Truffle Cakes Logo

PRIVACY POLICY

Effective date: [DD Month YYYY]

Last updated: [DD Month YYYY]

2.1 Introduction

Welcome to The Truffle Cakes ( [website URL] ). This Privacy Policy explains how we collect, use, store, disclose and protect personal information when you browse our website, create or use an account, place an order, make a payment, contact us, request delivery or otherwise interact with our services.

For the purposes of this policy, “we”, “us”, “our” and “The Truffle Cakes” refer to [LEGAL BUSINESS NAME] , operating from [registered/business address] .

We aim to collect only the information reasonably required to provide our services, process orders, communicate with customers, maintain security, meet legal obligations and improve the customer experience.

2.2 Information We Collect

Depending on how you use the website, we may collect:

Information you provide

  • Name
  • Mobile number
  • Email address
  • Delivery address and address instructions
  • Account/login information
  • Order details
  • Cake, bouquet and add-on selections
  • Personalisation details such as cake messages, topper text or delivery instructions
  • Customer support messages and feedback
  • Information voluntarily provided through contact forms or WhatsApp

Transaction information

We maintain order and payment transaction records such as:

  • Order number
  • Products and variants purchased
  • Add-ons selected
  • Amount payable
  • Payment status
  • Payment gateway transaction/reference identifiers
  • Refund status where applicable

We do not intend to collect or store your full card number, CVV, PIN or other sensitive payment-instrument credentials on our own servers. Payment processing is handled through the configured payment gateway and its applicable payment environment.

Technical information

When you use the website, technical information may be processed, such as:

  • IP address
  • Browser and device information
  • Operating system
  • Pages or features accessed
  • Approximate usage information
  • Security and diagnostic logs
  • Cookie or similar technology data where enabled

The exact information collected depends on the services and analytics enabled on the production website.

2.3 How We Use Information

We may use personal information to:

  • Create and manage customer accounts.
  • Process and fulfil cake, bouquet and add-on orders.
  • Verify customer contact information, including OTP verification where enabled.
  • Process payments, refunds and payment-related support.
  • Coordinate delivery and communicate delivery status.
  • Send important transactional messages such as order confirmation, payment confirmation and delivery updates.
  • Respond to customer enquiries and support requests.
  • Prevent fraud, abuse and unauthorised activity.
  • Maintain records required for accounting, tax, legal and operational purposes.
  • Improve website performance, products, services and customer experience.
  • Send promotional communications where legally permitted and where the required consent or other lawful basis exists.
  • Comply with applicable law, regulations, court orders or lawful requests.

2.4 Payment Processing

When you pay online, payment details may be processed by the payment gateway selected during checkout. The Truffle Cakes receives the payment result and relevant transaction references required to associate the payment with your order.

Do not send your full card number, CVV, PIN, OTP or banking credentials to The Truffle Cakes through support chat, WhatsApp, email or any other communication channel.

2.5 Third-Party Service Providers

The website may use trusted technology and service providers to operate specific functions. Depending on the final production configuration, these may include:

  • Payment gateway: Razorpay or another configured payment provider.
  • Messaging/OTP: Twilio or another configured communications provider.
  • Media delivery/storage: Cloudinary or another configured media provider.
  • Database/infrastructure: the production PostgreSQL hosting provider and related infrastructure providers.
  • Caching/realtime services: Redis infrastructure where enabled.
  • Analytics and monitoring: only where configured for production use.

These providers may process information on our behalf for the purpose for which their services are used. Their own terms and privacy notices may also apply.

2.6 Order and Delivery Information

We use delivery information to fulfil your order and coordinate delivery to the address you provide.

Where a delivery partner, staff member or third-party service is involved, only information reasonably necessary for fulfilment should be shared.

2.7 Communications

We may send service-related communications including:

  • OTP verification messages
  • Order confirmation
  • Payment confirmation
  • Order preparation/processing updates
  • Out-for-delivery notification
  • Delivery completion notification
  • Important order changes
  • Customer support responses

Marketing communications should be sent only in accordance with applicable requirements and the customer's applicable communication preferences.

2.8 Cookies and Similar Technologies

The website may use cookies, local storage or similar technologies for purposes such as:

  • Maintaining sessions
  • Remembering preferences
  • Shopping/cart functionality
  • Security
  • Website performance
  • Analytics, where enabled

See the Cookie Policy for additional information.

2.9 Data Retention

We retain information only for as long as reasonably necessary for the purposes described in this policy, including order fulfilment, customer support, accounting, tax, fraud prevention, dispute resolution and legal obligations.

Actual retention periods should be defined by the business based on applicable law and operational requirements.

Business confirmation required: [Insert approved retention schedule / “as required by applicable law and business records requirements”] .

2.10 Data Security

We use reasonable technical and organisational safeguards appropriate to the nature of the information we process. These may include:

  • HTTPS/TLS in production
  • Secure authentication and password hashing
  • Server-side access controls
  • Environment-variable based secret management
  • Database access controls
  • Payment processing through authorised gateway infrastructure
  • Validation of server-side inputs
  • Logging and monitoring
  • Backup and recovery practices appropriate to the production infrastructure

No internet service can guarantee absolute security. Customers should also protect their passwords, OTPs and devices and should contact us promptly if they suspect unauthorised activity.

2.11 Your Choices and Requests

Subject to applicable law and the final production implementation, customers may contact us regarding access, correction, deletion or other privacy-related requests concerning their personal information.

Requests should be sent to:

Privacy / Grievance Contact: [privacy@domain.com]

Phone / WhatsApp: [number]

Postal address: [address]

We may need to verify the identity of the requester before processing a request.

2.12 Children's Data

The service is intended for general customers and is not intentionally designed to collect personal information from children except where permitted and appropriately handled under applicable law.

If you believe that personal information of a child has been provided improperly, contact us using the details above.

2.13 Policy Changes

We may update this Privacy Policy when our services, technology, legal requirements or data practices change. The updated version will be published on this page with a revised “Last updated” date.

2.14 Contact

For privacy questions or requests:

The Truffle Cakes

[LEGAL BUSINESS NAME]

[Registered/Business Address]

Email: [privacy@domain.com]

Phone: [phone]

---