Privacy Policy

01What we collect

To fulfil orders and bookings we collect your name and phone number, and — where you provide them — email address, delivery address, cake reference photos, and the details of your order. There are no customer accounts and no passwords; your phone number is how we match your orders to you.

02Payments

Online payments are processed by Razorpay Software Pvt. Ltd. We never see or store your card number, UPI PIN or banking credentials — we receive only a payment reference and status. Razorpay's privacy policy governs the payment step.

03How we use it

Preparing and delivering your orders, confirming bookings, sending order-related messages (email, or WhatsApp when you message us), meeting tax and food-safety obligations, and keeping simple sales records. We do not sell your data, and we never pass your name, phone, email or address to advertisers.

04Storage & retention

Order data is stored with our infrastructure provider (Supabase) and kept for as long as Indian tax and accounting law requires us to keep sales records. Cake reference photos are stored privately and are only visible to our staff. Delivery addresses are looked up with Google Maps to calculate the distance and charge.

To request a copy of your data, or its deletion where the law allows, contact us (details below) from the phone number used for the order.

05Cookies & visit counts

Our own visit counter (no cookies). When a page of this site opens, your browser tells our server which page it was, the website that sent you (its name only, such as instagram.com), any campaign tags in the link (the “utm” words an ad or post adds), whether you came from an ad click (yes or no only, never the ad's click code), and whether you are on a phone, tablet or computer. From your browser type our server also notes whether you opened the site inside the Instagram or Facebook app. To count each visitor once a day without a cookie, our server mixes your internet address and browser type with a random code that changes every day and keeps only the scrambled result. We never store your internet address, your full browser type or a cookie for this, and the daily code is replaced and deleted shortly after midnight (India time), so the scrambled result can't be used to recognise you on another day. Private links to your orders and payments are counted with their private code blanked out. These counts are kept for 90 days, then reduced to daily totals. This counter runs whether or not you accept cookies; it is not shared with Google, Meta or anyone else.

Where an order came from. While this browser tab is open, the site remembers (in the tab only, not in a cookie) the first page you opened, the website that sent you, any campaign tags and whether you came from an ad click (yes or no). If you place an order, book a workshop or send us an enquiry, that note and your cookie choice are saved with it, so we can see which posts and ads bring orders. If you accepted cookies, it also keeps the Meta pixel's browser codes, which we delete after 90 days. The note itself holds no name, phone number or other personal details.

Google and Meta (only if you accept). With your permission (the cookie banner), the public site also uses Google Analytics, Google Ads and the Meta pixel to see which pages and ads lead to orders and to measure our campaigns. These set cookies in your browser. We do not send them your name, phone number, email or address, and the private links to your orders and payments reach Google only with their private code blanked out (never Meta). Until you choose “Accept”, Google receives only cookieless, anonymous counts and the Meta pixel is not loaded.

Choose “No thanks”, or use “Cookie choices” at the bottom of any page, to say no or to withdraw your permission at any time. We ask again after six months. The staff pages are never measured; a session cookie is used only for staff signing in to the admin dashboard.