Privacy Policy

1. Information We Collect

When you place an order or create an account, we collect your name, mobile number, email address and delivery address. Your mobile number is used as your login identifier and is verified through a WhatsApp one-time password.

We also record order details — items, delivery date and time slot, and any personalisation message you add to a cake — so we can prepare and deliver your order accurately.

2. How We Use Your Information

Your information is used to process and deliver your orders, to send order status updates over WhatsApp, to respond to support requests, and to route your order to the outlet nearest to your delivery address.

We do not sell, rent or trade your personal information to third parties.

3. Location Data

If you choose to share your location at checkout, we use those coordinates only to identify your nearest serving outlet. You can decline and enter a pincode instead — we then use an approximate area centroid rather than your precise location.

4. Payments

When online payment is enabled, card and UPI details are handled entirely by our payment gateway (Razorpay). CakeMela never receives or stores your full card number, CVV or UPI PIN.

5. Data Retention and Security

Order records are retained for accounting and warranty purposes. Session tokens and one-time passwords are stored only as salted hashes and expire automatically.

Access to customer data is restricted: outlet staff can only see orders belonging to their own outlet.

6. Your Rights

You can view and update your name, email and saved addresses at any time from your account page. To request deletion of your account and associated data, contact us at support@cakemela.com.