
Warming the oven

Warming the oven
What we collect when you order from us, why we hold it, who else sees it, how long we keep it, and what you can ask us to do with it.
Effective from 8 September 2026 · Operated by NEEDS INPUT, trading as this bakery.
src/lib/legal.ts: entityName, entityType, grievanceOfficerName, grievanceOfficerEmail. Payment gateways and Google reject policies that read as templates, and this text has not been reviewed by a lawyer.To take an order: your name, phone number, delivery address (including the pincode and any landmark you add), the delivery date and slot you pick, the items in the order, the amount you paid, and any note you leave for the kitchen.
To sign you in: a phone number or email address, and the one-time code we send to it. If you set a password we store only a hash of it, never the password itself. If you sign in with Google we receive your name, email address and profile picture from Google.
To send you updates: your phone number for WhatsApp, your email address for email, and — only if you allow the browser prompt — a push subscription that lets us notify that one browser.
Automatically: your pincode is saved in your browser so the storefront knows whether we reach you. Our servers keep short-lived request logs including IP address for security and rate limiting. Where the site is configured with Google Analytics, it sets analytics cookies.
What we never see: your card number, CVV, UPI PIN, netbanking password or wallet credentials. Payments run inside Razorpay on Razorpay's own systems. We receive only a payment reference, the method used, the amount and whether it succeeded.
We hold your contact details and address to bake, pack and deliver the order and to reach you if something about it changes — that is the contract you enter when you order. We hold your order and payment history so you can see past orders and so we can meet Indian tax and accounting obligations. We hold sign-in data to keep your account secure. We hold your notification preferences to send order updates and nothing else.
We do not use your order data for advertising, we do not build profiles for third parties, and we do not sell your data to anyone. If we ever want to send you marketing, we will ask first and you can stop it at any time.
Razorpay Software Private Limited processes payments and refunds, and is the only party that handles your payment credentials.
Our delivery rider sees the name, address and phone number on the order they are carrying, and nothing more.
Meta (WhatsApp Cloud API) carries WhatsApp order updates, if you have those on. Our email provider carries order emails.
Google sees your email address if you choose to sign in with Google, and — where analytics is enabled on this site — receives usage data through Google Analytics.
Our hosting and database providers store the data on our behalf under contract. Beyond these, we disclose data only where the law or a court requires it.
Order, invoice and payment records are kept for 8 years, the period Indian tax law requires us to keep books of account. Your account profile and saved addresses are kept while your account is open. Delivery notes and kitchen notes are kept for one year. Server request logs are kept for 90 days. One-time codes expire in minutes and are then discarded.
You can ask us to:
Write to our grievance officer, NEEDS INPUT, at NEEDS INPUT, or use the phone number and postal address at the bottom of this page. We will confirm your identity, then answer within 30 days. There is no charge.
This shop is meant for people aged 18 and over. We do not knowingly collect data from children. If you believe a child has given us their details, tell us and we will delete them.
The site runs over HTTPS, passwords are stored only as hashes, and admin access to customer data is restricted by role. No system is perfect; if a breach ever affects your data we will tell you and the relevant authority as the law requires.
As required under the Information Technology Act, 2000 and the rules made under it, our grievance officer is NEEDS INPUT, reachable at NEEDS INPUT and at the postal address below. Complaints are acknowledged within 48 hours and resolved within 30 days.
If this policy changes we will post the new version on this page with a new effective date. The date at the top of the page always tells you which version is in force.
this bakery
Address: NEEDS INPUT
Phone: NEEDS INPUT (10am to 8pm, every day)
Email: NEEDS INPUT
GSTIN: NEEDS INPUT
Grievance officer: NEEDS INPUT · NEEDS INPUT. We acknowledge complaints within 48 hours and aim to close them within 30 days.