Privacy policy

Knead & Bake Café is run by [Registered business name] (“we”, “us”). This policy explains what personal information we collect when you use this website, order from us or visit one of our cafés, and what we do with it.

What we collect

• When you order online: your name, mobile number, the café you choose, what you order and any note you add.
• At the café: your mobile number if you give it at the counter — for your bill, loyalty rewards or offers — and what you buy. If you order from your table by scanning a QR code, we confirm your mobile number with a one-time code.
• Payments: you pay at the counter. Card and UPI payments are handled by your bank and payment provider; we never see or store your full card number or UPI PIN.
• On this website: our hosting provider keeps standard technical logs (IP address, browser type, pages visited) to keep the site running and secure. Your basket and chosen café are saved in your own browser so they are still there when you come back; they reach us only when you place an order. We do not use advertising or tracking cookies.

Delivery addresses: when you order a delivery, the spot you pin on the map is kept with your address so the order reaches your door. Your browser asks you before it shares your current location, and you can say no and search instead. You can delete a saved address from your account page at any time.

How we use it

• To prepare your order and let the café know who is collecting it.
• To contact you about your order — for example, if an item has sold out.
• To issue bills and keep the tax and accounting records the law requires.
• To run loyalty rewards and send offers, only if you have agreed to receive them.
• To answer your questions, feedback and complaints.
• To keep the website secure and prevent misuse.

We never sell your personal information.

Who we share it with

• The café that prepares your order.
• Companies that provide services to us — website hosting, SMS and one-time-code delivery, our loyalty programme and payment processing — and only what each needs to do that job.
• Government authorities, when the law requires it.

If you order through a food delivery app such as Zomato or Swiggy, that app collects your information under its own privacy policy and shares with us only what we need to prepare your order.

How long we keep it

Bills and order records are kept for as long as tax and accounting laws require. Everything else is kept only as long as we need it for the purpose it was collected for.

Keeping it safe

We follow reasonable security practices and only staff who need your information can see it. No system is perfectly secure, but we work to protect what you share with us.

Your rights

Under the Digital Personal Data Protection Act, 2023, you can ask us to:

• tell you what personal information we hold about you;
• correct or update it;
• erase it, unless the law requires us to keep it;
• stop sending you offers — you can withdraw your consent at any time;
• let someone you nominate exercise these rights on your behalf.

If we do not resolve your concern, you may approach the Data Protection Board of India.

Children

If you are under 18, please ask a parent or guardian to place your order for you.

Grievance Officer

[Grievance Officer name]
[Registered business name], [Registered office address]
info@kneadbakecafes.com

We acknowledge every complaint within 48 hours and aim to resolve it within 30 days.

Changes to this policy

We may update this policy from time to time. The date at the top shows when it last changed.