Privacy Policy
Last updated: 2026-09-02
This page explains what personal information Neeta's Home Bakery ("we", "us") collects when you use this website, why we collect it, where it is stored, and how you can ask us to correct or delete it. We have written this to describe exactly what our systems actually do, not a generic template.
1. Who we are
Neeta's Home Bakery is a home-based bakery run by Neeta Srivastava, operating from H Block, 1st Avenue, Gaur City 1, Greater Noida West, Gautam Buddha Nagar, Uttar Pradesh 201301. For any privacy question, contact us at +91 96542 82170 (call or WhatsApp), by email at neetasrivastava1974@gmail.com, or via @neetashomebakery on Instagram.
2. What we collect
When you place an order or contact us through the site, we collect:
- Name — to address you and to put on the order.
- Phone number — to confirm your order, coordinate delivery, and let our courier reach you.
- Delivery address and pincode — to check whether you're within our delivery range and to route the delivery.
- Email address (optional) — so we can reach you about your order, including the confirmation and status updates we send by email when our email provider is switched on. When it is not, your confirmation comes over WhatsApp or a phone call instead.
- Order history — what you've ordered, when, and its value, so we can show you your past orders and handle any support request about them.
- Class or custom-cake enquiry details — when you use the enquiry form on our Classes or Custom Cakes page, we store what you type in the free-text box, along with the number of participants and any preferred date. For a baking-class enquiry this typically includes the children’s ages and any food allergies you tell us about, so we can plan the session safely.
We do not ask for or store your card, UPI PIN, or any full payment credential — payments happen through UPI apps on your own phone, or (once enabled) a payment gateway that handles your card/bank details directly; we only ever see whether a payment succeeded and a reference number.
3. Where your data is stored
Your order and account data is stored in Cloudflare D1, a managed database, on infrastructure we control directly — we do not sell, rent, or share it with data brokers or advertisers.
To check whether your pincode falls within our delivery radius and to calculate the delivery fee, we send your pincode (not your full address or name) to OpenStreetMap's Nominatim geocoding service to get an approximate location. The result is cached in our own database so the same pincode is never looked up twice, and Nominatim only ever sees a pincode, not who you are.
4. Who else sees your data
We keep this list short, and we switch a provider on only when we actually need it. Each of the ones below is either in use or built and waiting to be turned on, so this section says what each one would receive, and what happens while it is off.
- Our delivery partner (currently booked manually per order, moving to an on-demand courier service) receives only what's needed to make the delivery: name, phone number, and address.
- Brevo, an email service, is the provider we use to send email, and it carries two kinds: the order confirmation and status updates that go to you, and the copy of each order and enquiry that goes to Neeta so she knows to start baking. Between the two it processes your email address, your name and phone number, your delivery address, what you ordered and what it cost, and anything you wrote in an enquiry — only to deliver those emails, and only while email is switched on. While it is off, no email leaves our system and Brevo receives nothing.
- Telegram (Telegram Messenger Inc.) and WhatsApp (Meta) are the two channels we can use to alert Neeta that an order or an enquiry has come in, so she can start baking without watching the site. Whichever of them is switched on receives your name and phone number, what you ordered, the amount, and the delivery date and slot — or, for a class or custom-cake enquiry, what you typed in the enquiry box. It gets those only in order to deliver that one message to her, and they are not shared onward or made public. While both are off, that alert reaches her only as a browser notification on her own device, encrypted end to end so the notification service cannot read it, and no messaging company sees your order at all.
- We do not use Google Analytics, Meta/Facebook Pixel, ad-retargeting tags, or any third-party advertising tracker on this site. If we ever add basic, privacy-respecting analytics (for example, to count page visits without tracking individuals across sites), we will update this page first.
If we switch any of these on or off, or add a provider that is not named here, we will change this section before we do it.
We do not sell your personal data to anyone, for any reason.
5. Why we collect it
We only collect what we need to take your order, deliver it, support you if something goes wrong, and meet our own recordkeeping and tax obligations as a registered food business. We do not collect data for advertising or profiling.
6. How long we keep it
We keep order records for as long as needed for accounting, tax, and food-safety traceability purposes, and generally no longer than necessary beyond that. If you ask us to delete your account data and you have no pending or recent order that we're legally required to retain records of, we will delete your personal details from our active database within a reasonable time of your request.
7. Your rights
Under India's Digital Personal Data Protection Act, 2023, you have the right to:
- Ask what personal data we hold about you.
- Ask us to correct inaccurate or incomplete data.
- Ask us to delete your data, subject to our legal obligation to retain certain business and tax records for a minimum period.
- Withdraw consent for anything we do beyond fulfilling your order (for example, if we ever add marketing messages, which today we do not send).
To exercise any of these, contact our Grievance Officer (details below). We will respond within a reasonable time, generally within 30 days.
8. Grievance Officer
In accordance with the Information Technology Act, 2000 and its rules, the Grievance Officer for this website is:
Neeta Srivastava Neeta's Home Bakery, H Block, 1st Avenue, Gaur City 1, Greater Noida West, Gautam Buddha Nagar, Uttar Pradesh 201301 Phone/WhatsApp: +91 96542 82170 Email: neetasrivastava1974@gmail.com
You can raise any grievance about how your data is handled, or about content on this site, directly with the above.
9. Cookies and technical data
The site uses only the minimal technical storage needed to keep your cart working and, if you use it, to remember your delivery address for your next visit. We do not use tracking cookies for advertising.
10. Children
We run baking classes for children, so we do handle some information about minors — but only ever through a parent or guardian, never from a child directly.
When you enquire about a class, we ask for the number of children and their ages, and you may tell us about a food allergy. We use this only to plan and cater the session safely, and it is stored with your enquiry in the same database as our orders (see sections 3 and 6). We do not ask children for their own contact details, and we do not create accounts for children.
The enquiry form is meant to be filled in by a parent or guardian. By sending it, you confirm you are the parent or guardian of the children you are telling us about. If you would like the information about your children removed after the class, contact our Grievance Officer (section 8) and we will delete it.
11. Photographs of class participants
We photograph and film our baking classes, and we publish some of those pictures on this website and on our Instagram page (@neetashomebakery) to show what a class is like. Children are identifiable in them.
We ask the parent or guardian who booked the class before we publish a picture of their child. If you do not want your child photographed, tell us before or during the session and we will keep them out of the shots, and you can change your mind after the session too.
If a picture of your child is already on this site or on Instagram and you want it taken down, contact us on +91 96542 82170 or at neetasrivastava1974@gmail.com and we will remove it from this website within a reasonable time, and from Instagram as soon as we can.
12. Changes to this policy
If how we handle your data changes — for example, if we add a new payment gateway or delivery provider — we will update this page and change the "Last updated" date above. We encourage you to check back occasionally.