Policy
Privacy Policy
Last updated: 15 October 2026
This policy explains how Mithila Bakes Private Limited ("Mithila Bakes", "we") handles your personal data when you use mithilabakes.com. We follow the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000.
Who we are
What we collect
- When you order: your name, mobile number, delivery address (area, block, flat, landmark), date and time slot, the items you choose, messages for cakes and any notes.
- When you apply for a franchise: your name, mobile number, city, investment range, space and start plans, and optionally email, occupation and your message.
- Technical data: a one-way scrambled (hashed) form of your IP address, kept for a short time only to stop spam and repeated fake orders.
We do not collect payment card or bank details. All orders are paid in cash.
Why we use it
- To prepare, confirm and deliver your order, and to call you about it.
- To review franchise applications and contact you about them.
- To prevent fraud and abuse of the website.
We use your data only with your consent, which you give by ticking the box on the order or application form. We do not sell your data and we do not use advertising trackers.
Where it is stored
Orders and applications are stored in a secure database run by Cloudflare, Inc. on our behalf. Your browser also keeps your cart and the details you typed on your own device (local storage), so you do not have to type them again. These saved details are removed automatically after 30 days, or straight away if you tap "Forget my saved details" in the cart. We do not use cookies for tracking.
Who we share it with
Only our own staff who prepare and deliver your order, or who handle franchise enquiries. We share data with government authorities only when the law requires it.
How long we keep it
- Orders: 12 months, then deleted, except records we must keep for tax or legal reasons.
- Franchise applications: 24 months.
- Spam-protection data: 7 days.
Your rights
You can ask us to show, correct or delete your personal data, withdraw your consent, or nominate another person to act for you. Contact our Grievance Officer below. We reply within 7 days. If you are not satisfied, you may complain to the Data Protection Board of India.
Children
Our website is meant for adults. If you are under 18, please ask a parent or guardian to place the order.
Security
The website uses HTTPS encryption, and only authorised staff with a password can see orders. If a data breach affects you, we will inform you and the authorities as the law requires.
Grievance Officer
Biswaranjan Sahu, Mithila Bakes Private Limited
+91 89080 19704 · order@mithilabakes.com
Changes
We may update this policy. The date at the top shows the latest version.