Privacy policy · Magic Oven

Magic Oven is a small kitchen and a small company. We have no interest in your data beyond baking you a cake and getting it to your door — and this page explains exactly what that means in practice.

1. What this policy covers

This policy explains what we collect when you use this site, why we collect it, who sees it, how long we keep it, and the controls you have. It applies to browsing, accounts, shop orders, custom cake requests, scheduled orders and our Insider membership. The business responsible for your data is Magic Oven, Shop 51, Brahma Majestic, Kondhwa Khurd, Haveli, Pune 411048 — reachable any time at contact@magicoven.co.in.

2. The information we collect

Account and profile: Your name, email address and mobile number (both verified with one-time codes), your date of birth and gender, a profile photo if you choose to add one, your unique Account ID (MO-XXXXXX), and your sign-in credentials.
Addresses: The delivery addresses you save or use at checkout.
Orders and payments: What you ordered and when, amounts, the payment method and its status, invoices, and delivery details. We never store full card numbers — our secure payment partner handles those.
Custom orders: The details of your request, the quotes we send you, and any inspiration images you upload with it.
Messages and notifications: A record of the order updates, quotes and vouchers we have sent you, so support can see what you have seen.
Device and usage basics: The technical information any website receives — IP address, browser and device type, and the pages you visit — used for security and to keep the site working well.

3. Cookies and local storage

We use cookies and your browser’s local storage for two jobs only: keeping you signed in, and remembering your cart. We do not use third-party advertising trackers, and we do not run analytics that follow you to other sites. Anything optional is off until you allow it on the consent banner, and you can change that choice any time. The complete, item-by-item list of what we store lives in our Cookie & storage policy.

4. How we use your information

To take, bake and deliver your orders, and to prepare quotes for custom cakes.
To verify your identity and keep your account secure (one-time codes, optional two-factor).
To send transactional messages — order confirmations and invoices by email, quotes, vouchers, and DLT-compliant SMS order updates.
To process payments and refunds through our payment partner.
To send marketing, but only if you have consented — and you can opt out at any time.
To meet legal obligations, such as keeping tax records for invoices.
To understand, in broad strokes, how the site is used so we can improve it.

We never sell your personal data. Not to anyone, not for anything.

5. Under-18s and children’s data

Everyone is welcome at Magic Oven, including visitors under 18 — there is no minimum age to browse or order. Where children’s data is involved, we hold ourselves to three commitments:

Purchases by users under 18 must be made by, or with the consent of, a parent or guardian.
We do not knowingly collect more personal data from a child than we need to fulfil their order.
A parent or guardian can contact us at contact@magicoven.co.in at any time to review, correct, export or delete a minor’s data — we act on these requests within 48 hours.

Only the service providers who help us run Magic Oven, and each receives only the minimum its job requires:

Our payment partner processes online payments (UPI and cards). Your card details go to them, never to us.
Our delivery partners receive your name, address, phone number and any delivery instructions — enough to bring the order to your door, nothing more.
Our SMS and email providers carry the transactional messages described above.

We may also disclose information where the law requires it — a tax filing, a court order. No third party receives your data for advertising, and none of them may use it for their own purposes.

7. Where your data lives

Your data is stored on our own systems, managed by us — not scattered across third-party marketing tools. That keeps the list of people and machines that can touch it short.

8. How long we keep it

Only as long as it is needed, or as long as the law requires. Account and profile data stay while your account exists. Order records and invoices are kept for the period Indian tax law requires us to retain financial records. Inspiration images stay with the related order and are removed when you delete your data.

9. Your rights and controls

You can view, correct, export or delete your data from your account at any time — or email contact@magicoven.co.in and we will do it for you. Deletion removes everything we are not legally required to keep; invoice and tax records may persist for the statutory period and nothing longer. You can also withdraw marketing consent at any moment, from your account or from the message itself.

10. How we protect it

Accounts are protected by verified email and mobile, password sign-in and optional two-factor authentication. Access to customer data inside Magic Oven is limited to the people who need it to fulfil orders, and payment details are handled entirely by our payment partner. No system on earth is perfect — if we ever discover a breach that affects you, we will tell you promptly and plainly.

11. Changes to this policy

If we change what we collect or how we use it, we will update this page and the date at the top, and flag significant changes on the site or by email before they take effect.

12. Contact and grievances

Our designated Grievance Officer (per the Information Technology Act and the Digital Personal Data Protection Act, 2023) can be reached at contact@magicoven.co.in — for anything this page has not answered: questions, complaints, consent withdrawals, or data requests. We acknowledge and respond within 48 hours. You can also write by post: Grievance Officer, Magic Oven, Shop 51, Brahma Majestic, Kondhwa Khurd, Haveli, Pune 411048. If you are not satisfied with our response, you may escalate to the Data Protection Board of India.