Privacy Policy
Effective and last updated: November 10, 2026
Midnite Houston Cupcakery (“Midnite,” “we,” “us”) is a family bakery at 10887 S. Wilcrest Dr, Houston, TX 77099. This policy explains what information we collect when you visit midnitehouston.com, place a pre-order or order, pay, write to us or join the Midnite List, how we use it, who helps us handle it, and the choices you have.
The short version
- We collect what we need to bake your order and get it into your hands: your name, contact details and what you ordered.
- Card payments are handled by Stripe. We never see or store your full card number.
- We don’t sell or rent your information, and we don’t share it for targeted advertising.
- We only send marketing emails if you say yes, and every one has an unsubscribe link.
- Analytics cookies are off unless you choose “Sure, take a cookie.”
- Questions or requests? Email support@midnitehouston.com.
1. Information we collect
When you pre-order or check out
Your name, email address, phone number, the dozens you choose, your pickup day, any notes you add (for example a name for the box, or an allergy or dietary need), and whether you ticked “Email me about new flavors and upcoming pickup days.” On the shop checkout we also collect your ready date and, if you choose delivery, your delivery address.
When you pay
Payments, including payment links we send you, are processed by Stripe on Stripe’s secure checkout page. Stripe collects your card details and may collect your billing information. We receive confirmation of the payment, the amount, the email address you paid with and a payment reference, but never your full card number. Stripe’s handling of your information is covered by the Stripe Privacy Policy.
When you contact us
The name, email address, phone number (optional), topic and message you send through our contact form, or the details you share when you email or call us.
When you join the Midnite List (the 12:01 Club)
Your email address and, if you choose to share it, your birthday month.
What we add to our own records
We keep a simple customer record so we can serve you well: your order history and payment status, whether your order was picked up, notes we make about your preferences or an event you’re planning, labels such as “wedding” or “corporate,” and whether we have sent you a review request or a marketing email and whether you clicked the link or button in it.
Collected automatically
- Server logs. Like most websites, our hosting providers record technical information about visits, such as IP address, browser type and the pages requested, to run and secure the site.
- Analytics, only with your permission. See Cookies and browser storage.
2. How we use your information
- To take, bake, and hand off or deliver your order, and to contact you about it.
- To process payments and refunds, and to keep accurate business, tax and accounting records.
- To answer your questions and plan events or large orders with you.
- To send the emails described below.
- To understand which pages are useful, if you allow analytics, and to keep the site working and secure.
- To prevent fraud and meet our legal obligations.
3. Emails, calls and texts
| What | When | Your choice |
|---|---|---|
| Order confirmation | Right after you pay. | Part of your order. |
| Pickup reminder | The day before your pickup day. | Part of your order. |
| Google review request | A few hours after your order is picked up. At most once every six months. We ask every customer, whatever the order, and we never offer anything in return for a review. | Every request has a “Don’t send me review requests” link. |
| News about flavors, pickup days and offers | Only if you ticked the box at checkout, joined the Midnite List, or told us yes. | Every email has an unsubscribe link, and it takes effect right away. |
| Birthday treat | Once a year, during your birthday month, if you shared your birthday month and said yes to our emails. It carries a one-time discount code for your next order. | Unsubscribe from our emails, or ask us to remove your birthday month. |
We may call or text the phone number you give us about your order, for example to send you a payment link. We don’t send marketing text messages.
4. Cookies and browser storage
Analytics cookies are optional and off by default. We use Google Analytics only if you choose “Sure, take a cookie” in the cookie notice. When on, it counts visits to public pages so we can see what’s popular. It records the page address without any extra parameters and never what you type into a form, and it’s switched off entirely on the shop checkout page. Google’s advertising features are turned off. If your browser sends a Global Privacy Control or Do Not Track signal, analytics stays off. You can change your choice any time with the “Cookie settings” button at the bottom of every page.
Browser storage on your device. The site saves a few things in your own browser so it works the way you expect: your cart, your cookie choice, whether you joined the Midnite List or closed its pop-up, banners you dismissed, and your best scores in the Midnite Arcade. This stays on your device; we don’t receive it, and you can clear it in your browser settings at any time.
Fonts. Our pages load fonts from Google Fonts, so Google receives your IP address when a page loads.
5. Who we share information with
We share information only with companies that help us run the bakery, and only for that purpose:
- Stripe: payments and refunds.
- Vercel: hosts our website.
- Resend: sends our order, reminder, review and newsletter emails.
- Zoho: our business email inbox.
- DigitalOcean: hosts the private, password-protected system where we keep customer and order records.
- Google: Google Analytics (only if you allow it) and Google Fonts. If you choose to leave a review, you do that on Google, under Google’s terms.
We may also disclose information if the law requires it, to protect the rights, property or safety of our customers, our business or others, or as part of a sale or transfer of the bakery. In that last case the new owner would have to respect this policy.
We do not sell or rent your personal information, and we do not share it for targeted advertising.
6. How long we keep it
- Order and payment records are kept as long as we need them for our business and for tax and accounting purposes.
- Marketing emails go out until you unsubscribe. After that, we keep a note that you unsubscribed so we don’t email you again.
- Messages you send us are kept with your customer record.
- You can ask us to delete your information at any time (see below). Deleted information can stay in our backup copies for up to 30 days before it’s gone.
7. Your choices and rights
You can ask us to:
- tell you what information we have about you, and give you a copy;
- correct anything that’s wrong;
- delete your information (we may need to keep some records the law requires, such as tax records);
- stop marketing emails or review requests (the links in each email work too).
Email support@midnitehouston.com or call 832-457-9711. We may ask you to confirm it’s you before acting on a request, and we’ll respond within 45 days. If we turn down a request, you can reply to ask us to reconsider. We won’t treat you differently for using any of these rights.
8. How we protect it
The site and our customer records system run over encrypted connections (HTTPS). Customer records are password-protected, and only the bakery’s team and the web developer who maintains the system for us can see them. Card payments never touch our systems: Stripe handles them. No system is perfectly secure, but we take reasonable care, and we’ll tell you if a problem affects your information as the law requires.
9. Children
Our website and services are meant for adults placing orders. We don’t knowingly collect personal information from children under 13. If you believe a child has given us their information, contact us and we’ll delete it.
10. Changes to this policy
If we change this policy, we’ll post the new version here and update the date at the top. If we make a significant change in how we use your information, we’ll make it clear on the site or tell you by email before it takes effect.
11. Contact us
Midnite Houston Cupcakery
10887 S. Wilcrest Dr, Houston, TX 77099
support@midnitehouston.com · 832-457-9711