Privacy Policy
Last updated: 5 August 2026
Introduction
This policy explains what personal information we collect when you use www.mittimousse.com or order from us, why we collect it, who we share it with, how long we keep it, and what rights you have over it. We have tried to write it plainly. If anything is unclear, ask us — the contact details are at the end.
Mitti & Mousse is the data fiduciary responsible for the personal data described here. In this policy, “we”, “us” and “our” mean Mitti & Mousse, and “you” means the person whose data we hold.
This policy is published in accordance with the Digital Personal Data Protection Act, 2023 and the rules made under it, and with the Information Technology Act, 2000 and its associated rules.
What we collect
Information you give us when you order
- your name, phone number and email address
- your delivery address
- the name, address and phone number of anyone you are sending an order to
- the date and, where relevant, the occasion your order is for
- any message you would like included with a cake
- dietary requirements or allergy information you choose to tell us
- notes and instructions you give us about your order
Information about your orders
- what you have ordered, when, and for how much
- delivery history, including any delivery problems
- your correspondence with us, including WhatsApp messages, emails and messages sent through social media
Payment information
Payments are processed by our payment provider. We do not see, receive or store your full card details. We receive confirmation that a payment succeeded, along with limited information such as the payment method and the last four digits of a card, for reconciliation and refunds.
Information collected automatically
- your IP address, approximate location, device type, browser and operating system
- pages you visited, what you looked at, and how you arrived at our site
- cookies and similar technologies — see the cookies section below
Information from other sources
- Instagram, Facebook and WhatsApp, where you interact with us there, subject to your own privacy settings on those platforms
- our delivery partners, where relevant to completing an order
- publicly available business information, in the case of corporate enquiries
What we do not collect
We do not ask for and do not want your PAN, government ID numbers, financial or credit history, or any information about your health, religion, caste, political views or similar. Please do not send us any of this. If you do, we will delete it.
Information about other people
When you send a cake as a gift, you are giving us someone else’s name, address and phone number. We use that information only to deliver the order and to contact the recipient about that delivery. We do not add gift recipients to any marketing list.
By giving us someone else’s details, you confirm you have their permission to share them with us for this purpose. If a recipient would like their details removed from our records, they can contact us directly.
Allergy and dietary information
If you tell us about an allergy or dietary requirement, we use it only to prepare and label your order safely and to advise you honestly about whether we can meet it. We keep this information with the order record so we can serve you properly if you order again. If you would rather we did not retain it, tell us and we will remove it.
Why we use your information
- Fulfilling your order — making the cake, arranging delivery, taking payment, issuing invoices, and contacting you about your order
- Customer service — answering questions, handling complaints and processing refunds
- Legal and tax obligations — keeping invoices and transaction records as required by Indian tax and accounting law
- Safety — recording dietary and allergen requirements accurately
- Improving what we do — understanding which products and pages people respond to, in aggregate
- Marketing, where you have agreed — sending you occasional updates about new products, seasonal collections and offers
- Occasion reminders, where you have agreed — reminding you ahead of a birthday or anniversary you have asked us to note
- Fraud prevention — identifying and preventing fraudulent or abusive orders
We do not sell your personal information to anyone.
Marketing and reminders
We will only send you marketing messages — by email, WhatsApp or SMS — if you have agreed to receive them. You can opt out at any time. Use the unsubscribe link in any email, reply STOP to a WhatsApp or SMS message, or just tell us. We will act on it promptly.
Opting out of marketing does not affect messages about an order you have placed, which we need to send regardless.
Occasion reminders. If you ask us to note a birthday or anniversary, we will store that date and may contact you shortly before it. This is optional, you can ask us to remove the date at any time, and we do not share these dates with anyone.
Cookies and tracking
We use cookies and similar technologies to make the website work, remember what is in your basket, understand how the site is being used, and measure our advertising.
Advertising and analytics tools we use may include Meta Pixel and Conversions API, Google Analytics, and Shopify’s own analytics. Where we use the Conversions API, information such as your email address or phone number may be shared with Meta in a hashed, non-readable form so it can match a purchase to an ad.
These tools involve sharing limited information with the companies that provide them. Their use of that data is governed by their own privacy policies.
Your choices. You can accept or decline non-essential cookies through the banner on our website, and change your mind at any time. You can also block or delete cookies in your browser settings — though some parts of the site may not work properly if you do.
Who we share information with
We share personal information only where it is needed, and only with organisations bound to protect it.
- Payment providers, to process payments and refunds
- Our website and e-commerce platform, Shopify, which hosts the store and order data
- Delivery partners, who receive the recipient’s name, address and phone number to complete a delivery
- Communication tools we use for email or WhatsApp messaging
- Advertising and analytics providers, as described in the cookies section
- Professional advisers — accountants and lawyers — where necessary
- Government or regulatory authorities, where we are legally required to disclose information
- A buyer or successor, if the business is sold or restructured, in which case we will tell you
We do not share your information with anyone else for their own marketing purposes.
Storage location. Some of our service providers store data on servers outside India. Where that happens, we take reasonable steps to ensure appropriate protection, in line with applicable Indian law on cross-border transfers.
Photographs and content you share
If you tag us, send us a photo, or leave a review, we may share that content on our website or social media, with credit where practicable. Our Terms and Conditions set this out in more detail. If you would prefer we did not use something you have shared, tell us and we will remove it.
How long we keep your information
We keep personal information only as long as we need it.
| Type of information | How long |
|---|---|
| Order and invoice records | 8 years, as required by Indian tax and accounting law |
| Customer contact details and order history | While you are an active customer, and for 3 years after your last order |
| Marketing consent records | Until you opt out, plus a short period to evidence the opt-out |
| Correspondence, including WhatsApp | 2 years |
| Website analytics data | 26 months |
| Gift recipient details | With the order record, and not used for anything else |
When we no longer need information, we delete it or make it permanently anonymous.
Keeping your information secure
We take reasonable technical and organisational measures to protect personal information, including encrypted connections on our website, restricted access on a need-to-know basis, secure payment processing through certified providers, and periodic review of our practices.
No system is completely secure, and we cannot guarantee absolute security. But if a breach occurs that affects your personal data, we will notify you and the Data Protection Board of India as required by law.
Your rights
Under the Digital Personal Data Protection Act, 2023, you have the right to:
- Know what we hold — ask for a summary of the personal data we process about you and who we have shared it with
- Have it corrected — ask us to correct anything inaccurate, incomplete or out of date
- Have it erased — ask us to delete your data where we no longer need it, subject to records we are legally required to keep
- Withdraw consent — where we rely on your consent, withdraw it at any time. This does not affect anything done before you withdrew it
- Nominate someone — nominate a person to exercise these rights on your behalf in the event of your death or incapacity
- Complain — raise a grievance with us, and escalate to the Data Protection Board of India if you are not satisfied
To exercise any of these, contact us using the details below. We will respond within 30 days. We may need to verify your identity first. There is no charge for this.
Children
Our products and website are intended for adults. We do not knowingly collect personal data from anyone under 18 without verifiable consent from a parent or guardian, and we do not direct advertising at children or use their data for behavioural tracking. If you believe a child has given us personal information, contact us and we will delete it.
Grievance Officer
If you have a question, concern or complaint about how we handle your personal information, contact our Grievance Officer:
| Name | Urvi Solanki |
| Designation | Founder |
| hello@mittimousse.com | |
| Phone | +91 90825 71880 |
| Address | 52c Sindhi Society, Road No. 1, Sindhi Society, Chembur, Mumbai, Maharashtra 400071 |
We will acknowledge your complaint within 48 hours and aim to resolve it within 30 days. If you are not satisfied with our response, you may escalate the matter to the Data Protection Board of India.
Changes to this policy
We may update this policy as our business or the law changes. The current version is always the one published here, and the “Last updated” date shows when it last changed. Where a change materially affects how we use your information, we will tell you directly.
Contact us
Mitti & Mousse
52c Sindhi Society, Road No. 1, Sindhi Society, Chembur, Mumbai, Maharashtra 400071
Email: hello@mittimousse.com
WhatsApp: +91 90825 71880
Instagram: @mittiandmousse