Privacy Policy
At Bhagwati Sweet Mart, we are committed to safeguarding your personal privacy and protecting the confidentiality of the personal information you share with us while browsing our storefront and ordering authentic sweets and savouries.
Introduction and Scope
This Privacy Policy governs the manner in which Bhagwati Sweet Mart collects, uses, maintains, and discloses personal data collected from users (each, a "Customer") of our website and e-commerce ordering portal.
By accessing our storefront, registering an account, or placing an order for sweets, savouries, or gift boxes, you consent to the data collection and operational practices described herein in accordance with the Information Technology Act, 2000, and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.
Information We Collect
We may collect personal identification information from customers in several ways, including when customers visit our site, register an account, add sweets to their cart, place an order, or contact customer care:
Customer name, mobile telephone number, email address, and communication preferences.
Delivery address lines, landmarks, city, postal pincode, and recipient contact details for delivery dispatch.
Items purchased, quantity, date/time stamps, payment transaction IDs, invoice records, and delivery status.
IP address, browser type, operating system, session cookies, and navigation behavior to prevent fraud and improve store responsiveness.
Account Registration and Credential Security
When you create an account on our store, your credentials are protected with one-way salted cryptographic hashing (such as BCRYPT). We do not have access to your plain-text password.
Customers are responsible for maintaining the confidentiality of their login credentials and should not share account access with unauthorized parties.
Payment Security & No Card Storage
Online transactions on Bhagwati Sweet Mart are processed through RBI-authorized, PCI-DSS Level 1 certified payment aggregators (such as Razorpay, Cashfree, or PhonePe).
Cookies and Local Storage
Our platform uses standard HTTP cookies and browser storage solely for functional and security purposes:
- Session Cookies: To keep track of items added to your sweets shopping cart and preserve your active session.
- Security Cookies: To protect forms against Cross-Site Request Forgery (CSRF) and verify user authorization tokens.
- Preferences: To remember your selected service mode (Delivery vs. Takeaway) for a smooth checkout experience.
You can choose to disable cookies through your individual browser settings; however, certain shopping features (such as your cart drawer and checkout) may not function as intended without cookies enabled.
How We Use Your Information
The information we collect is utilized strictly for lawful e-commerce purposes, including:
- Order Fulfillment: Preparing, packing, and dispatching fresh sweets to your specified doorstep or preparing them for in-store takeaway.
- Transactional Alerts: Sending timely SMS, WhatsApp, or email notifications regarding order confirmation, kitchen preparation, and delivery rider arrival.
- Customer Support: Assisting you with order modifications, special dietary queries, or refund and cancellation inquiries.
- Statutory Invoicing: Generating GST-compliant sales invoices and meeting accounting regulations under Indian tax laws.
Data Sharing and Third Parties
We do not sell, trade, or rent customers' personal identification information to marketing third parties or data brokers.
Personal data is disclosed only to trusted service partners strictly necessary for operating our business:
- Delivery Partners: Disclosing recipient name, address, and mobile number to our authorized logistics and delivery personnel solely for doorstep delivery.
- Payment Gateways: Transmitting transactional reference IDs for payment authorization and refund processing.
- Legal & Regulatory Authorities: Where mandated by law, court order, or official governmental request under Indian jurisdiction.
Data Security and Retention
We adopt appropriate data collection, storage, and processing practices and security measures to protect against unauthorized access, alteration, disclosure, or destruction of your personal data stored on our systems.
We retain customer order records for as long as is necessary to satisfy customer service requirements, resolve disputes, and comply with mandatory tax, audit, and legal retention obligations under the Central Goods and Services Tax (CGST) Act and relevant commercial statutes.
Customer Privacy Rights & Grievance Redressal
You have the right to review, update, or correct your personal details at any time by logging into your account dashboard. You may also request account closure or data rectification by contacting our dedicated support desk.
Privacy & Grievance Redressal Contact
In accordance with Information Technology Act, 2000 and rules made thereunder, any privacy queries, data requests, or grievances should be addressed to: