, and “legitimate interests.” Where we rely on your consent to process Personal Information, you have the right to withdraw or decline your consent at any time and where we rely on legitimate interests, you have the right to object.  If you have any questions about the lawful bases upon which we collect and use your Personal Information, please submit a request through email Make Bake at hello@letsmakebake.com

 

You may also have the right to make a GDPR complaint to the relevant Supervisory Authority. A list of Supervisory Authorities is available here:  http://ec.europa.eu/justice/data-protection/bodies/authorities/index_en.htm.  If you need further assistance regarding your rights, please contact us using the contact information provided below and we will consider your request in accordance with applicable law. In some cases our ability to uphold these rights for you may depend upon our obligations to process personal information for security, safety, fraud prevention reasons, compliance with regulatory or legal requirements, or because processing is necessary to deliver the services you have requested. Where this is the case, we will inform you of specific details in response to your request. 

How to Review, Transfer, Restrict the Use of or Request Erasure of Personal Information 

IF YOU WOULD LIKE TO: 

• Access, review, restrict processing of, or otherwise request erasure of your Personal Information;

• Obtain the identity of the source of any Personal Information collected;

• Request correction of any errors contained within your Personal Information;

• Request Make Bake transfer your Personal Information to another service provider;

• Object to the manner in which your Personal Information is processed; 

• Lodge a complaint with an EU supervisory authority; or 

• Withdraw consent to the collection of your Personal Information

Requests under this Section can be made through email at hello@letsmakebake.com.  We will respond in the timeframes required under applicable law. For all requests made pursuant to this section, Make Bake will (a) respond as required under applicable law, (b) provide a copy of any requested Personal Information in a structured, commonly used and machine-readable format, and/or (c) transmit such Personal Information to another service provider without restriction in accordance with applicable law

10. Contact Us

If you have any questions regarding your Personal Information or about our privacy practices, please contact us at: Make Bake, Attention: Privacy Department, Palos Verdes Mall, #417, Walnut Creek, CA 94597, or by email at: hello@letsmakebake.com

This Privacy Policy was last updated September 29, 2024