Privacy Policy

Last updated: 28 April 2026  ·  Effective date: 28 April 2026

1. About Us

Arora Sweets (operating as Arora Sweets, hereinafter "we", "us", or "the Company") is a food and confectionery business with registered outlets in Bettiah, Bihar, India. Our registered address is: Supriya road, in front of Sameer Honda, Bettiah, Bihar – 845438. For any privacy-related queries, contact us at arorasweets2018@gmail.com or call +91 99344 92744.

2. Information We Collect

2.1 Information You Provide

• Name, email address, phone number when you fill in our contact form or place a pre-order
• Billing and delivery address for catering or bulk orders
• Feedback, reviews, or other content you submit voluntarily

2.2 Information Collected Automatically

• IP address, browser type, device information, and pages visited (via server logs)
• Cookies and similar tracking technologies (see Section 8 below)
• Referring URLs and session duration

2.3 Sensitive Personal Data or Information (SPDI)

We do not collect financial information such as credit/debit card numbers or bank account details directly on this website. All payment processing, if applicable, is handled by RBI-compliant third-party payment gateways.

3. How We Use Your Information

• To respond to your enquiries and process orders
• To send transactional communications (order confirmation, delivery updates)
• To send promotional communications — only with your prior consent and in compliance with TRAI regulations
• To improve our website, products, and services
• To comply with legal obligations under Indian law
• To detect, prevent, and address fraud or security incidents

4. Legal Basis for Processing

We process your personal data on the following grounds:

• Contractual necessity — to fulfil an order or service request
• Consent — for marketing communications and cookies
• Legitimate interests — for website security and analytics
• Legal obligation — to comply with applicable Indian laws

5. Sharing of Information

We do not sell, trade, or rent your personal information. We may share it with:

• Service providers acting on our behalf (hosting, email delivery, analytics) bound by confidentiality obligations
• Payment processors who are PCI-DSS compliant
• Delivery partners for catering orders, limited to information needed for delivery
• Law enforcement or government authorities if required by law, court order, or regulatory authority

Any cross-border transfer of data will be done in accordance with applicable Indian data protection laws.

6. Data Retention

We retain personal data only as long as necessary for the purpose collected, or as required by applicable law (including the Companies Act, GST Act, and FSSAI regulations). Typical retention periods:

• Contact form submissions: 24 months
• Order records: 7 years (statutory requirement)
• Marketing consent records: until consent is withdrawn

7. Your Rights

Under IT Rules 2011 and applicable Indian law, you have the right to:

• Access — request a copy of the personal data we hold about you
• Correction — request correction of inaccurate or incomplete data
• Withdrawal of consent — withdraw consent for marketing at any time
• Deletion — request erasure of data no longer required
• Grievance redressal — raise a complaint with our Grievance Officer (see Terms & Conditions)

To exercise any right, write to us at arorasweets2018@gmail.com. We will respond within 30 days as required under IT Rules 2011.

8. Cookie Policy

We use the following types of cookies on this website:

• Essential cookies — necessary for the website to function; cannot be disabled
• Analytics cookies — help us understand how visitors use the site (e.g., Google Analytics). These are only placed with your consent.
• Marketing cookies — used to deliver relevant advertisements. Only placed with your explicit consent.

You can manage cookie preferences through your browser settings. Most browsers allow you to refuse cookies or delete them. Note that disabling certain cookies may affect website functionality.

For more information, visit the allaboutcookies.org guide.

9. Security

We implement reasonable security practices and procedures as required under the IT (Amendment) Act, 2008 and IT Rules 2011, including:

• HTTPS/TLS encryption for all data in transit
• Access controls and role-based permissions for staff
• Regular security assessments of our systems

Despite our efforts, no transmission over the internet is 100% secure. In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the relevant authority as required by law.

10. Third-Party Links

Our website may contain links to third-party websites (e.g., social media platforms). We are not responsible for the privacy practices of those sites. We encourage you to review their privacy policies before providing any personal information.

11. Children's Privacy

Our website is not directed at children under the age of 18. We do not knowingly collect personal information from minors. If you believe we have inadvertently collected such information, please contact us and we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The updated policy will be posted on this page with a revised "Last updated" date. We encourage you to review this page periodically.

13. Contact & Grievance Officer

For any privacy concerns or to exercise your rights, contact our Grievance Officer (as designated under IT Rules 2011):

• Name: Mr. Arora (Proprietor)
• Email: arorasweets2018@gmail.com
• Phone: +91 99344 92744
• Address: Arora Sweets, Supriya road, in front of Sameer Honda, Bettiah, Bihar – 845438
• Response time: Within 30 days of receipt

You may also lodge a complaint with the Ministry of Electronics and Information Technology (MeitY) or approach the relevant consumer forum under the Consumer Protection Act, 2019.