Privacy Policy

01. Introduction

Welcome to Arka Brownies ("we," "us," "our," or "the Business"). We operate an online brownie ordering platform based in Coimbatore, Tamil Nadu, India, accessible via arkabrownies.in.

We are committed to protecting customer privacy and handling personal data with transparency, dignity, and care. This Privacy Policy outlines how personal data is collected, processed, used, and stored when you visit our website or place an order.

This policy is written in alignment with India's Digital Personal Data Protection Act, 2023 (DPDP Act) and applicable Indian regulations. Please note that publishing this Privacy Policy reflects our commitment to fair data principles but does not in itself guarantee absolute immunity or legal compliance; compliance requires ongoing operational adherence.

02. Information We Collect

We collect only the minimum information reasonably necessary to fulfill your homemade brownie orders and deliver customer support:

• Customer Name: To address you and label your order package accurately.
• Mobile Phone Number: To send order confirmation messages via WhatsApp, coordinate delivery details, and resolve order queries.
• Delivery Address Details: Street address, city, state, pincode, and optional landmark required for physical order dispatch.
• Cart Selection & Order Notes: Specific brownie items, quantity choices, selected package variants, and optional custom baking notes.

03. Purpose of Data Collection

In accordance with the DPDP Act 2023 purpose-limitation principles, your personal data is collected strictly for specified, lawful purposes:

1. Processing, baking, and packaging your requested brownie items.
2. Direct order communication and confirmation via WhatsApp.
3. Dispatching products to your designated delivery address across Coimbatore and South India.
4. Handling customer inquiries, feedback, or delivery issue resolutions.
5. Maintaining basic operational logs necessary for business accounting and tax obligations.

04. How We Use Customer Information

We use your customer details solely to perform our contractual service of delivering freshly baked brownies to you. We do not use your phone number or address for automated telemarketing spam, unsolicited robocalls, or third-party advertising databases.

Your information is accessible only to authorized Arka Brownies personnel responsible for order preparation, delivery coordination, and customer support.

05. Order Processing Through WhatsApp

When you complete the checkout form on our website and click "Place Order on WhatsApp", the website formats your cart items and customer details into a pre-filled text message and redirects you to WhatsApp (wa.me).

Once you press send on WhatsApp:

• The message transmission is governed by Meta / WhatsApp's Terms of Service and Privacy Policy.
• Direct order dialogue, delivery confirmation, and payment coordination take place directly between you and Arka Brownies within WhatsApp.
• Submitting the checkout form on the website prepares the message draft; formal order acceptance occurs upon mutual confirmation on WhatsApp.

06. Browser Storage & Local Data Handling

To provide a convenient, seamless user experience, our website utilizes browser-side storage technologies:

• In-Memory Session Cart: Your active cart items are maintained in your browser's active JavaScript memory while browsing the website.
• Local Storage Autofill: When you enter checkout details, your browser's `localStorage` saves your name, phone, and address on your own device (`arka_cust_*` keys). This enables automatic form autofill on subsequent visits so you do not need to retype your delivery details.
• No Tracking Cookies: We do not place persistent tracking cookies, cross-site advertising scripts, or third-party behavioral profiling trackers on your device.

Incognito & Private Browsing Note: Browsing in Incognito or Private mode, or clearing your web browser data, will erase local storage items on your device upon closing your session.

07. Data Sharing & Third-Party Service Providers

We never sell, trade, or rent your personal information to third parties. We share data only with essential service infrastructure strictly required to operate our business:

• WhatsApp (Meta Platforms): To facilitate direct messaging and order conversation.
• Delivery & Logistics Partners: Courier or local delivery partners in Coimbatore/South India receive your name, address, and contact number solely to complete physical parcel delivery.
• Google Apps Script / Sheets (Internal Logging): If enabled, submitted order data is transmitted securely to our internal Google Sheets database to track baking queues and business accounting.
• Hosting Infrastructure: Our static site is hosted on Netlify, which serves site pages over encrypted HTTPS.

08. Data Retention Policy

Data stored on your local browser device remains under your control and can be deleted by clearing your browser site data at any time.

Order history data transmitted to Arka Brownies (via WhatsApp messages or internal order logs) is retained only for as long as necessary to fulfill your order, address follow-up queries, comply with statutory tax laws, or maintain accurate accounting records. When data is no longer needed, it is deleted or sanitized.

09. Data Security Standards

We implement reasonable security safeguards, including HTTPS protocol encryption, access-controlled order logging, and secure communication channels.

While we take all reasonable precautions, please note that no internet transmission or electronic storage method can be represented as 100% impenetrable. We encourage customers to keep their own devices and messaging applications secure.

10. Your Rights Under DPDPA 2023

Under India's Digital Personal Data Protection Act, 2023, you have specific rights regarding your personal data:

• Right to Access: Request a summary of personal data held by Arka Brownies and the processing activities undertaken.
• Right to Correction & Erasure: Request the update, correction, or deletion of inaccurate or outdated personal details.
• Right to Withdraw Consent: You may withdraw your consent for future communications or record storage at any time.
• Right to Grievance Redressal: Submit inquiries or grievances regarding data handling directly to our designated contact email.

To exercise any of these rights, please contact us at Arkabrownies@gmail.com.

11. Children's Privacy Protection

Our website and ordering services are intended for individuals who can form legally binding agreements. We do not knowingly solicit or collect personal data from children under 18 years of age without parental or guardian consent. If you believe a minor has submitted personal details to us, please contact us for prompt removal.

12. Policy Updates

We may update this Privacy Policy periodically to reflect operational, legal, or regulatory changes. Updated versions will be posted directly on this page with a revised "Last Updated" timestamp. We encourage customers to review this page periodically.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or data handling practices, please contact Arka Brownies: