Privacy Policy

1. What we collect

When you order or subscribe we collect your name, 10-digit mobile number, delivery address, and the order details themselves. For subscriptions we also store your delivery slot and fruit exclusions.

When anyone visits the Site we record a consent record: an anonymous visitor ID, the cookie choice made (accepted / rejected), a timestamp, and your consent string. This is required to demonstrate lawful cookie consent.

We do not collect or store payment card numbers — payments are processed by our PCI-DSS compliant payment gateway.

2. Why we use it (legal basis)

To fulfil your orders and subscriptions (performance of a contract).

To send order and delivery confirmations on WhatsApp/SMS (contract; and consent where required).

To keep the consent record for cookie usage (legal obligation — proof of consent).

To improve the Site using aggregated, anonymous statistics (legitimate interest).

3. Cookies

Strictly necessary cookies keep your cart, session and language preference working — these do not require consent.

Analytics/preference cookies are set only after you press Accept on the consent banner. Pressing Reject keeps only the strictly necessary cookies, and we record that choice too.

You can change your choice anytime by clearing site data in your browser; the banner will reappear.

4. Sharing

We share the minimum necessary data with: our payment gateway (to collect payment), our WhatsApp Business provider (to send confirmations), and our cloud hosting providers (to run the Site). We never sell your personal data.

5. Retention

Order records are kept for 3 years for accounting and dispute resolution. Consent records are kept for 3 years from the date of consent, as evidence. Subscription data is deleted within 90 days of cancellation.

6. Your rights

You can ask us to access, correct, export or delete your personal data, or withdraw cookie consent, at any time: message us on WhatsApp (+91 98765 43210) or use the Contact page. We respond within 30 days.

7. Security and contact

Data is transmitted over HTTPS, passwords (for the cafe admin board) are hashed with Argon2id, and access to production data is restricted.

Privacy questions: WhatsApp +91 98765 43210 or the Contact page. This policy may be updated occasionally; the date above changes when it does.