1. Who we are

Sweet Truths Pvt Ltd ("The Cake House"), Shop No- 33, B- Wing, Sagar Park Rd, near R-city Mall, Amrut Nagar, Ghatkopar West, Mumbai, Maharashtra 400086, India, decides why and how your personal data is processed on this store. It is the Data Fiduciary under the Digital Personal Data Protection Act, 2023. Contact: [email protected].

2. What we collect

(a) Mobile number, and name and email if you give them.

(b) Delivery addresses, and the map location you pin.

(c) Orders, items, preferences (for example veg, eggless) and notes, including allergy notes you write.

(d) Payment status and reference. Card and UPI details are handled by the payment gateway, not by us.

(e) Loyalty, membership, coupon and feedback records.

(f) Device and usage data from cookies and similar technology: pages viewed, cart, approximate location from your IP.

(g) Messages you send us, and whether you opened or clicked our messages.

3. Why we use it

To create your account and verify your number.

To take, prepare, deliver and support your orders.

To run loyalty, membership and offers.

To show items relevant to you: recommendations based on your past orders and browsing on this store.

To prevent fraud and misuse.

To keep accounts and records required by tax and food-safety law.

To send promotional messages, ONLY with your consent.

4. Our basis

Your consent: promotional messages, optional cookies and analytics.

The purpose you gave the data for: fulfilling the order you placed.

Compliance with law: invoices, GST and FSSAI records.

You can withdraw consent at any time. Withdrawal does not affect processing already done.

5. Messaging: SMS, WhatsApp, RCS, email and push

We send service messages about your account and orders.

We send promotional messages only if you ticked the box or otherwise opted in, and only on the channels named.

RCS messages are sent through Google's RCS Business Messaging under the verified name The Cake House. WhatsApp messages are sent through Meta's WhatsApp Business Platform. SMS is sent through licensed Indian telecom operators, under TRAI's rules.

To opt out of promotions: reply STOP, tap Unsubscribe, or turn off "Promotional messages" in your account. We act on it promptly, and on every channel you named.

We do not sell your phone number or your messaging consent, and we do not share them with third parties for their own marketing.

6. Who we share it with

Service providers acting on our instructions under contract: our technology service provider, cloud hosting, payment gateways, delivery partners (name, phone, address and order for your delivery only), and messaging providers (telecom operators, Google, Meta, email providers).

Authorities, when the law requires it.

A buyer of our business, under the same protections.

We do not sell personal data.

7. Cookies

We use essential cookies to run the cart and sign-in. With your permission, we use analytics and personalisation cookies to improve the store. You can control cookies in your browser.

8. How long we keep it

Order and invoice records: as long as tax law requires (currently eight years).

Account data: while your account is active, and archived after a long period of inactivity.

Marketing consent records: for as long as they are needed to prove consent.

Then deleted or anonymised.

9. Security

Data is encrypted in transit, access is limited to staff and providers who need it, and systems are monitored. No system is perfectly secure. If a breach affects you, we will inform you and the Data Protection Board as the law requires.

10. Where it is stored

Primarily on servers in India. Where a provider processes data outside India (for example a messaging network), it does so with safeguards and as permitted by Indian law.

11. Your rights

You may ask to see a summary of your data, correct it, update it, or erase it, subject to records the law requires us to keep. You may also withdraw consent, nominate a person to act for you, and raise a grievance. Write to [email protected]. If you are not satisfied, you may complain to the Data Protection Board of India.

12. Children

This store is not meant for children under 18 to use without a parent or guardian. We do not knowingly build profiles of, or send promotions to, children.

13. Grievance officer

details available on request at [email protected], Shop No- 33, B- Wing, Sagar Park Rd, near R-city Mall, Amrut Nagar, Ghatkopar West, Mumbai, Maharashtra 400086, India.

14. Changes

We will post updates here with a new effective date, and tell you about significant changes.