Who we are and scope
Sthira's Bake Studio is responsible for personal data processed through this website and our bakery operations in Bengaluru. This policy applies when you browse, sign in, place an order, request support or otherwise communicate with us.
Information we collect
- Account data: name, email address, profile image and Google account identifier received when you choose Google sign-in.
- Order and delivery data: recipient name, phone number, address, landmark, PIN code, selected delivery date, cart, order history and preferences.
- Payment data: payable amount, payment status and Razorpay order, payment and refund references. We do not receive your complete card details, UPI PIN or banking credentials.
- Communications: complaint details, refund reasons, emails, WhatsApp messages and information you choose to provide.
- Technical data: IP address, device/browser information, timestamps, security logs and diagnostic information generated when you use the service.
How we use information
We use personal data to:
- authenticate accounts and keep customer orders separate;
- validate carts, serviceable PIN codes and delivery dates;
- accept payments, prepare and deliver orders, and process approved refunds;
- send order, fulfilment, payment and refund communications;
- respond to complaints and customer-support requests;
- maintain tax, accounting, fraud-prevention and operational records;
- secure, diagnose and improve the website; and
- comply with applicable law and enforce our Terms & Conditions.
We process information with your consent where required and for purposes connected with fulfilling your requests, operating the store, protecting the service and meeting legal obligations. We do not sell personal data.
Service providers and disclosures
We disclose only the information reasonably necessary to:
- Google for sign-in and account authentication;
- Razorpay and participating banks/payment networks for payments and refunds;
- hosting, database, email, backup and security providers operating the service;
- delivery personnel who need recipient and address details;
- professional advisers supporting accounting, compliance or dispute handling; and
- government authorities when disclosure is legally required.
Providers process data under their own policies and contractual responsibilities. Some providers or infrastructure may process data outside Karnataka or India, subject to applicable legal requirements and safeguards.
Cookies, sessions and local storage
We use secure session cookies to keep signed-in users authenticated. Browser local storage keeps your cart and selected delivery date so they survive a refresh. These functions are necessary for the shopping experience. Clearing browser data signs you out or removes the locally saved cart. Third-party payment or authentication services may use their own cookies under their policies.
Retention
We retain data only as long as reasonably necessary for the purposes described here. Account information remains while the account is active. Order, invoice, payment, refund and complaint records may be kept longer for tax, accounting, consumer-protection, security and dispute-resolution requirements. Technical logs and failed-email records are retained for a shorter operational period where practical. Data is deleted or anonymised when it is no longer required, unless law requires continued retention.
Security
We use access controls, secure sessions, encrypted HTTPS connections, private database networking, restricted administration, payment-signature verification, rate limiting and encrypted backups. No internet service is completely risk-free. Please protect your Google account and notify us if you suspect unauthorized use of your bakery account.
Your choices and rights
You may ask us to provide information about your personal data, correct inaccurate or incomplete data, erase data that is no longer required, withdraw consent where processing depends on consent, or address a grievance. You may also nominate another person to exercise applicable rights in the event of death or incapacity. Certain records cannot be deleted immediately when they must be retained for legal, payment, fraud-prevention or dispute purposes.
Send a request from your registered email address to support@sthirasbakestudio.in. We may verify identity before acting. You can stop non-essential communications by contacting us; transactional messages about an active order will continue where necessary.
Children's data
The online checkout is intended for people legally capable of placing an order. We do not knowingly seek personal data from children for behavioural tracking or targeted advertising. A parent or lawful guardian should contact us if they believe a child has provided data without appropriate authorization.
Updates and grievance contact
We may update this policy when our practices or legal obligations change. Material changes will be shown on this page with a revised effective date.
For privacy questions or grievances, contact Sthira's Bake Studio Customer Support and Grievance Contact at support@sthirasbakestudio.in or +91 80737 01790, Bengaluru, Karnataka, India. Please describe the request and provide enough information for us to identify the relevant account or order.