Privacy Policy
Effective Date: October 29, 2026 • Applicable to Puffs 'n' Rolls Online Store & Delivery Services
Our Privacy Promise
At Puffs 'n' Rolls, baking honest delicacies with pride has been our tradition since 2001. We treat your personal data with the exact same integrity: we collect only what is necessary to bake and deliver your food fresh, safeguard it with industry-standard protocols, and never sell your details to advertisers.
1. Information We Collect
When you browse our fresh menu, place an order, or register an account with Puffs 'n' Rolls, we collect specific information required to prepare and deliver your bakery order:
- Customer Identity & Contact: Your full name, mobile phone number, and optional email address for order receipts and OTP verification.
- Doorstep Delivery Address: Flat/house number, apartment/building name, street, landmark, area in Nashik (e.g., College Road, Nashik Road, Indira Nagar, Gangapur Road), pincode, and specific delivery instructions (e.g., doorbell instructions).
- Order & Dietary Preferences: Items ordered, customized baking instructions (e.g., eggless preference, birthday cake inscription), and order history.
- Payment Metadata: Selected payment method (Cash on Delivery or Secure Online UPI/Card) and transaction reference IDs. We never store credit/debit card numbers, CVVs, or bank account PINs on our servers. All electronic transactions are tokenized via certified PCI-DSS compliant banking partners.
- Device & Session Data: Technical logs such as your browser type, IP address, and local device preferences used to maintain your shopping cart across sessions and remember your nearest bakery outlet.
2. How We Use Your Information
Your data is used strictly to fulfill your bakery orders and elevate your customer experience:
- Kitchen Preparation & Baking: Sending your itemized order and custom baking requests to the kitchen ovens at your chosen outlet.
- Express Doorstep Delivery: Sharing your delivery address, landmark, and phone number with our dedicated logistics fleet so the assigned rider can locate your doorstep.
- Live Order Updates: Sending real-time SMS or WhatsApp notifications when your order is confirmed, baking in the oven, dispatched, and approaching your location.
- Customer Support & Quality Resolution: Assisting you with order modifications, dietary/allergen inquiries, or resolving delivery questions.
- Security & Fraud Prevention: Verifying order authenticity to protect against unauthorized transactions and bot spam.
4. Data Protection & Storage Security
We take administrative, technical, and physical measures to safeguard your personal data:
- All web traffic between your device and our servers is encrypted using modern Transport Layer Security (TLS 1.3 / HTTPS).
- Access to backend store terminals and customer contact lists is restricted strictly to authenticated outlet kitchen managers and dispatch supervisors via role-based access control (RBAC).
- Sensitive authentication tokens and customer session data are safely hashed and protected against unauthorized tampering.
6. Your Rights & Account Control
As a Puffs 'n' Rolls customer, you retain control over your information:
- Access & Edit Addresses: You can view, add, modify, or delete your saved delivery addresses anytime by visiting the My Account dashboard.
- Order Records: You can review past order receipts, delivery timestamps, and items ordered directly in your account.
- Data Deletion Request: If you wish to permanently delete your customer account and associated saved addresses, you may send a simple request to care@puffsnrolls.com with your registered phone number.
7. Grievance Officer & Contact Details
If you have any questions, concerns, or grievances regarding this Privacy Policy or how your data is handled, please contact our Customer Care & Compliance Desk:
Puffs 'n' Rolls Bakery
Grievance & Customer Privacy Officer
Shop No. 4, Shreerang Heights, Opp. BYK College, College Road, Nashik, Maharashtra – 422005
This Privacy Policy was formulated in compliance with the Information Technology Act, 2000, and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.
