Privacy Policy

1. Who we are

DummyCake Studio makes and sells realistic display (dummy) cakes to bakeries and businesses across India. For this website, we are the “data controller”. You can reach us at any time using the contact details at the bottom of this page.

2. What we collect

Account details: your email address (used for OTP login), and if you complete a profile, your name, mobile number and delivery address.

Order details: the items you buy, quantities, delivery address, phone number, payment method, and any GST or shop details you give us at checkout.

Enquiries: the name, shop name, phone number and message you send us through the enquiry or contact forms.

Technical data: standard server logs such as IP address and browser type, kept for security and error diagnosis.

3. How we use it

To create and manage your account and remember your login for up to 30 days.

To process, pack, deliver and support your orders, including WhatsApp confirmation of your order.

To reply to enquiries and send service messages about your order (we do not send marketing emails without your consent).

To keep the site secure, prevent fraud and fix problems.

4. Payments and Razorpay

Online payments are processed by Razorpay Software Private Limited. When you pay, your card, UPI or netbanking details go directly to Razorpay — they never reach our servers or staff.

We receive from Razorpay only the payment confirmation, amount, and reference IDs needed to reconcile your order. Razorpay handles your payment data under its own privacy policy and RBI rules.

5. Cookies and local storage

We use browser storage (not third-party tracking cookies) to keep your cart, remember your login session, and store your cookie preference. You can clear this any time from your browser settings, though logging in and your cart will reset.

6. Who we share data with

Payment gateway (Razorpay) to take payments, and courier or delivery partners to ship your order — they receive only the address and phone details needed for delivery.

We never sell your data. We share it further only when the law requires it.

7. How long we keep it

Order and invoice records are kept as long as Indian tax law requires. Account and enquiry data are kept while your account is active or your enquiry is relevant, and deleted on request.

8. Your rights

You can ask to see, correct or delete the personal data we hold about you, or ask us to stop using it. Email us and we will respond within a reasonable time. You can also log out and clear your browser storage yourself at any time.

9. Security

Passwords are never stored — login works through one-time email codes. Admin access is limited to authorised staff, all traffic runs over HTTPS, and payment secrets live only on our server, never in your browser.