Privacy Policy

This policy explains what personal data SOLANKI ENTERPRISES collects through this website, why, and what you can do about it. It is written to match what the site actually stores — not a generic template.

1. What we collect

When you create an account

• Mobile number — this is your username and is required.
• Name — so we know who to ask for at the door.
• Email address — optional. If you do not give one, nothing on the site requires it.
• Password — stored only as a bcrypt hash. The password itself is never written to our database and cannot be recovered by us.

When you shop

• Your cart — which items and quantities. Before you sign in this is held only in your own browser's local storage. After you sign in it is stored against your account so it follows you to another device.
• Delivery addresses — recipient name, mobile number, street address, landmark, city, state and PIN code, for each address you save.
• Orders — the items, pack sizes and prices at the time of purchase, your chosen delivery date and slot, the delivery address copied onto the order, any note you add, and the order and payment status.

When you sign in

• Session records — the time you signed in, when the session expires, your browser's user-agent string and your IP address. We keep these so that you can be signed out everywhere at once and so we can investigate misuse of an account.

What we do not collect

We do not collect card numbers, UPI IDs, bank details or any other payment instrument, because we accept cash on delivery only and no payment is taken on this website. We do not run advertising or analytics trackers, and we do not build a profile of you for marketing.

2. Cookies and local storage

• se_sess — a strictly necessary cookie holding a random reference to your session record. It contains no personal data itself. It expires 30 days after sign-in, and is deleted when you sign out.
• se_csrf — a strictly necessary security cookie that protects forms against cross-site request forgery.
• Local storage — your browser keeps your cart contents so it survives a page reload before you have signed in. You can clear it at any time through your browser settings.

We set no advertising, analytics or third-party tracking cookies.

3. Third parties this site loads

Some assets are served from third-party networks, which means those providers receive your IP address and browser information when a page loads:

• Google Fonts (fonts.googleapis.com, fonts.gstatic.com) — typefaces.
• Tailwind CDN (cdn.tailwindcss.com) — stylesheet framework.
• Unsplash (images.unsplash.com) — product and lifestyle photographs.

We do not send your name, phone number, address or order details to any of them.

4. Why we use your data

• To take, deliver and support your orders — the reason you gave us the data.
• To operate your account and keep it secure.
• To keep records we are required to keep as a food business and as a registered establishment.
• To contact you about a specific order. We do not send marketing messages from this website.

5. Who we share it with

• Our delivery staff — the recipient name, address, phone number and order contents, so they can deliver it.
• Public authorities — where we are legally required to disclose, for example to a food safety or tax authority.

We do not sell your personal data, and we do not share it with advertisers or data brokers.

6. How long we keep it

• Order records — retained for as long as required for tax, accounting and food-safety record-keeping.
• Account and address details — until you ask us to delete your account.
• Session records — until they expire (30 days) or you sign out, whichever is first.
• Cart contents — until you check out, empty the cart, or ask us to delete your account.

7. Your rights

Under the Digital Personal Data Protection Act, 2023, you may ask us to:

• tell you what personal data of yours we hold and who we have shared it with;
• correct anything inaccurate or incomplete;
• erase your data where we are no longer required to keep it;
• nominate another person to exercise these rights if you are unable to.

Write to bittusolanki1309@gmail.com or call +91 88286 68156. We may need to verify your identity — usually by calling you on the mobile number registered to the account — before we act on a request.

8. Security

Passwords are stored as bcrypt hashes. Sessions are held server-side and can be revoked instantly. Forms are protected against cross-site request forgery. Order history is scoped to the account that placed it, so one customer cannot read another customer's order. No system is perfectly secure, and we will tell you promptly if a breach affects your data.

9. Children

This site is not intended for children under 18. We do not knowingly create accounts for children. If you believe a child has created an account, tell us and we will remove it.

10. Complaints about your data

If you have a complaint about how your personal data has been handled — something we hold that is wrong, something you want erased, or a request we have not answered — raise it with the proprietor directly:

• Email: bittusolanki1309@gmail.com
• Phone: +91 88286 68156
• Address: SOLANKI ENTERPRISES, 26, Vishnu Patil Niwas, Subhash Road, Navapada, Near Maruti Mandir, Dombivali West, Kalyan, Kalyan-Dombivali (M. Corp.), Thane, Maharashtra 421202

We acknowledge complaints within 24 hours and aim to resolve them within 15 days of receipt. If you are not satisfied with our response, you may escalate to the Data Protection Board of India under the Digital Personal Data Protection Act, 2023.

11. Changes

We will update this page if what we collect changes — in particular, this policy will need revisiting before online payment is switched on, because a payment gateway will process data we do not currently handle.