Lollipop Cake Shop
Data Protection & Security

Privacy Policy

Last Updated: October 2024 • Operating entity: Lollipop The Cake Shop, Tiruchirappalli, Tamil Nadu

1. Overview & Commitment

At Lollipop The Cake Shop (“we”, “us”, “our”), we are deeply committed to respecting and protecting the personal privacy of our website visitors and valued customers. This Privacy Policy outlines our procedures concerning the collection, storage, use, and disclosure of personal information when you use our website or purchase fresh cakes and confectionery items from us.

By accessing our website or providing information during the checkout process, you agree to the collection and use of information in accordance with this policy and Indian data protection regulations under the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.

2. Information We Collect

To process your cake orders and ensure prompt doorstep delivery across Tiruchirappalli, we collect the following types of information:

A. Personal Identification & Contact Details:

Full name, primary mobile phone number, secondary contact number (if provided for delivery coordination), and email address.

B. Delivery Address & Recipient Information:

Street address, landmark, area, city (Tiruchirappalli), postal pin code, and recipient contact name (for gift deliveries).

C. Order & Customization Specifications:

Cake flavour, weight, dietary choice (standard or 100% eggless), custom text message on cake, occasion details, and reference images uploaded for bespoke designer cakes.

D. Technical & Device Information:

Internet Protocol (IP) address, browser type, operating system, and anonymous analytics data regarding page visits to optimize website loading speeds and checkout flow.

security

3. Payment Security & Razorpay Compliance

We Never Store Sensitive Payment Data on Our Servers

All online transactions on our store are processed through Razorpay Payment Gateway (Razorpay Software Private Limited), an RBI-authorized payment aggregator certified under PCI-DSS (Payment Card Industry Data Security Standard) Level 1, the highest tier of global security certification.

  • No Card Data Storage: We do NOT capture, store, or process any credit or debit card numbers, CVV/CVC codes, expiry dates, net banking passwords, or UPI MPINs on our web servers.
  • 256-Bit SSL Encryption: All transaction communication between your browser and Razorpay is encrypted using industry-standard 256-bit Secure Sockets Layer (SSL) encryption.
  • Two-Factor Authentication: Card and net banking payments are secured by bank OTP (One-Time Password) verification or UPI PIN authorization in compliance with Reserve Bank of India mandates.
  • Razorpay processes your transaction data only to complete your payment authorization and fraud-prevention checks in accordance with their privacy policy.

4. How We Use Your Information

We use the collected information strictly for legitimate commercial purposes:

  • Processing, baking, and packaging your fresh cake order according to your exact specifications.
  • Coordinating accurate and timely doorstep delivery with our dedicated in-house delivery fleet.
  • Sending automated order confirmations, delivery slot updates, and electronic tax receipts via SMS, WhatsApp, and email.
  • Contacting you in the event of stock availability changes, address clarification, or baking design confirmation.
  • Handling customer support inquiries, feedback, and refund/cancellation claims.
  • Complying with statutory accounting and tax filing obligations under Indian law.

5. Information Sharing & Third Parties

We never sell, rent, trade, or monetize your personal information to third-party marketing companies.

We share minimal necessary data strictly with trusted service providers:

  • Payment Gateway (Razorpay): Transaction amount, order ID, customer name, email, and phone number to initiate and verify payment sessions.
  • Logistics Drivers: Name, delivery address, and phone number provided to delivery riders for the sole purpose of handing over the perishable cake parcel.
  • Legal Authorities: Only when required by law, subpoena, or law enforcement investigations in accordance with applicable Indian laws.

6. Cookies & Local Storage

Our website uses essential session cookies and browser local storage to maintain your shopping cart items, selected egg preferences, and delivery slot selections as you browse through our menu.

You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you disable cookies, some portions of the cart and checkout experience may not function as intended.

7. Data Retention & User Rights

We retain customer order history and contact details only for as long as necessary to fulfill order delivery, resolve customer service issues, and meet statutory tax audit requirements.

Under applicable Indian privacy laws, you have the right to:

  • Request confirmation of the personal data we hold about you.
  • Request correction or updating of inaccurate personal information.
  • Request deletion of your non-essential account or contact records.
  • Opt-out of promotional SMS or WhatsApp messages by notifying our helpline.

8. Grievance Redressal Officer

In accordance with the Information Technology Act, 2000 and rules made thereunder, the name and contact details of the Grievance Officer are provided below:

Grievance Officer: Customer Care Lead, Lollipop The Cake Shop

Address: 150, N Andar St, Tiruchirappalli, Tamil Nadu 620002, India

Email: [email protected]

Helpline: +91 96558 88829 / +91 84893 24697

Response Time: Inquiries and grievances are acknowledged within 24–48 working hours.