Privacy Policy

Last updated: 15 May 2026

Your privacy matters to us. This Privacy Policy explains what personal information Crust & Crumble Bakers (“we”, “us”) collects when you visit crustandcrumblebakers.com or cncbakers.com, how we use it, who we share it with, and the choices you have. By using the Website, you consent to the practices described here.

1. Information we collect

To take and deliver your order, we ask for only what we genuinely need:

• Contact details — your name, mobile number and email address.
• Delivery details — the delivery address, landmark, locality and any instructions for the rider.
• Order details — the items in your cart, message on the cake, delivery slot and any special requests.
• Payment information — processed by Razorpay; we receive only a success or failure confirmation and a transaction reference. We do not store full card numbers, UPI PINs or net-banking credentials.
• Technical information — basic logs such as IP address, browser type, the pages you visit on the Website and the device you use, collected automatically through cookies and analytics tools.

2. How we use your information

We use the information you share with us to:

• Process your order, arrange delivery and send you confirmation, dispatch and delivery updates.
• Provide customer support — answer queries, resolve issues and process refunds where applicable.
• Send you occasional updates about new bakes, seasonal launches or offers, only where you have opted in or are an existing customer. You can opt out at any time.
• Improve the Website, our menu and our customer experience by understanding what works for you.
• Detect, prevent and address fraud, abuse or security incidents.
• Comply with any legal or regulatory obligation we are subject to.

3. Who we share your information with

We do not sell your personal information. We share it only with the partners we need to in order to deliver your order:

• Delivery partners — your name, phone number and delivery address are shared with our rider or third-party logistics partner for that specific order.
• Razorpay — our PCI-DSS compliant payment gateway, which processes the transaction on our behalf under its own privacy and security standards.
• Analytics and infrastructure providers — for example, hosting and website analytics services that help us run the Website. These providers process information only on our instructions and under appropriate confidentiality obligations.
• Government or legal authorities — where we are required to do so by law, a court order or a legitimate regulatory request.

4. Cookies and analytics

The Website uses cookies and similar technologies to remember your cart, keep you signed in to sessions, and understand how visitors use the site so we can improve it. You can disable cookies in your browser settings, but please note that parts of the Website (such as the cart and checkout) may not work correctly without them.

5. Data security

We take reasonable technical and organisational measures to protect your information — including HTTPS encryption in transit, restricted admin access, and using a PCI-DSS compliant payment gateway for all card and UPI transactions. No method of transmission over the internet is 100% secure, but we work hard to keep your data safe.

6. How long we keep your information

We retain order and contact information for as long as is necessary to fulfil orders, provide after-sales support, maintain accurate financial records and meet our tax and regulatory obligations under Indian law. Analytics data is kept in aggregated form.

7. Your choices and rights

You can, at any time:

• Ask us what personal information we hold about you.
• Ask us to correct any information that is wrong or out of date.
• Ask us to delete your information, subject to any record-keeping we are required to maintain by law.
• Unsubscribe from marketing emails or WhatsApp updates — simply reply “STOP” or use the unsubscribe link.

To exercise any of these rights, write to us at the email address at the bottom of this page and we will respond within a reasonable timeframe.

8. Children

The Website is intended for users aged 18 and above. We do not knowingly collect personal information from children. If you believe a child has provided us with information, please contact us and we will delete it.

9. Third-party links

The Website may link to third-party sites, such as our Instagram page or the workshops site at classes.cncbakers.com. We are not responsible for the privacy practices of those sites — please review their own policies before sharing any information with them.

10. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or in the law. The latest version will always be on this page with the “Last updated” date above.