Privacy Policy

This policy explains what happens to your information when you use this website. It is written to describe what the site actually does, in plain language.

Who we are

Vas and Son (Vas Bakery), Vas Mahal, Bendore Circle, Mangalore, Karnataka 575002, India. Registered business name: [to be confirmed]. GSTIN: [to be confirmed]. For anything on this page, write to vsons@yahoo.com or call +91 91641 94690.

Why we ask for anything at all

We use what you give us for these purposes and no others:

• To take your order, bake it, and hand it to you or deliver it.
• To contact you about that order — to confirm it, to ask a question, or to tell you it is ready.
• To price and arrange a custom cake, which happens in conversation rather than on the website.
• To reply to an enquiry you sent us.
• To keep the bakery's own business and tax records.
• To occasionally tell you about something like a Christmas plum cake batch — and only until you tell us to stop.

What we collect, and only when you give it

We do not ask you to create an account, and we do not track you across other websites.

• When you place an order: your name, and your phone number if you give one. If you choose delivery, your address and landmark. Plus what you ordered — items, quantities, weights, any message for a cake, the date you need it, and any add-ons.
• When you request a custom cake: your name and phone number, the occasion, the date and anything you type into the notes.
• When you use the WhatsApp enquiry form: your name and phone number.

Payment, and what we do not hold

This website has no payment gateway. You never type a card number, UPI PIN or bank detail into it, and we never hold any of that. Payment happens away from the site — in cash, by card machine or by UPI when you collect or when we deliver.

Where we ask for payment in advance, usually for a custom cake, we may show you a UPI QR code or send one on WhatsApp. Scanning it opens your own UPI app, and the payment runs between you, your bank and ours — this website is not part of it and receives nothing back from it. If you send us a payment reference or a screenshot to confirm, it lives in that WhatsApp conversation, and we keep it only as proof that the order was paid for.

What stays on your own device

Your basket and your name and phone number are saved in your browser's local storage so you do not have to type them again. They sit on your phone or computer and are not sent anywhere until you actually place an order. Clearing your browser's site data removes them. Your address is deliberately not kept after an order is placed.

Who else sees it

• Supabase — the database that stores orders and enquiries, hosted in Mumbai, India.
• Vercel — serves the website itself.
• Cloudflare Turnstile — checks that forms are submitted by a person and not a bot. It does not identify you.
• WhatsApp (Meta)— when you send your order, you are messaging the bakery on WhatsApp, and Meta's own privacy terms apply to that conversation.
• Google Maps on the “Visit our bakery” section, and YouTube for any gallery videos, which we load in privacy-enhanced mode. Both may see your IP address when their content loads.
• Google Analytics — only if you accept it in the banner. Decline, or ignore the banner, and it never loads.

Our fonts are served from this website rather than fetched from Google, so no request is made to Google simply for the page to look right. We do not sell your information to anyone, ever.

Inside the bakery, your order and your enquiry can be seen by the owner and the family members who run the shop with her. Nobody else has an account.

What you type into the search box on the order page never leaves your phone. It filters a list already loaded in your browser, and we do not record it or see it.

Where it is kept

Orders and enquiries are stored in a database hosted in Mumbai, India. The website itself is served from a global network, which means the page you are reading may be delivered from a server outside India even though your order details are not stored there.

If something goes wrong

If your information were ever exposed by a security failure, we would tell you and the Data Protection Board of India, as the law requires, and say plainly what happened and what we were doing about it.

How long we keep it

Plainly: we keep it until you ask us not to.Orders stay on file as the bakery's business record — what was ordered, when, and for whom — because that is how a shop that has traded since 1905 keeps its accounts and settles a query about an order from last year. Enquiries from the WhatsApp form stay on the list so we can reply and follow up. Nothing is deleted on a timer.

We expect to settle on keeping order records for [to be confirmed], which is the period Indian tax and GST law expects a business to hold its accounts for, and to keep enquiries only until you ask us to remove you. Until that is confirmed, the honest answer is the one above: ask us, and it goes.

What we use it for is answering you, preparing and delivering your order, and running the bakery's own records. We may also, from time to time, message you on the number you gave us about something you ordered before, or about a festival batch such as Christmas plum cake. If you would rather not hear from us, say so in one reply and we will stop — and you can ask us to delete your details entirely at any time.

We do not sell, rent or share that list with anybody outside the bakery, and we do not use it to build a profile of you.

Your choices

You can ask what we hold about you, ask us to correct it, or ask us to delete it — write to vsons@yahoo.comand we will act on it. These rights are yours under India's Digital Personal Data Protection Act, 2023. You may also nominate someone to exercise them on your behalf if you are unable to.

Changing your mind is meant to be as easy as agreeing was.To stop the occasional message, reply once and say so. To have your details removed altogether, write or call. To change your cookie choice, clear this site's data in your browser and the banner comes back.

If you are unhappy with how we handled it

Tell us first and we will try to put it right. Our point of contact for privacy questions and complaints is [name to be confirmed], reachable at vsons@yahoo.com or +91 91641 94690. We aim to reply within [to be confirmed] days. If you are still not satisfied, you can complain to the Data Protection Board of India.

Children

This website is for ordering from a bakery and is not directed at children. We do not knowingly collect information from anyone under 18.

Changes

If how we handle information changes, this page changes with it and the date at the top is updated. See also our Terms & Conditions.