Data Protection

Privacy Policy

Lovely Sweets — lovelysweetsgwalior.com
Last updated: July 2026

HomePrivacy Policy

1. Introduction

Lovely Sweets ("we", "our", or "us") is committed to protecting the privacy of every person who uses our website and online ordering platform at www.lovelysweetsgwalior.com (the "Platform"). This Privacy Policy explains what personal information we collect, how we use it, with whom we share it, and what rights you have in relation to it.

By using the Platform, you consent to the collection and use of your information in accordance with this Privacy Policy. If you do not agree with this Policy, please discontinue use of the Platform.

2. Information We Collect

2.1Information You Provide Directly

When you register for an account, place an order, or interact with the Platform, we collect the following information:

Full name
Email address
Mobile number (optional, for order communication)
Delivery addresses, including street, colony, city, pincode, and the geographic coordinates (latitude and longitude) of each address
Order details including product selections, quantities, and order history
Payment method preference (online or Cash on Delivery)

Please Note: We do not collect or store your credit card number, debit card number, bank account details, or UPI credentials. All payment transactions are processed securely by Razorpay, our third-party payment gateway provider.

2.2Information Collected Automatically

When you visit the Platform, we may automatically collect certain technical information, including:

IP address and approximate geographic location
Browser type and version
Device type and operating system
Pages visited, time spent on pages, and navigation paths
Referring website or source

This information is collected through standard server logs and analytics tools and is used to understand how the Platform is used and to improve its performance.

2.3Location Information

When you add a delivery address, you may be asked to allow access to your device's location services to assist with pinpointing your address on the map. This location data is used solely to populate and validate your delivery address. You may also enter your address manually without enabling location access.

The geographic coordinates of your saved delivery addresses are stored in our database to enable delivery eligibility validation and delivery charge calculation at checkout.

2.4Communications

When you contact us by email or through the Platform, we retain the content of your communication and your contact details in order to respond to your enquiry and for record-keeping purposes.

3. How We Use Your Information

We use the information we collect for the following business and operational purposes:

3.1 To provide and operate the Platform

Creating and managing your account, processing and fulfilling your orders, calculating delivery eligibility and delivery charges based on your address location, facilitating payment processing through Razorpay, and generating order receipts and invoices.

3.2 To communicate with you

Sending account verification OTPs to your email address, sending order confirmation, acceptance, and cancellation notifications, sending e-receipts upon order acceptance, and responding to your enquiries and support requests.

3.3 To improve our services

Analysing usage patterns to understand how customers interact with the Platform, identifying and resolving technical issues, and improving the product catalogue, interface design, and ordering flow.

3.4 To ensure security and prevent fraud

Detecting and preventing fraudulent orders and unauthorised account access, monitoring for suspicious activity and abuse of the Platform, and maintaining the integrity of our order verification process.

3.5 To comply with legal obligations

Maintaining records as required under applicable Indian law, and responding to lawful requests from government authorities.

4. How We Share Your Information

We do not sell, rent, or trade your personal information to any third party for their own marketing purposes. We share your information only in the following limited circumstances:

4.1 Service Providers

We share your information with trusted third-party service providers who assist us in operating the Platform and fulfilling orders. These include:

Razorpay (payment processing): Your order amount and payment reference are shared with Razorpay to facilitate transaction processing. Razorpay is governed by its own Privacy Policy available at razorpay.com.
Google Maps Platform (address validation & distance calculation): Delivery address coordinates are transmitted to Google Maps APIs to validate delivery eligibility and calculate delivery distance. Google's Privacy Policy governs this use and is available at policies.google.com.
Email service provider (transactional notifications): Your email address and order details are shared with our email delivery provider to dispatch order notifications and receipts.
Cloudinary (image hosting): Product images are hosted on Cloudinary's CDN. No personal customer data is shared with Cloudinary.

All service providers are contractually required to use your information only for the purposes of providing their services to us and to maintain appropriate security measures.

4.2 Shop Staff

Your name, contact number, delivery address, and order details are accessible to Lovely Sweets shop admins for the purpose of order verification, preparation, and fulfilment. This access is restricted to the admin assigned to the shop processing your order.

4.3 Legal Requirements

We may disclose your information if required to do so by law, court order, or governmental authority, or if we believe in good faith that such disclosure is necessary to protect the rights, property, or safety of Lovely Sweets, our customers, or others.

4.4 Business Transfers

In the event of a merger, acquisition, or sale of all or part of our business, your personal information may be transferred as part of that transaction. We will notify you by email or prominent notice on the Platform before your information is transferred and becomes subject to a different privacy policy.

5. Cookies and Tracking Technologies

5.1

We use HTTP-only cookies to maintain your authenticated session on the Platform. These cookies store a secure authentication token (JWT) and are essential for the Platform to function. They cannot be accessed by client-side scripts and are not used for advertising purposes.

5.2

We may use analytics cookies or similar technologies to understand how visitors use the Platform, which pages are most visited, and where users encounter difficulties. This data is aggregated and does not identify individual users.

5.3

You may configure your browser to refuse cookies or to alert you when cookies are being sent. Note that disabling essential session cookies will prevent you from logging in and placing orders on the Platform.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with our services. Specifically:

Account information: is retained for the duration of your account and for a reasonable period thereafter in case you choose to reactivate your account.
Order records: are retained for a minimum of three years from the date of the order for business record-keeping and legal compliance purposes.
Payment transaction records: are retained as required by applicable financial regulations.
Upon Deletion Request: If you request deletion of your account, we will delete or anonymise your personal information within 30 days, except where retention is required by law or for legitimate business purposes such as fraud prevention or dispute resolution.

7. Data Security

We implement industry-standard security measures to protect your personal information from unauthorised access, disclosure, alteration, or destruction. These include:

Secure HTTP-Only Cookies

Authentication tokens (JWT) are stored in secure cookies inaccessible to browser-side scripts to prevent XSS attacks.

Encrypted Transit

All data transmitted between your browser and our servers is encrypted using HTTPS and TLS.

Hash Cryptography

Passwords are stored as robust cryptographic hashes — never in plaintext.

Database Protection

MongoDB Atlas hosting with replica set redundancy and automated encrypted backups. Access is locked down.

While we take all reasonable precautions, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security of your information.

8. Your Rights

You have the following rights in relation to your personal information:

8.1

AccessYou have the right to request a copy of the personal information we hold about you. You can view your profile details, saved addresses, and order history directly through your account on the Platform.

8.2

CorrectionYou have the right to request correction of any inaccurate or incomplete personal information. You can update your name, mobile number, and delivery addresses directly from your account profile page.

8.3

DeletionYou have the right to request deletion of your account and associated personal information. To make a deletion request, please contact us at the details provided in Section 11. We will process your request within 30 days, subject to any legal retention obligations.

8.4

Withdrawal of ConsentWhere we process your information on the basis of your consent — for example, for sending promotional communications — you may withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

8.5

ObjectionYou have the right to object to the processing of your personal information in certain circumstances, including where we process it for legitimate interests that you feel override your rights.

9. Children's Privacy

The Platform is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13.

If you believe that a child under 13 has provided us with personal information, please contact us immediately and we will take steps to delete that information promptly from our servers.

10. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, the Platform services, or applicable law.

When we make material changes, we will update the "Last updated" date at the top of this Policy and, where appropriate, notify you by email or by a prominent notice on the Platform. We encourage you to review this Policy periodically to stay informed about how we protect your information.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal information, please contact us at:

Lovely Sweets

Gwalior, Madhya Pradesh, India

Website: https://www.lovelysweetsgwalior.com

We will respond to all privacy-related enquiries within 10 business days.

"Anokhi Parampara Ka Swad"