Your data

Privacy Policy

Last updated 17 Jul 2026

This Privacy Policy explains how MELTED Bakehouse (“MELTED”, “we”, “us”) collects and uses personal data when you use meltedbakehouse.com / our storefront and related services. It is written for customers in India and reflects how our app actually works today.

Who we are

MELTED Bakehouse is a luxury eggless dessert bakery delivering pan-Mumbai. MELTED Bakehouse is the storefront brand of the partnership firm CRAFTERS & CO. (PAN-registered food business operator). Orders, payments, and FSSAI registration are under CRAFTERS & CO.. Email: hello@themeltedbakehouse.com Phone: +91 9137714239 Instagram: @MELTED_BAKEHOUSE (https://instagram.com/melted_bakehouse) Address: B 202 Aditya Apartment, Above Banana Leaf restaurant, Chikuwadi, Borivali West, Greater Mumbai, Maharashtra 400092

Data we collect

Depending on how you use MELTED, we may process: • Email — for sign-in via OTP (Supabase Email Auth) • Phone number — contact for delivery, waitlist / notify-me, and optional order SMS (not used for login) • Profile name — if you provide it • Delivery addresses — for fulfilment • Cart, wish list (Melt List), and order history — to run checkout and support • Waitlist / notify-me phone — if you ask for restock or drop alerts (often your profile mobile) • Payment references — Razorpay order / payment IDs (we do not store full card or UPI secrets) • Technical logs — as needed for security, debugging, and reliable hosting We do not ask for your card CVV or full card number on our servers; Razorpay’s checkout handles card entry.

Why we use it

We use personal data to: • Create and secure your account • Take and fulfil orders, calculate delivery, and run the kitchen board • Send transactional email (order confirmation, out-for-delivery) and optional SMS when enabled • Send waitlist / drop SMS you opted into (uses your profile mobile) • Prevent fraud, abuse, and payment errors • Improve the storefront and fix bugs Marketing SMS beyond transactional / waitlist flows is not a core v1 feature; if we add broader promos later, we will keep that separate from email login OTP consent.

Consent and necessity

We process data because it is necessary to perform the contract (take your order, deliver, support you), because you consented (email OTP sign-in, waitlist signup), or where we have another lawful basis under the Digital Personal Data Protection Act, 2023 (DPDP Act) as it applies to us. You can withdraw optional consents (for example waitlist) by contacting us. Withdrawal does not undo completed orders we must retain for legal or dispute reasons.

How long we keep it

We keep account and order records for as long as needed to fulfil orders, handle refunds / chargebacks, meet tax or consumer-law record-keeping, and secure the platform. When the purpose is served and we have no legal need to retain data, we will erase or anonymise it on request where the DPDP Act requires.

Your rights

Subject to applicable law, you may request access to, correction of, or erasure of your personal data, and withdraw consent where processing is consent-based. Contact the grievance channel below. We may ask you to verify your identity (for example the email or phone on the account) before acting.

Cookies and local storage

We use essential browser storage for your bag and Melt List so browsing works before and after sign-in. We do not run a separate advertising cookie stack in v1. If we add non-essential analytics later, we will update this policy.

Children

MELTED is not directed at children under 18. If you are under 18, use the service only with a parent or guardian.

Grievance officer

Grievance Officer: Nakshatra Jain Contact: hello@themeltedbakehouse.com Phone: +91 9137714239 We aim to acknowledge consumer / privacy complaints within 48 hours and resolve them within 30 days where practicable. You may also reach us on Instagram @MELTED_BAKEHOUSE.

Changes

We may update this policy as the product or law changes. The “Last updated” date at the top of the page will change when we do. Continued use after an update means you have read the revised notice.