Privacy Policy

1. Information We Collect

We collect information you give us directly:

• Account details: name, email address, and phone number when you register or check out.
• Order & delivery information: delivery address, pincode, delivery date and time preferences, and any customization notes (e.g. cake message, allergies).
• Payment information: we never see or store your card, UPI, or netbanking details. Payments are processed entirely by our payment partner, Razorpay, under their own security and privacy standards.
• Communications: messages you send us via the contact form, WhatsApp, or email, and any product reviews you submit.
• Newsletter: your email address, if you subscribe for offers and updates.

2. How We Use Your Information

• To process, prepare, and deliver your order, including order-status updates by SMS or WhatsApp.
• To respond to questions, complaints, or requests you send us.
• To send offers or new-menu announcements, only if you've subscribed — you can unsubscribe at any time.
• To improve our menu, site, and delivery operations.
• To meet legal, tax, and accounting obligations.

We do not sell your personal data to anyone.

3. How Payments Are Processed

All online payments are handled by Razorpay, a licensed payment gateway. When you pay, your card/UPI/netbanking details go directly to Razorpay over an encrypted connection — Cha-Cha Bakes never receives or stores them. We only receive confirmation that a payment succeeded or failed, and a transaction reference for your order record.

4. Who We Share Data With

We share the minimum data necessary with:

• Razorpay, to process your payment.
• SMS/WhatsApp notification providers, to send order and delivery updates you've agreed to receive.
• Our delivery personnel, limited to your name, phone number, and delivery address.
• Government authorities, only where required by law.

5. Cookies & Local Storage

We use essential cookies/local storage to keep you signed in and to remember items in your cart between visits. We don't use third-party advertising trackers.

6. Data Retention

We keep order records for as long as needed for accounting, tax, and dispute-resolution purposes. You can ask us to delete your account and associated personal data at any time, subject to what we're legally required to retain.

7. Your Rights

You can, at any time, ask us to:

• Show you the personal data we hold about you.
• Correct inaccurate information.
• Delete your account and personal data.
• Unsubscribe from marketing emails (also available via the unsubscribe link in any newsletter email).

8. Children's Privacy

Our site is intended for adults placing orders. We don't knowingly collect personal data from children.

9. Changes to This Policy

We may update this policy as our business or legal requirements change. Material changes will be reflected by an updated "Last updated" date at the top of this page.

10. Contact Us

Questions about this policy or your data? Email hello@chachabakes.in or use our Contact page.