Skip to content
Magdalene Bakers

The small print

Privacy Policy

Last updated: 26 September 2026

Magdalene Bakers is a small, home-style bakery run from an FSSAI-certified cloud kitchen in Bangalore, Karnataka. We only collect what we need to bake, deliver and bill your order, and we look after it carefully. This policy explains what we collect, why, who we share it with and the choices you have, in line with the Digital Personal Data Protection Act, 2023 and other applicable Indian law.

1. Who we are

"We", "us" and "our" mean Magdalene Bakers, operated by Magdalene Bakers. This policy covers our website (magdalenebakers.com) and orders placed with us. Under the Digital Personal Data Protection Act, 2023, we are the Data Fiduciary for your personal data, which means we decide how and why it is used.

2. What we collect

We do not offer customer accounts, and you never need to sign up to order from us.

Order details you send us on WhatsApp

When you message us, we receive what you choose to share: your name, WhatsApp number, delivery address or pickup preference, date and time, items, cake message, reference photos and any allergy or dietary information.

Details you type into Quick Order

Our Quick Order form builds a basket and writes a WhatsApp message for you. Your basket, and your name, phone number and address if you fill them in, are saved only in your own browser's local storage so they are ready next time. They are not sent to or stored on our servers, and nothing reaches us until you press send in WhatsApp. You can remove them at any time by emptying the basket or clearing your browser's data for our website.

Billing details for invoices

When we issue a bill, we record your name, phone number, email address (optional), GSTIN (if you want to claim input tax credit), address, and the items, amounts and taxes, in a private system used only by the bakery. We may send your invoice through a private link that is very hard to guess. Anyone with the link can open the invoice, so please share it with care.

Payments

We accept UPI and cash. We never ask for your card details, PIN or OTP. For UPI payments we only see what any payee sees, such as your name, UPI ID and transaction reference.

Website usage and cookies

Our website uses a few essential cookies and browser storage items that keep it secure and working, such as a security token and a note that you have seen our welcome animation. They are not used for advertising.

We do not currently use analytics or advertising cookies on our website.

3. Why we use your information

  • To take, confirm, bake, deliver or hand over your order.
  • To contact you about your order, including changes and delivery updates.
  • To take care with any allergy or dietary needs you tell us about.
  • To issue GST invoices and meet our tax, accounting and food safety obligations.
  • To handle feedback, complaints, cancellations and refunds (see our Refund & Cancellation Policy).
  • To improve our website and menu, using summary information only.

We use your data because you chose to share it for your order, or because the law requires it, for example tax records. We only send offers or updates if you ask us to, and you can tell us to stop at any time.

4. Who we share it with

  • WhatsApp (Meta): our orders are placed and discussed on WhatsApp. Your messages are handled under WhatsApp's own terms and privacy policy.
  • Delivery partners: where we use a delivery partner, we share only your name, phone number, address and delivery instructions.
  • Service providers: our website and billing hosts, email provider and accountant, only as far as each needs for their work.
  • Authorities: when the law requires it, for example tax or food safety authorities, or under a court order.

We never sell, rent or trade your personal data, and we never share it with other businesses for their marketing.

5. How we protect it

Our billing system is private and password protected, and only the bakery can use it. We keep only what we need and use reasonable security measures. If you think something has gone wrong, please tell us straight away.

6. How long we keep it

  • Invoices and billing records: kept for as long as Indian GST and tax law requires, generally 72 months from the due date of the annual GST return for that year, and then deleted.
  • WhatsApp chats: kept while useful for your order and repeat orders. You can ask us to delete them.
  • Quick Order details: stay in your browser until you clear them. We never hold them.

7. Your rights

Under the Digital Personal Data Protection Act, 2023, you have the right to:

  • ask for a summary of the personal data we hold about you and how we use it;
  • ask us to correct, complete or update it;
  • ask us to erase it, unless we must keep it by law (for example, invoices);
  • withdraw your consent at any time (this does not affect earlier use, and we may then be unable to complete an order);
  • raise a grievance with us and receive a response; and
  • nominate another person to exercise these rights for you in the event of death or incapacity.

If you are not satisfied with our response, you may complain to the Data Protection Board of India.

8. Children

If you are under 18, please ask a parent or guardian to order for you. The only children's details we usually receive are those a parent shares for an order, such as a name for a birthday cake.

9. Contact and grievances

To use your rights, ask a question or raise a grievance about your personal data, contact Magdalene Bakers at Magdalene Bakers:

We will reply as soon as we can, and within the time required by law. See also our Contact page.

10. Changes to this policy

We may update this policy when our services or the law change. The date at the top shows the latest version. Please also read our Terms & Conditions and Allergen Notice.