This policy explains what personal data Mohit Bakery (“we”, “us”) collects when you use mohitbakery.in, order from us or contact us, why we need it, how long we keep it, and the rights you have under India’s Digital Personal Data Protection Act, 2023 (“DPDP Act”). Mohit Bakery is a proprietorship of Pradeep Kumar, RZ B-1, Main Palam Dabri Road, opp. Gate No. 3, Dashrathpuri Metro, Mahavir Enclave-1, New Delhi 110045, and is the Data Fiduciary for the data described here.
01What we collect
- Order details: your name, phone number, delivery address and pincode, delivery date and slot, the items you order and any note you add (for example a name on a cake).
- Location (only if you share it): if you tap “Use my location” at checkout, your device shares its coordinates so we can work out the distance from our shop and whether delivery is free. We save them with that order so the delivery can find you. We never collect your location in the background.
- Unfinished checkout: when you type your mobile number at checkout, we save it with your cart so we can send you one reminder on WhatsApp if the order is not completed. This is deleted after 7 days, or as soon as you place the order.
- Rewards (if offered): if loyalty or referral rewards are switched on, we keep a count of your orders and your referral code and credits, linked to your mobile number.
- Email (optional): only if you give it to us — for example in the contact form or to receive offers by email.
- Enquiries: what you send us through the contact, custom cake, party hall or catering forms, including any reference photo you upload for a custom cake.
- Payments: for cash on delivery or payment at the counter we only record the amount and status. If online payment is offered and you use it, it is processed by our payment gateway (Razorpay); we receive a payment reference and status, never your card number, UPI PIN or bank password.
- Technical data: a session cookie that keeps your cart and wishlist working, and basic server logs (such as IP address and pages requested) used to keep the site secure.
02Why we use it
- To accept, prepare, deliver and support your order, and to call or WhatsApp you about it.
- To reply to your enquiries and bookings.
- To keep the tax and accounting records the law requires.
- To prevent fraud and misuse of the website.
- To send offers or newsletters — only if you ask for them. You can unsubscribe at any time.
We rely on your consent when you place an order or send an enquiry, and on legitimate uses permitted by the DPDP Act (such as meeting legal obligations). We do not sell your personal data.
03Who we share it with
Only with those who need it to serve you: our delivery staff (name, phone and address for your order), our payment gateway if you pay online, and our website hosting provider. If you choose to message us on WhatsApp, that chat is also covered by WhatsApp’s own privacy policy. We may disclose data if required by law or a lawful request from authorities.
04How long we keep it
- Orders and invoices: 3 years, for tax and accounting purposes, or longer only if the law requires it.
- Enquiries (contact, custom cake, party hall and catering forms) and uploaded reference photos: 1 year after your last message.
- Unfinished checkout (mobile number + cart): 7 days.
- Referral codes and credits: while the rewards programme runs, or until you ask us to delete them.
- Newsletter email: until you unsubscribe.
- Server logs: only as long as needed for security and troubleshooting.
After these periods we delete the data or make it anonymous.
05Cookies and analytics
We use an essential session cookie so your cart, wishlist and checkout work; the site cannot work without it. We also use Google Analytics to understand, in aggregate, which pages are useful. It is set up with IP anonymisation and with Google signals and ad personalisation turned off, and it loads only after the page has finished loading. It does not load at all if your browser sends a “Do Not Track” signal or you are using data-saver mode, so you can opt out that way, or by blocking cookies for this site in your browser settings. We do not use advertising or cross-site tracking cookies.
06Your rights
Under the DPDP Act you can:
- Access a summary of the personal data we hold about you and how we use it;
- Correct or update data that is wrong or incomplete;
- Delete your data, where we are not required to keep it by law (for example, invoices for tax);
- Withdraw consent for things like newsletters at any time;
- Nominate someone to exercise these rights on your behalf; and
- Raise a grievance with us, and then with the Data Protection Board of India if you are not satisfied.
How to make a request: WhatsApp us at +91 98912 34519 or email pradeepiphonex@gmail.com from the phone number or email you used with us, and tell us what you would like us to do. We may ask a question to confirm it is you before we act.
07Grievance Officer
Pradeep Kumar (Proprietor)
Mohit Bakery, RZ B-1, Main Palam Dabri Road, opp. Gate No. 3, Dashrathpuri Metro, Mahavir Enclave-1, New Delhi 110045
Phone: +91 99112 34519 · Email: pradeepiphonex@gmail.com
We will acknowledge your request and respond within 30 days.
08Security
The website runs over HTTPS, our order records are not publicly accessible, and only the people who run the bakery and handle your order can see them. No system is perfectly secure, but if we ever become aware of a breach affecting your data we will inform you and the Data Protection Board as the law requires.
09Children
Orders should be placed by adults. If you are under 18, please ask a parent or guardian to order for you.
10Changes to this policy
If we change how we handle personal data, we will update this page and the “last updated” date above. See also our Terms & Conditions and Refund Policy.