Privacy Policy
Effective Date: [EFFECTIVE DATE — e.g., November 1, 2026] · Last Updated: November 2026
At CAKIESS (referred to herein as “CAKIESS”, “we”, “our”, or “us”), operated by [LEGAL BUSINESS NAME], we are committed to respecting your personal privacy and safeguarding the personal data you share with us. This Privacy Policy describes how we collect, store, process, transfer, and protect your information when you visit our website, order handcrafted cakes, or interact with our artisanal studio services.
By accessing our website (https://www.cakiess.in) or placing an order, you acknowledge and agree to the practices described in this Privacy Policy.
1. Scope and Definitions
“Personal Data” refers to any information that directly or indirectly identifies you as an individual, including your name, contact phone number, delivery address, and email address.
“Order Data” refers to specifics of cake selections, portion weights, dietary choices, custom cake piping inscriptions, delivery dates, and designated delivery time windows.
“Payment Processing Partners” refers to RBI-licensed payment aggregators and gateways, specifically Razorpay Software Private Limited (“Razorpay”).
2. Categories of Information We Collect
We strictly limit collection to information necessary to fulfill our artisanal baking and temperature-controlled delivery commitments:
- Contact & Delivery Details: Recipient full name, active mobile telephone number (required for doorstep delivery OTP verification), email address for tax invoices, and street address including landmarks within our delivery radius in Trichy, Tamil Nadu.
- Cake Order Customization: Inscription text requested on chocolate plaques or cake boards, allergen notifications, and special handling instructions.
- Device & Usage Information: Anonymized browser type, operating system, approximate geographical location derived from IP address, and technical logs used to prevent fraud and DDoS attacks.
3. Payment Security & Razorpay Disclosure
Online electronic payments for CAKIESS are processed securely through Razorpay Software Private Limited.
CAKIESS does NOT collect, view, capture, or store: credit card numbers, debit card numbers, CVV / CVC codes, net banking passwords, UPI PINs, or bank account login credentials. All sensitive transaction data is transmitted directly to Razorpay over end-to-end 256-bit TLS encryption in accordance with Payment Card Industry Data Security Standards (PCI-DSS Level 1).
When you pay using Razorpay, Razorpay receives transaction parameters (order ID, billing details, amount, currency) necessary to authenticate and settle the payment. Razorpay's handling of your information is governed by their independent privacy policy, accessible at https://razorpay.com/privacy/.
4. How We Use Your Information
- To schedule studio baking and handcrafting according to your designated date and time window.
- To generate and deliver automated GST-compliant vector PDF invoices to your email address.
- To transmit a 4-digit doorstep delivery OTP to the recipient mobile phone for safe handover verification.
- To detect and prevent fraudulent transactions, chargeback manipulation, and unauthorized payment attempts.
- To comply with statutory bookkeeping, tax laws, and food safety regulations applicable in India.
5. Sharing of Personal Data
We do not sell, rent, or trade your personal data. We disclose information only to vetted service partners strictly for order fulfillment:
- Delivery Couriers: Delivery address and recipient telephone number provided to assigned delivery riders to execute temperature-controlled transport.
- Payment Aggregator: Razorpay for transaction authorization, settlement, and verification.
- Transactional Email Services: Secure SMTP servers to dispatch order milestones and official invoices.
- Legal & Regulatory Authorities: Where mandated by a court order, subpoena, or applicable Indian law.
6. Data Retention Schedule
Order and payment transaction records are retained for a minimum of [DATA RETENTION PERIOD — e.g., 7 years] in compliance with Indian Goods and Services Tax (GST) rules, Companies Act financial auditing mandates, and dispute defense requirements. Anonymized server security logs are purged after 90 days.
7. Your Rights and Account Management
Subject to statutory retention obligations, you have the right to request access to the personal data we hold about you, request rectification of inaccurate records, or request account closure. Requests can be submitted in writing to our designated email at orders@cakiess.in.
8. Cookies and Session Management
Our website uses strictly necessary session cookies to maintain your shopping bag items, remember delivery slot selections during checkout, and enforce cryptographic CSRF security. We do not employ third-party tracking cookies for behavioral ad profiling.
9. Grievance Officer & Regulatory Inquiries
In accordance with the Information Technology Act 2000 and the Consumer Protection (E-Commerce) Rules 2020, the contact details of our designated Grievance Officer are: