Baking Excellence Since 2001 • Handcrafted in Nashik
Puffs 'n' Rolls
Back to Storefront
Customer Privacy & Data Protection

Privacy Policy

Effective Date: October 29, 2026 • Applicable to Puffs 'n' Rolls Online Store & Delivery Services

Our Privacy Promise

At Puffs 'n' Rolls, baking honest delicacies with pride has been our tradition since 2001. We treat your personal data with the exact same integrity: we collect only what is necessary to bake and deliver your food fresh, safeguard it with industry-standard protocols, and never sell your details to advertisers.

1. Information We Collect

When you browse our fresh menu, place an order, or register an account with Puffs 'n' Rolls, we collect specific information required to prepare and deliver your bakery order:

  • Customer Identity & Contact: Your full name, mobile phone number, and optional email address for order receipts and OTP verification.
  • Doorstep Delivery Address: Flat/house number, apartment/building name, street, landmark, area in Nashik (e.g., College Road, Nashik Road, Indira Nagar, Gangapur Road), pincode, and specific delivery instructions (e.g., doorbell instructions).
  • Order & Dietary Preferences: Items ordered, customized baking instructions (e.g., eggless preference, birthday cake inscription), and order history.
  • Payment Metadata: Selected payment method (Cash on Delivery or Secure Online UPI/Card) and transaction reference IDs. We never store credit/debit card numbers, CVVs, or bank account PINs on our servers. All electronic transactions are tokenized via certified PCI-DSS compliant banking partners.
  • Device & Session Data: Technical logs such as your browser type, IP address, and local device preferences used to maintain your shopping cart across sessions and remember your nearest bakery outlet.

2. How We Use Your Information

Your data is used strictly to fulfill your bakery orders and elevate your customer experience:

  • Kitchen Preparation & Baking: Sending your itemized order and custom baking requests to the kitchen ovens at your chosen outlet.
  • Express Doorstep Delivery: Sharing your delivery address, landmark, and phone number with our dedicated logistics fleet so the assigned rider can locate your doorstep.
  • Live Order Updates: Sending real-time SMS or WhatsApp notifications when your order is confirmed, baking in the oven, dispatched, and approaching your location.
  • Customer Support & Quality Resolution: Assisting you with order modifications, dietary/allergen inquiries, or resolving delivery questions.
  • Security & Fraud Prevention: Verifying order authenticity to protect against unauthorized transactions and bot spam.

3. Information Sharing & Third Parties

We respect your privacy. Puffs 'n' Rolls will never sell, rent, trade, or lease your personal information to third-party advertisers or telemarketing companies.

Information is disclosed solely in the following limited and necessary operational scenarios:

  • Delivery Executives: Assigned delivery riders receive only your name, delivery address, and phone number to hand over hot bakery items at your location.
  • Secure Payment Processors: Standard payment gateway interfaces securely process your UPI/Card payments with bank-grade 256-bit encryption.
  • Legal & Regulatory Obligations: Where required by applicable Indian laws, judicial orders, or food safety authorities (FSSAI) in response to valid legal requests.

4. Data Protection & Storage Security

We take administrative, technical, and physical measures to safeguard your personal data:

  • All web traffic between your device and our servers is encrypted using modern Transport Layer Security (TLS 1.3 / HTTPS).
  • Access to backend store terminals and customer contact lists is restricted strictly to authenticated outlet kitchen managers and dispatch supervisors via role-based access control (RBAC).
  • Sensitive authentication tokens and customer session data are safely hashed and protected against unauthorized tampering.

5. Cookies & Local Storage

Our web platform uses lightweight browser cookies and local storage tokens to provide a seamless browsing and ordering experience:

  • Cart Persistence: Retains your selected bakery items in your basket even if you refresh or switch pages.
  • Outlet Preference: Remembers your chosen Nashik outlet (College Road, Nashik Road, or Indira Nagar) so you see accurate local kitchen availability and stock.
  • Authentication State: Keeps you logged into your customer profile so you do not have to re-enter your delivery address for repeat orders.

You can configure your browser to reject cookies; however, some interactive features like live cart updates and automatic address population may not function as intended.

6. Your Rights & Account Control

As a Puffs 'n' Rolls customer, you retain control over your information:

  • Access & Edit Addresses: You can view, add, modify, or delete your saved delivery addresses anytime by visiting the My Account dashboard.
  • Order Records: You can review past order receipts, delivery timestamps, and items ordered directly in your account.
  • Data Deletion Request: If you wish to permanently delete your customer account and associated saved addresses, you may send a simple request to care@puffsnrolls.com with your registered phone number.

7. Grievance Officer & Contact Details

If you have any questions, concerns, or grievances regarding this Privacy Policy or how your data is handled, please contact our Customer Care & Compliance Desk:

Puffs 'n' Rolls Bakery

Grievance & Customer Privacy Officer

Shop No. 4, Shreerang Heights, Opp. BYK College, College Road, Nashik, Maharashtra – 422005

This Privacy Policy was formulated in compliance with the Information Technology Act, 2000, and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.