1. Information we collect

We collect only what we need to take, prepare and deliver your orders, and to run your account.

• Contact details — your name, mobile number and, if you give it, your email address
• Delivery details — addresses, 6-digit pincode, map location if you choose to share it, and delivery instructions
• Order details — items, cake messages, notes, coupons used, order history, ratings and reviews
• Payment status — whether and how an order was paid, and the payment reference from our payment partner (never your full card, UPI PIN or bank login)
• Messages you send us through the contact form, phone, WhatsApp or email
• Technical data — device and browser type, IP address and pages visited, used for security and to keep the site working

2. How we use your information

We use your personal data to take and deliver orders, verify your mobile number with a one-time code, send order updates by SMS or WhatsApp, answer your questions, handle refunds and complaints, prevent fraud and abuse, and meet our legal and tax obligations.

We send offers and promotions only if you have agreed to receive them, and you can opt out at any time by telling us or turning off “Offers by SMS” in your profile.

3. Consent and legal basis

By placing an order or creating an account you consent to us processing your personal data for the purposes above. Some processing is also allowed without consent where the law permits it, for example to comply with tax law or a court order.

You can withdraw your consent at any time by contacting us. Withdrawing consent does not affect processing already done, but we may no longer be able to take orders from your account.

4. Payments and sharing

Online payments are processed securely by our payment partner — Razorpay, PhonePe or PayU, whichever is shown at checkout. You enter your card, UPI or net banking details on the partner’s own page; we never see or store them.

We never sell your personal data. We share it only with service providers who help us run our business, under contracts that require them to protect it, or where required by law:

• Payment gateways and banks, to process payments and refunds
• Delivery staff or delivery partners, who receive your name, phone number and delivery address for your order
• SMS, WhatsApp and email providers, to send one-time codes and order updates
• Hosting, security (such as Cloudflare Turnstile, which checks that forms are sent by a person) and business software providers, including contact management used by our staff
• Government authorities, courts or law enforcement, when the law requires it

5. Cookies and storage on your device

We use one essential, secure cookie to keep you signed in. Your cart is saved in your browser’s local storage, and order-tracking codes are kept only for the current browser tab. We do not use advertising cookies. Blocking cookies may stop sign-in from working.

6. How long we keep data

We keep your account and order data for as long as your account is active and as long as needed for the purposes above. Invoices and payment records are kept for the period required by Indian tax and accounting law (generally eight years). When data is no longer needed, we delete or anonymise it.

7. Security

We protect your data with HTTPS encryption, access controls for our staff, secure payment partners and regular reviews. No system is perfectly secure; if a personal data breach affects you, we will inform you and the Data Protection Board of India as the law requires.

8. Your rights and choices

You can view and update your profile at any time. Under the DPDP Act you may also ask us to:

• Give you a summary of the personal data we hold about you and who we have shared it with
• Correct, complete or update information that is inaccurate
• Erase your account and associated data, unless we must keep it by law
• Stop sending you marketing messages
• Nominate another person to exercise your rights if you die or become unable to

9. Children

Our services are meant for adults. If you are under 18, please order with the consent and supervision of a parent or guardian. We do not knowingly track children or send them targeted advertising.

10. Contact and grievances

For any privacy question, request or complaint, contact our grievance officer [Grievance officer name] at [Grievance officer email] or +91 99997 50009, [Registered address]. We aim to respond within 7 days and to resolve grievances within 30 days. If you are not satisfied with our response, you may complain to the Data Protection Board of India.

We may update this policy from time to time. The date at the top shows when it last changed; important changes will be shown on the website.