This policy explains what personal data Mohit Bakery (“we”, “us”) collects when you use mohitbakery.in, order from us or contact us, why we need it, how long we keep it, and the rights you have under India’s Digital Personal Data Protection Act, 2023 (“DPDP Act”). Mohit Bakery is a proprietorship of Pradeep Kumar, RZ B-1, Main Palam Dabri Road, opp. Gate No. 3, Dashrathpuri Metro, Mahavir Enclave-1, New Delhi 110045, and is the Data Fiduciary for the data described here.
01What we collect
- Order details: your name, phone number, delivery address and pincode, delivery date and slot, the items you order and any note you add (for example a name on a cake).
- Location (only if you share it): if you tap “Use my location” at checkout, your device shares its coordinates so we can work out the distance from our shop and whether delivery is free. We save them with that order so the delivery can find you. We never collect your location in the background.
- Optional unfinished-checkout reminder: only if you select the WhatsApp reminder checkbox at checkout, we save your name, mobile number and cart, together with a record of that choice, so we can remind you about the unfinished order. Typing your number alone does not request a reminder. Uncheck the box in the same browser to withdraw that request; we confirm when it has been removed from the reminder list. Placing the order also stops reminders for that checkout.
- Rewards (if offered): if loyalty or referral rewards are switched on, we keep a count of your orders and your referral code and credits, linked to your mobile number.
- Email (optional): only if you give it to us — for example in the contact form or to receive offers by email.
- Enquiries: what you send us through the contact, custom cake, party hall or catering forms, including any reference photo you upload for a custom cake.
- Payments: for cash on delivery or payment at the counter we only record the amount and status. If online payment is offered and you use it, it is processed by our payment gateway (Cashfree Payments); we receive a payment reference and status, never your card number, UPI PIN or bank password.
- Technical data: a session cookie that keeps your cart and wishlist working, and basic server logs (such as IP address and pages requested) used to keep the site secure.
02Why we use it
- To accept, prepare, deliver and support your order, and to call or WhatsApp you about it.
- To reply to your enquiries and bookings.
- To send an unfinished-order WhatsApp reminder only when you select that option at checkout.
- To keep the tax and accounting records the law requires.
- To prevent fraud and misuse of the website.
- To send offers or newsletters — only if you ask for them. You can unsubscribe at any time.
We rely on your consent when you place an order or send an enquiry, and on legitimate uses permitted by the DPDP Act (such as meeting legal obligations). We do not sell your personal data.
03Who we share it with
Only with those who need it to serve you: our delivery staff (name, phone and address for your order), our payment gateway if you pay online, and our website hosting provider. If you choose to message us on WhatsApp, that chat is also covered by WhatsApp’s own privacy policy. We may disclose data if required by law or a lawful request from authorities.
04How long we keep it
- Orders and invoices: 3 years, for tax and accounting purposes, or longer only if the law requires it.
- Enquiries (contact, custom cake, party hall and catering forms) and uploaded reference photos: 1 year after your last message.
- Optional unfinished-checkout reminder record: the reminder expires 7 days after its last consented update. You can withdraw it earlier using the checkout checkbox or by contacting us.
- Referral codes and credits: while the rewards programme runs, or until you ask us to delete them.
- Newsletter email: until you unsubscribe.
- Server logs: only as long as needed for security and troubleshooting.
After these periods we delete the data or make it anonymous.
05Cookies and analytics
We use an essential session cookie so your cart, wishlist and checkout work. If Google Analytics is configured, it starts only after you choose “Accept analytics” in the cookie notice. You can decline optional analytics and still order normally, or change your choice later using “Cookie settings” in the footer. Analytics uses page and ordering events without your contact details, delivery address or cake message. Google signals and ad personalisation are turned off. Analytics is skipped when your browser sends a “Do Not Track” signal or the site uses its data-saving mode. We do not use advertising or cross-site tracking cookies.
06Your rights
Under the DPDP Act you can:
- Access a summary of the personal data we hold about you and how we use it;
- Correct or update data that is wrong or incomplete;
- Delete your data, where we are not required to keep it by law (for example, invoices for tax);
- Withdraw consent for things like newsletters at any time;
- Nominate someone to exercise these rights on your behalf; and
- Raise a grievance with us, and then with the Data Protection Board of India if you are not satisfied.
How to make a request: WhatsApp us at +91 98912 34519 or email pradeepiphonex@gmail.com from the phone number or email you used with us, and tell us what you would like us to do. We may ask a question to confirm it is you before we act.
07Grievance Officer
Pradeep Kumar (Proprietor)
Mohit Bakery, RZ B-1, Main Palam Dabri Road, opp. Gate No. 3, Dashrathpuri Metro, Mahavir Enclave-1, New Delhi 110045
Phone: +91 99112 34519 · Email: pradeepiphonex@gmail.com
We will acknowledge your request and respond within 30 days.
08Security
The website runs over HTTPS, our order records are not publicly accessible, and only the people who run the bakery and handle your order can see them. No system is perfectly secure, but if we ever become aware of a breach affecting your data we will inform you and the Data Protection Board as the law requires.
09Children
Orders should be placed by adults. If you are under 18, please ask a parent or guardian to order for you.
10Changes to this policy
If we change how we handle personal data, we will update this page and the “last updated” date above. See also our Terms & Conditions and Refund Policy.