About Collections Portfolio Flavors Reviews Payment
Privacy Policy Terms of Service
Legal

Privacy Policy

Effective date: October 16, 2026

This Privacy Policy explains what information Carola's Cakes Punta Cana collects through carolascakespuntacana.com and through WhatsApp, how we use it, and how Carola's Cakes Ads Manager (the "App"), our internal tool for managing our own Google Ads account, accesses and uses Google user data through the Google Ads API.

1. Who we are

Carola's Cakes Punta Cana ("Carola's Cakes", "we", "us") is a luxury bakery that makes 100% custom cakes to order and delivers them to resorts and other locations in Punta Cana, Dominican Republic.

2. Information we collect on this website

  • No accounts or forms. This website has no user accounts, no shopping cart, no contact forms and no online payments. It does not directly collect your name, email address or payment details.
  • WhatsApp conversations. If you contact us on WhatsApp, we process the information you choose to share with us, such as your name, phone number, event date, delivery location and cake details. We use it only to quote, prepare and deliver your order. WhatsApp is operated by WhatsApp LLC (Meta) and has its own Privacy Policy.
  • Technical data and cookies. Third-party services used by this website may collect technical data such as your IP address, browser type and cookies, as described in the next section.

3. Cookies and advertising measurement

This website uses the Google Ads tag (gtag.js, ID AW-16897332803) to measure when a visitor who arrived from one of our ads taps a WhatsApp button. Google may set cookies and use identifiers on your device for this measurement. You can learn more in How Google uses information from sites or apps that use our services.

You can turn off ad personalization in Google's Ad Settings. You can also block or delete cookies in your browser settings.

This website is hosted on Cloudflare Pages. Cloudflare may process technical data such as your IP address to deliver the website and to protect it against abuse and attacks.

4. Google user data and the Google Ads API

Carola's Cakes Ads Manager (the "App") is an internal tool that connects to the Google Ads API using Google OAuth. The App is used only by the owner of Carola's Cakes to manage the business's own Google Ads account. It is not a public app: it is not offered to customers or third parties, it has no sign-up, and it does not access anyone else's Google Ads account.

Google user data accessed by the App

  • https://www.googleapis.com/auth/adwords
    Data: campaigns, ad groups, ads, keywords, budgets, bids, performance and conversion metrics, search terms, and keyword ideas and search volumes of the Carola's Cakes Google Ads account.
    Purpose: to generate performance reports and to apply the management changes requested by the owner to the Carola's Cakes Google Ads account.
  • https://www.googleapis.com/auth/cloud-platform
    Data: the identity of the business's own Google Cloud project.
    Purpose: used only to associate API requests with the business's own Google Cloud project for quota and billing. The App does not read or modify any other Google Cloud resources.

The App also handles the OAuth tokens needed to keep the connection.

How the App uses Google user data

The App uses this data only to display reports to the business owner and to apply the changes the owner requests to the Carola's Cakes Google Ads account, such as pausing or enabling campaigns, ad groups and ads, adjusting daily budgets and bidding strategies, managing keywords and search ads, and checking keyword search volumes to plan campaigns.

How the App stores and protects data

OAuth tokens are stored on the business owner's own computer, encrypted by the operating system. The App has no public server and uses no third-party database. Reports are saved locally on that computer.

Sharing of Google user data

Google user data is not sold, not rented and not transferred to third parties, except to Google itself as needed for the Google Ads API to work, or when required by law. It is not used for advertising, for building user profiles, or for training general-purpose AI models.

Retention and deletion

OAuth tokens are deleted when access is revoked; downloaded reports are deleted when no longer needed for managing the account, and in any case within 12 months. Access can be revoked at any time from https://myaccount.google.com/permissions. To ask for deletion of any data, write to gabriel-ortiz@carolascakespuntacana.com.

Carola's Cakes' use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

5. How we use information

We use information to:

  • answer your questions and send you quotes;
  • prepare and deliver your order;
  • measure how well our advertising works;
  • manage our own advertising account through Carola's Cakes Ads Manager.

6. Sharing

We do not sell personal data. We share information only with the providers we need to run our service (Google, Meta/WhatsApp, Cloudflare and the person delivering your order), or when the law requires it.

7. Data retention

We keep WhatsApp conversations and order details only as long as needed to complete your order, provide after-sales support and meet our legal obligations.

8. Your rights

You can ask us to access, correct or delete your personal information by writing to us on WhatsApp or by email at gabriel-ortiz@carolascakespuntacana.com.

9. Children

Our service is not directed to children under 13, and we do not knowingly collect their personal information.

10. Changes to this policy

If we change this policy, we will publish the new version on this page with a new effective date.

11. Contact

See also our Terms of Service.