Privacy policy

, operating as Café Mellow, is the data fiduciary for the information described here — meaning we are the ones responsible for it.

1. What we collect

Only what you type into a form on this site, or tell us when you place an order:

• Your name.
• Your phone or WhatsApp number.
• Your email address, if you choose to give one.
• The details of your order — occasion, flavour, weight, date, the message to be written on the cake, and anything else you type into the box.
• A delivery address, only if you ask us to deliver.

We do not ask for your card number, bank details, date of birth, or any government identification. We never see your card details — those go directly to the bank's machine at the counter. If any page claiming to be ours ever asks you for a password or a card number, it is not ours: please tell us at once.

2. Why we use it, and on what basis

To reply to your enquiry and quote your order	Because you asked us to
To bake the right thing and have it ready on time	To perform our contract with you
To contact you if something about your order changes	To perform our contract with you
To keep records of sales and tax	Because the law requires it

We do not add you to a marketing list because you enquired about a cake. If we ever want to send you offers, we will ask you first, and you will be able to stop them at any time.

3. Cookies and this website

This website sets no cookies. There is no advertising pixel, no analytics tracker, and nothing that follows you around the internet.

Two small things are stored in your own browser and never sent to us or anyone else:

• Your choice of light or dark theme, kept in localStorage.
• A short-lived copy of the menu, kept in sessionStorage so the page loads faster. It disappears when you close the tab.

Clearing your browser data removes both. Nothing breaks if you do.

4. Things that load from outside our website

Two components come from Google's servers, which means Google will see your IP address when they load:

• Google Fonts — the typefaces the pages are set in.
• Google Maps — the map box on the home and contact pages.

Both are governed by Google's own privacy terms. If your browser blocks them, the site still works — you simply see a standard typeface and no map.

The WhatsApp, Instagram and Facebook buttons are ordinary links. Nothing is shared until you tap one and go there yourself.

5. Who else sees your information

Our own team, and the service you chose to reach us through — WhatsApp if you message us there, our email provider if you email. Those companies have their own privacy terms.

We do not sell, rent, trade or share your details for anyone else's marketing. We will disclose information only where the law requires it, and no further than it requires.

Your information stays in India, on the phones and computers we use in the shop, and with the messaging and email providers named above.

6. How long we keep it

• Order and invoice records — for as long as tax and accounting law requires us to keep them.
• Cake enquiries that became orders — kept with the order record.
• Enquiries that went nowhere — cleared out once they are no longer useful, normally within a year.

7. Your rights

You can ask us to:

• tell you what we hold about you;
• correct anything that is wrong;
• delete it, where we are not required by law to keep it;
• stop using it for anything you previously agreed to.

Just call or email using the details above. We will answer within 30 days, and there is no charge.

8. Keeping it safe

This website is served over HTTPS. Order details are seen only by the people who need them to make and hand over your order. We keep as little as we can, for as short a time as we can — which is the most effective protection there is.

9. Children

This site is not directed at children and we do not knowingly collect information from anyone under 18. If you believe a child has sent us their details, tell us and we will delete them.

10. Complaints

If you are unhappy with how we have handled your information, contact our grievance officer:

If we cannot settle it between us, you may take the matter to the Data Protection Board of India.

11. Changes

If we change how we handle your information, we will update this page and change the date at the top.