Privacy Policy

When you use The Estate Deli website, place an order, make a reservation, or contact us, we may collect information you provide, including:

• Name
• Email address
• Phone number
• Billing or contact information where required
• Delivery or pickup information where applicable
• Order details
• Reservation details
• Payment and transaction information (such as payment status, amount, and provider reference IDs)
• Website usage information needed to operate the site securely
• Information you voluntarily submit through contact forms or similar enquiries

The Estate Deli does not store customers’ complete card numbers, CVV codes, UPI PINs, passwords, or other sensitive payment credentials. Online payments are processed through third-party payment providers such as Razorpay. Payment credentials are handled by the relevant payment provider in accordance with its policies and applicable law.

We may use customer information to:

• Process and fulfil orders
• Process payments
• Confirm cake orders and pickup details
• Manage Supper Club reservations
• Communicate order or reservation updates
• Respond to customer enquiries
• Provide customer support
• Improve the website and services
• Help prevent fraud, misuse, and unauthorised transactions
• Maintain business and transaction records
• Comply with applicable legal and regulatory requirements

The website may use trusted third-party service providers to help us operate. Depending on how you use the site, this may include:

• Razorpay for payment processing
• Cloudinary for image and media hosting
• Gmail for transactional order emails (when configured)
• Telegram for internal order notifications (when configured)
• PostgreSQL database and application hosting infrastructure for storing and serving website data

These providers process relevant information only as needed to provide their services. Their handling of personal information is also governed by their own policies and applicable law.

The website may use cookies or similar technologies for essential website functionality, authentication and session management (including secure admin access), and security. We do not use advertising or marketing tracking cookies on the public website.

We use reasonable technical and organisational measures to help protect customer information. However, no internet-based system can guarantee absolute security. Please use strong unique passwords for any accounts you control and contact us promptly if you believe there has been unauthorised access related to your orders or reservations.

We retain personal information only for as long as reasonably necessary for the purposes described in this policy, including fulfilling orders, maintaining business records, resolving disputes, preventing fraud, and complying with legal obligations.

Subject to applicable Indian data protection laws and legitimate business or legal record-keeping requirements, you may request access to, correction of, or deletion of personal information we hold about you.

We may need to retain certain transaction, order, or reservation records even where a deletion request is made, where retention is required for legal, accounting, fraud-prevention, or operational reasons.

We may update this Privacy Policy from time to time. The updated version will be published on this page.