Privacy policy

1. Who we are

New Frontier Bakery ("we", "us") operates bakery and cafe ordering from our kitchen in Matwari, Hazaribagh, Jharkhand, India. Contact: hello@newfrontierbakery.com. WhatsApp and phone numbers published on the site may also be used for order support.

2. Information we collect

• Order & fulfilment — name, phone, optional email, delivery or pickup preference, delivery address, order notes, cake customisation text, and preferred delivery date/time.
• Accounts — if you sign in with Google, your name, email, and optional phone/profile fields.
• Payments — method chosen and provider references (for example Razorpay order/payment ids). We do not store full card or UPI credentials.
• Bespoke media — optional reference images uploaded for custom cakes, used to fulfil that commission.
• Technical & security — IP address, user agent, timestamps, and rate-limit signals for abuse prevention and reliability.
• Support conversations — messages you send via WhatsApp, email, or the contact form.

3. How we use information

• Accept, price, prepare, deliver, and support orders
• Send status updates (in-app tracking, SMS, WhatsApp, or email as configured)
• Process payments, token advances, COD settlement, refunds, and invoices
• Prevent fraud, enforce rate limits, and secure staff portals
• Meet tax, accounting, and other applicable Indian legal obligations
• Improve menu operations and service quality using aggregated, non-sale analytics

We do not sell personal data.

4. Legal bases & Indian law

We process personal data to perform the ordering contract, pursue legitimate interests (security, fraud prevention, kitchen operations), and comply with law. Where India's Digital Personal Data Protection Act, 2023 (DPDP) and related rules apply, we will honour applicable rights and duties. You may also have remedies under the Information Technology Act, 2000 and consumer protection law.

5. Sharing with processors

We share limited data with processors only as needed to run the business, including:

• Payment gateways (e.g. Razorpay)
• Kitchen / POS partners (e.g. Petpooja for cafe dispatch, when enabled)
• Messaging providers (WhatsApp Business, SMS, Telegram ops alerts)
• Hosting, database, object storage, and error-monitoring providers
• Delivery partners assigned to your order

Processors handle data under their own terms and security controls. We do not authorize them to sell your data.

6. Cookies, sessions & analytics

• Essential — session/auth cookies and cart storage required to place and track orders.
• Security — signals used for rate limiting and abuse detection.
• Optional analytics — if we enable product analytics later, we will update this notice and, where required, seek consent.

7. Retention

• Order, payment, and invoice records — typically kept for operational and tax needs (often several years under Indian tax practice).
• Account profiles — until you request deletion, subject to legal retention.
• Cake reference images — may be removed after fulfilment or on request.
• Server logs — retained for a limited security window, then rotated.

8. Your choices & rights

You may request access, correction, or deletion of personal data, and withdraw optional messaging consent where applicable, by emailing hello@newfrontierbakery.com. Guests can track orders with the order id and tracking token from checkout without an account. We may need to verify your identity before fulfilling requests.

9. Security

We use HTTPS, Google OAuth for customer accounts, hashed passwords for staff, role-based staff access, content-security headers, and rate limiting on sensitive endpoints. No online system is perfectly secure; use a strong unique password if you create an account.

10. Children

Online ordering is intended for adults placing bakery orders. We do not knowingly collect personal data from children under 13.

11. Grievance & contact

Privacy or data requests: hello@newfrontierbakery.com. Designate a grievance officer name and contact here before launch if required under applicable rules.

12. Changes

We may update this policy as the product or law changes. Material updates will be posted on this page with a revised date.