Privacy Policy

Introduction

The Oven Bakery & Cafe is committed to protecting your privacy. This policy explains how we collect, use, and safeguard your personal information when you use our website and services.

This website is operated by The Oven , located at DH Road, , Ernakulam, Kerala, 682018.

Information We Collect

We collect the following types of personal information:

• Account & Registration: Your name, email address, phone number, and delivery address when you create an account or place an order.
• Order & Transaction Data: Products purchased, payment status, delivery address, and order history.
• Authentication: Your WhatsApp phone number if you use WhatsApp OTP to sign in or verify your account.
• Browsing & Advertising Data: Pages you view, products you browse, items added to cart, and purchase events — collected via Meta Pixel and Meta Conversions API for advertising measurement.

How We Use Your Information

• To process and fulfil your orders
• To process payments securely via Razorpay
• To send one-time passwords (OTP) for account authentication
• To send order updates and notifications
• To measure the effectiveness of our advertising campaigns
• To respond to your queries and provide customer support
• To comply with applicable legal obligations

Third-Party Services

We share data with the following third-party service providers as part of our platform operations:

Razorpay — Payment Processing
When you make a payment, your card, UPI, or banking details are submitted directly to Razorpay for secure processing. We do not store your payment credentials. Razorpay's privacy practices are described at razorpay.com/privacy.

Meta Platforms — Facebook, Instagram & WhatsApp
We use Meta Pixel and Meta Conversions API to track purchases, product views, and other interactions for advertising measurement. This may involve transmitting hashed identifiers (email or phone number) to Meta Platforms, Inc. If you use WhatsApp OTP to sign in, your phone number is transmitted to WhatsApp Cloud API solely to deliver your one-time password.

Google
If you submit a product review, your review content and display name may be shared with Google to appear on Google Shopping and Google Maps listings.

WhatsApp Messages

• Login codes and order updates (confirmation, shipping, delivery and refunds) are sent on WhatsApp to the verified phone number on your account, because they are needed to provide your order. They are never sent to a gift recipient's number.
• Offers, cart reminders, back-in-stock and price-drop alerts and review requests are sent only if you opt in by turning on the optional switch when signing in, or in Account > Profile.
• You can stop marketing messages at any time by replying STOP in WhatsApp, by using WhatsApp's own "Stop offers" option, or from Account > Profile. Withdrawing is as easy as opting in and does not affect order updates.
• We keep a record of when and how you gave or withdrew consent, including the exact wording you saw, to show that we respected your choice.

Cookies

We use the following types of cookies:

• Session cookies: Required for login, cart persistence, and checkout. These are deleted when you close your browser.
• Preference cookies: Remember your language, currency, and display preferences across visits.
• Visit memory (functional, on your device only): Your browser stores the date of your first and latest visit, and the campaign link (UTM) or referring website you arrived from for the current session, so the store can show content for new or returning visitors. This information stays in your browser and is never sent to us or to third parties.
• Advertising cookies: Set by Meta Pixel to measure ad campaign performance and enable personalised advertising on Facebook and Instagram. You can opt out through Meta's Ad Preferences or your browser settings.

You can accept or reject analytics and advertising cookies, and choose whether your hashed email and phone may be shared with Meta for personalised ads, from Cookie settings in the footer at any time. Essential cookies for sign-in, cart and checkout are always used.

Data Retention

• Account and order data is retained for as long as your account is active, or as required by applicable law.
• OTP authentication records are deleted immediately after successful verification.
• Meta Pixel and Conversions API event logs are retained for 90 days.

Your Rights

You have the right to request access to, correction of, or deletion of the personal data we hold about you, subject to applicable legal requirements. To exercise these rights, contact us using the details below.

Contact Us

For privacy-related queries, contact us at write2oven@gmail.com.

The Oven , DH Road, , Ernakulam, Kerala, 682018