Privacy policy

OVERVIEW

The website www.bakedbuzz.com and its related sub-domains, services and tools (collectively, the “Website”) are owned and operated by Shri Balaji Traders, a proprietorship firm having its principal place of business at Jodhpur, Rajasthan (“BakedBuzz”, “we”, “us”, or “our”).

We are committed to protecting your privacy. This Privacy Policy (“Policy”) describes how we collect, use, share, store and otherwise process personal information in relation to your use of the Website and our products and services. It applies to all visitors, registered users and customers of the Website.

This Policy is framed in accordance with the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, and the Digital Personal Data Protection Act, 2023 (“DPDP Act”) together with any rules notified thereunder, to the extent applicable. This Policy is an electronic record and does not require any physical, digital or electronic signature.

This Policy should be read together with our Terms of Service. In the event of any conflict between this Policy and the Terms of Service on matters of data privacy, this Policy shall prevail.

By accessing or using the Website, registering an account, or otherwise providing us your information, you consent to the collection, use, disclosure and processing of your personal information as described in this Policy. If you do not agree with this Policy, please do not use or access the Website. If you provide us information about another person, you confirm that such person is aware of and has consented to the disclosure and processing of their information as set out here.

SECTION 1 – DEFINITIONS

“Personal Information” / “Personal Data” means any data about an individual who is identifiable by or in relation to such data — including name, address, phone number, e-mail address, date of birth, gender, delivery address, order history, and any other information that can identify you, whether directly or indirectly.

“Sensitive Personal Data or Information (SPDI)” includes passwords, financial information such as bank account, debit card or credit card details, and any information received for processing under a lawful contract, to the extent such data is collected, stored or processed by us and not solely by a regulated third-party payment gateway.

“Non-Personal Information” means information that does not, by itself, identify an individual, such as browser type, device type, referring URL, operating system and aggregated usage statistics.

“Usage Information” means information generated automatically through your use of the Website, including cookies, log data, pages visited, time spent, and click patterns.

Under the DPDP Act, you are referred to as the “Data Principal” and we, as the entity determining the purpose and means of processing your personal data, are the “Data Fiduciary.” Personal Information, SPDI, Non-Personal Information and Usage Information are collectively referred to as “Information” in this Policy.

SECTION 2 – INFORMATION WE COLLECT

We may collect Information from you when you:

Register an account or create a profile on the Website;
Browse products, add items to cart, or place an order;
Make a payment for an order through our payment gateway partner, Razorpay;
Communicate with us via e-mail, WhatsApp, SMS, phone, or contact/feedback forms;
Participate in surveys, contests, promotions or campaigns;
Subscribe to our newsletter or opt in to marketing communications; or
Otherwise interact with the Website, including through cookies and similar tracking technologies (see Section 8).

Specifically, we may collect: (a) contact and identity details — name, e-mail address, phone number, billing and shipping address, date of birth/gender (if provided); (b) order and transaction details — products purchased, order value, order history; (c) payment-related information — processed directly by Razorpay under its own PCI-DSS compliant systems; we do not store your full card, UPI or net-banking credentials on our own servers; and (d) technical and usage data — IP address, device and browser information, and Website interaction data collected via cookies and analytics tools.

You may browse the Website without providing Information, but certain features (such as placing an order or contacting support) will not be available to you without it.

SECTION 3 – HOW WE USE YOUR INFORMATION

We use your Information to:

Process, fulfil, and deliver your orders, including sharing necessary details with our logistics/courier partners;
Process payments and refunds through Razorpay;
Create and manage your account;
Send order confirmations, shipping updates, and other transactional communications via e-mail, SMS and WhatsApp;
Respond to your queries, complaints and support requests;
With your consent, send promotional/marketing communications regarding new products, offers and campaigns via e-mail, SMS and WhatsApp Business API;
Improve the Website, our products, and customer experience, including through analytics;
Detect, prevent and address fraud, security incidents or technical issues; and
Comply with applicable law, regulation, or lawful government requests.

We process your Information on the basis of your consent, the necessity of processing to perform a contract with you (i.e., fulfilling your order), and/or our legitimate business interests, in each case as permitted under applicable law.

SECTION 4 – SHARING OF INFORMATION

We do not sell or rent your Information. We share Information only as necessary and with the following categories of recipients:

Payment processing: cashfree, to process payments, refunds, and detect fraud. Razorpay processes this data under its own privacy policy and applicable RBI/PCI-DSS requirements.
Logistics and delivery partners: to fulfil and deliver your orders, we share your name, address and contact number with our courier/logistics partners.
Communication service providers: WhatsApp Business API and SMS gateway providers, to send order updates and (where you have opted in) marketing messages.
Analytics and marketing platforms: such as website analytics and advertising pixels, to understand Website usage and measure marketing performance. These providers may set their own cookies (see Section 8).
Professional advisors and service providers: engaged to support our business operations (e.g., IT support, hosting, customer support tools), bound by confidentiality obligations.
Legal and regulatory authorities: where required to comply with a legal obligation, court order, or government request, or to protect our rights, property or safety, or that of our users.
Business transferees: in connection with a merger, acquisition, restructuring or sale of assets/business, subject to confidentiality commitments.

Third-party service providers are permitted to use your Information only to the extent necessary to perform the services requested by us, and are not authorised to use it for their own independent purposes.

SECTION 5 – THIRD-PARTY LINKS AND SERVICES

The Website may contain links to third-party websites or use third-party embedded services (for example, YouTube for video content, or social media plug-ins). We do not control and are not responsible for the privacy practices or content of such third parties. We encourage you to review the privacy policies of any third-party service before engaging with it through our Website.

SECTION 6 – CROSS-BORDER DATA TRANSFER

Some of our service providers (such as cloud hosting, e-commerce platform infrastructure, or analytics tools) may store or process data on servers located outside India. Where this occurs, we take reasonable steps to ensure such transfers are made to jurisdictions or entities that provide an adequate level of protection, consistent with the DPDP Act and rules notified by the Central Government from time to time.

SECTION 7 – COOKIES AND TRACKING TECHNOLOGIES

We use cookies and similar technologies to operate and improve the Website. Cookies fall into the following categories:

Essential cookies: required for core Website functionality, such as maintaining your cart and enabling checkout. These cannot be disabled without affecting site functionality.
Analytics cookies: help us understand how visitors use the Website (e.g., pages visited, time spent), so we can improve performance and content.
Marketing/advertising cookies: used by us and third-party advertising partners to show you relevant ads and measure campaign performance.

You can manage or disable non-essential cookies through the cookie consent banner on the Website or through your browser settings. Disabling essential cookies may affect your ability to use certain features, such as the shopping cart or checkout.

SECTION 8 – DATA RETENTION

We retain your Information only for as long as necessary to fulfil the purposes described in this Policy, or as required under applicable law (for example, tax, accounting, and consumer protection laws typically require transaction records to be retained for a specified number of years). Account information is generally retained for as long as your account remains active, and deleted or anonymised within a reasonable period after account closure, unless retention is required by law.

SECTION 9 – DATA SECURITY

We implement reasonable technical, administrative and physical security measures designed to protect your Information from unauthorised access, alteration, disclosure or destruction, consistent with industry standards. Payment data is processed by Razorpay under PCI-DSS compliant infrastructure. However, no method of transmission or storage over the internet is completely secure, and we cannot guarantee absolute security.

You are responsible for maintaining the confidentiality of your account login credentials and must notify us immediately at Contact@bakedBuzz.com if you suspect unauthorised use of your account.

SECTION 10 – YOUR RIGHTS

Subject to applicable law, including the DPDP Act, you have the right to:

Access the Personal Information we hold about you;
Correct or update inaccurate or incomplete Personal Information;
Request erasure of your Personal Information, where it is no longer necessary for the purpose it was collected, subject to our legal retention obligations;
Withdraw consent at any time, with effect from the date of withdrawal (withdrawal will not affect the lawfulness of processing carried out prior to withdrawal);
Nominate an individual who may exercise these rights on your behalf in the event of your death or incapacity; and
Register a grievance regarding the processing of your Personal Information (see Section 14).

To exercise any of these rights, please write to us at Contact@bakedBuzz.com. We will verify your identity before acting on your request and will respond within a reasonable period, and in any event within the timelines prescribed under applicable law. Please note that withdrawing consent or requesting erasure may limit or prevent our ability to provide certain services to you, including order fulfilment.

SECTION 11 – MARKETING COMMUNICATIONS AND OPT-OUT

With your consent, we may send you promotional communications regarding new products, offers, and campaigns via e-mail, SMS, and WhatsApp. You may opt out of marketing communications at any time by:

Clicking the ‘unsubscribe’ link at the bottom of marketing e-mails;
Replying ‘STOP’ to marketing SMS messages;
Messaging ‘STOP’ on our WhatsApp Business number, or blocking/opting out through WhatsApp's in-app settings; or
Writing to us at Contact@bakedBuzz.com.

Please note that transactional and administrative communications (such as order confirmations, shipping updates, and responses to your queries) are necessary for us to provide our services and cannot be opted out of while you continue to use the Website. We comply with applicable TRAI regulations, including the National Customer Preference Register (NCPR/DND), for promotional communications.

SECTION 12 – CHILDREN AND MINORS

We do not intend to attract anyone under the relevant age of consent to enter into binding legal contracts under the laws of their respective jurisdictions. We do not intentionally or knowingly collect Personal Information through the Website from anyone under that age. We encourage parents and guardians to be involved in the online activities of minor to ensure that no Personal Information is collected from a minor without their prior consent. If you are using the Website on behalf of someone else, including but not limited to, on behalf of your minor child/children/employer, you represent and warrant that you are authorised by such person to accept this Policy on their behalf and to consent on behalf of such person to our use of such person’s Personal Information as described in this Policy.

SECTION 13 – DATA BREACH NOTIFICATION

In the event of a personal data breach that is likely to result in harm to you, we will notify you and the relevant regulatory authority (including the Data Protection Board of India, where applicable) as required under the DPDP Act and other applicable law, and will take reasonable steps to mitigate the impact of such breach.

SECTION 14 – GRIEVANCE OFFICER

In accordance with the Information Technology Act, 2000 and the DPDP Act, the name and contact details of our Grievance Officer are provided below:

Name: Mr. Rounak Mahanandani

Address: Shri Balaji Traders, 54-Aditya Nagar, Jodhpur, Rajasthan

E-mail: Contact@bakedBuzz.com

Phone: +91-8824968779

Working Hours: Monday – Saturday, 10:00 AM – 7:00 PM IST

Complaints regarding the processing of your Personal Information or violations of this Policy may be sent to the Grievance Officer at the e-mail address above. We aim to acknowledge and address grievances within the timelines prescribed under applicable law.

SECTION 15 – CHANGES TO THIS POLICY

We may update this Policy periodically to reflect changes in our practices or applicable law. We will notify you of material changes by posting the updated Policy on the Website with a revised ‘Last updated’ date, and, where required by law, through e-mail or a conspicuous notice on the Website. Your continued use of the Website after such changes constitutes acceptance of the updated Policy.

SECTION 16 – GOVERNING LAW AND JURISDICTION

This Policy is governed by the laws of India. Courts at Jodhpur, Rajasthan shall have exclusive jurisdiction over any disputes arising out of or in connection with this Policy, subject to any dispute resolution/arbitration provisions set out in our Terms of Service.