1. Introduction

Gifts n Bakery ("we", "our", or "us") operates the website giftsnbakery.com and manages our physical store located at 22, near IIT Roorkee Gate, Civil Lines, Roorkee, Uttarakhand 247667. This Privacy Policy describes how we collect, use, store, and protect your personal information when you visit our website, place orders, or interact with our services.

By using our website or services, you consent to the practices described in this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of our website and services.

This policy is compliant with the Information Technology Act, 2000 of India and applicable data protection regulations.

2. Information We Collect

We collect the following types of information to provide and improve our services:

2.1 Personal Information

• Identity: Your full name and contact details.
• Contact: Phone number, WhatsApp number, email address, and billing address.
• Delivery Information: Shipping address, recipient name, and contact number for delivery coordination.
• Payment Information: Payment method details, transaction history, and billing records. We do not store complete credit card or debit card numbers on our servers.
• Account Credentials: Username and password if you create an account on our website.

2.2 Non-Personal Information

• Device Information: IP address, browser type, operating system, and device identifiers.
• Usage Data: Pages visited, time spent on pages, referral sources, and click patterns.
• Cookies and Tracking: Small data files stored on your device to enhance browsing experience and remember preferences.
• Location Data: General geographic location derived from your IP address for delivery feasibility and service optimization.

2.3 Information from Third Parties

We may receive information about you from payment gateways, delivery partners, and analytics providers to facilitate order processing and service improvement.

3. How We Collect Your Information

We collect information through the following methods:

• Direct Collection: When you fill out forms on our website, place orders, register an account, subscribe to newsletters, or contact us.
• Automated Technologies: Cookies, web beacons, server logs, and similar technologies as you navigate our website.
• Communication Channels: Information shared during phone calls, WhatsApp conversations, emails, or in-store visits.
• Social Media: Publicly available information when you interact with our social media pages or share content related to our products.

4. How We Use Your Information

We use your information for the following purposes:

• Order Processing: To accept, process, fulfill, and deliver your orders accurately and on time.
• Communication: To send order confirmations, delivery updates, respond to inquiries, and provide customer support.
• Payment Processing: To process transactions securely through our payment partners.
• Account Management: To maintain your user account, order history, and saved preferences.
• Marketing: To send promotional offers, new product announcements, and festive discounts if you have opted in. You can unsubscribe at any time.
• Service Improvement: To analyze website usage, understand customer preferences, and enhance our products and services.
• Security: To detect and prevent fraud, unauthorized access, and other illegal activities.
• Legal Compliance: To comply with applicable laws, regulations, and legal processes.

5. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to improve your browsing experience. Cookies are small text files stored on your device that help us:

• Remember your login state and shopping cart contents.
• Understand how you use our website so we can improve functionality.
• Deliver relevant advertisements and measure their effectiveness.
• Personalize content based on your preferences and location.

You can manage cookie preferences through your browser settings. However, disabling cookies may affect certain features of our website, such as cart persistence and personalized recommendations.

We use the following types of cookies:

• Essential Cookies: Required for basic website functionality and cannot be disabled.
• Functional Cookies: Enable enhanced features and personalization.
• Analytics Cookies: Help us understand visitor behavior and website performance.
• Marketing Cookies: Used to deliver relevant advertisements and track campaign effectiveness.

6. How We Share Your Information

We respect your privacy and do not sell your personal information to third parties. We may share your information only in the following circumstances:

• Service Providers: With delivery partners, payment processors, hosting providers, and IT support services who assist in our operations. These partners are contractually bound to protect your information.
• Legal Requirements: When required by law, court order, or government regulation, or to protect our rights, property, or safety.
• Business Transfers: In connection with a merger, acquisition, or sale of assets, where customer information may be transferred as part of the business.
• With Your Consent: When you explicitly authorize us to share your information for a specific purpose.

We do not share your information with advertisers or data brokers for unrelated marketing purposes.

7. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. Our security measures include:

• SSL encryption for all data transmitted between your browser and our website.
• Secure payment processing through PCI-DSS compliant payment gateways.
• Restricted access to personal information within our organization on a need-to-know basis.
• Regular security audits and vulnerability assessments.
• Password protection and multi-factor authentication for administrative access.

While we take reasonable precautions, no internet transmission or electronic storage method is completely secure. We cannot guarantee absolute security but commit to promptly notifying you and relevant authorities in the event of a data breach affecting your personal information.

8. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including:

• Active Accounts: Information is retained while your account remains active or as needed to provide services.
• Order Records: Transaction and delivery records are retained for 7 years to comply with tax and accounting obligations.
• Marketing Data: Contact information for marketing purposes is retained until you unsubscribe or request deletion.
• Legal Compliance: Information may be retained longer if required by applicable laws or to resolve disputes.

Once the retention period expires, your information is securely deleted or anonymized so it can no longer be associated with you.

9. Your Privacy Rights

Under applicable data protection laws, you have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request correction of inaccurate or incomplete information.
• Deletion: Request deletion of your personal information, subject to legal retention requirements.
• Restriction: Request limitation on how we process your information in certain circumstances.
• Portability: Request transfer of your information to another service provider in a structured format.
• Objection: Object to processing for direct marketing or legitimate interest purposes.
• Withdraw Consent: Withdraw previously given consent for specific processing activities.

To exercise any of these rights, please contact us using the details provided in Section 13. We will respond to your request within 30 days and may ask for identity verification to protect your information.

10. Children's Privacy

Our website and services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information without your consent, please contact us immediately. We will take steps to delete such information from our records.

11. Third-Party Links and Services

Our website may contain links to third-party websites, social media platforms, or payment services. This Privacy Policy does not apply to those external sites. We encourage you to review the privacy policies of any third-party services you interact with. We are not responsible for the privacy practices or content of external websites.

Our website uses Google Pay for payment processing and may integrate with social media platforms for sharing features. These services have their own privacy policies governing data collection and use.

12. International Data Transfers

Our primary data storage and processing occurs within India. However, some of our service providers may operate servers or process data outside India. In such cases, we ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy and applicable Indian data protection laws.

14. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or business operations. Changes will be posted on this page with an updated effective date. Material changes will be notified to you via email or a prominent notice on our website.

We encourage you to review this policy regularly to stay informed about how we protect your information. Your continued use of our website after changes constitutes acceptance of the updated policy.