Privacy policy

Cultured Cookie Co. operates this website and processes orders for delivery across India. Our kitchen and registered address are in Nashik, Maharashtra, India — full details on our Contact page.

You can reach us at support@culturedcookieco.com for any privacy-related queries.

We collect the following when you use our site:

• Account data — name, email address, and hashed password when you register.
• Order data — shipping name, address, phone number, and order history needed to fulfil your purchase.
• Payment data — we do not store card numbers. Payments are processed by Razorpay. We only retain the order ID and verification status.
• Newsletter subscription — email address if you sign up for our mailing list.
• Usage data — anonymised page views and referral sources if analytics is enabled (none currently active).

• To process and deliver your orders.
• To send order confirmation and status update emails.
• To send our newsletter, if you opted in. You can unsubscribe at any time.
• To respond to support enquiries.
• To detect and prevent fraud or abuse.

We do not sell your data to third parties. Ever.

We share your data only with the services required to run the business:

• Razorpay — payment processing.
• Delivery partners — shipping name and address for courier dispatch.
• Google Workspace — transactional email delivery.

All third parties are required to handle your data per their own privacy policies and applicable Indian law.

We use a single session cookie to keep you logged in. No third-party advertising or tracking cookies are set unless you have explicitly accepted them via the cookie notice banner.

See our Cookie Notice for full details.

Order records are retained for 7 years as required by Indian accounting regulations. Account data is retained until you request deletion. Newsletter subscriptions are retained until you unsubscribe.

You can at any time:

• Request a copy of the personal data we hold about you.
• Ask us to correct inaccurate data.
• Request deletion of your account and non-order data.
• Unsubscribe from our newsletter via the link in any email.

Email support@culturedcookieco.com to make a request. We will respond within 30 days.

Passwords are stored as bcrypt hashes — we never see your password in plain text. All data is transmitted over HTTPS. Payment data never touches our servers.

We may update this policy when our practices change. Material changes will be noted at the top of this page with an updated date.