Privacy Policy

DeshÉ ("we", "us", "our") is a small home-based food business in Jamnagar, Gujarat, India. This policy explains what personal data we collect through our website, why we collect it, and the choices you have. We process personal data in line with India's Digital Personal Data Protection Act, 2023 (DPDP Act).

About this website

Our website is a catalogue. You can browse our treats and send us an enquiry, but you cannot pay or check out online. We do not collect card, UPI or bank details on this website.

What we collect

When you send an enquiry or contact form, we collect the details you enter: your name, email address, phone number, city, the item and quantity you are interested in, your preferred delivery date, your message and, for bulk orders, your company or organisation and the occasion.

If you create an account, we collect your email address to sign you in. You can also choose to add your name, phone number and delivery address to your profile. Your account keeps your saved treats (wishlist) and a history of the enquiries you have sent.

When you browse, and only if you accept analytics cookies, Google Analytics collects information such as the pages you visit, approximate location (city level), device and browser type, and how you arrived at our site.

Technical data such as your IP address and browser details is processed briefly by our hosting and security providers to deliver the site and protect it from abuse.

How we use your data

• To reply to your enquiry, confirm availability and price, and arrange preparation and delivery.
• To send you a copy of your enquiry and related updates by email.
• To run your account: sign you in, save your profile, wishlist and enquiry history.
• To understand how our site is used and improve it (only with your consent).
• To prevent spam and misuse of our forms.

We do not sell your personal data, and we do not use it for third-party advertising.

Signing in

Accounts use one-time codes sent to your email. We never ask you to set a password. Codes expire after a short time and can only be used once.

Cookies

We use a small number of cookies:

• Essential cookies keep you signed in, remember your cookie choice and remember your preferred language. The site cannot work properly without them, so they do not need consent.
• Analytics cookies (Google Analytics 4) are set only after you click "Accept all". We use Google Consent Mode v2, so if you choose "Essential only", analytics cookies are not set.

You can change your choice at any time using "Cookie settings" in the site footer.

Who we share data with

We use trusted service providers to run the website. They process data on our behalf and only for the purposes described here:

• Supabase — hosts our database, where enquiries and account data are stored, and handles sign-in.
• Vercel — hosts the website.
• Cloudflare — serves images and provides Turnstile, which checks that form submissions come from a real person.
• Google Analytics — measures site usage, only with your consent.
• Our email provider — delivers enquiry notifications to our team and emails such as sign-in codes and enquiry copies to you.

Some of these providers may store or process data outside India. We may also disclose data if required by law.

How long we keep data

We keep enquiries for as long as needed to handle your order and for our reasonable business and accounting records. Account data is kept until you delete your account or ask us to delete it. Analytics data is retained according to our Google Analytics settings.

Your rights

Under the DPDP Act, you can ask us to:

• tell you what personal data we hold about you;
• correct or update inaccurate data;
• delete your data (unless we must keep it by law);
• withdraw your consent, for example to analytics cookies.

You can update your profile yourself from your account page. For any other request, email us at support@deshé.com (support@xn--desh-epa.com). We will respond within a reasonable time. If you are not satisfied with our response, you may approach the Data Protection Board of India.

Children

Our website is meant for adults. If you are under 18, please ask a parent or guardian to send enquiries on your behalf.

Security

We take reasonable steps to protect your data, including encrypted connections (HTTPS), access controls on our database and spam protection on our forms. No online service is completely secure, but we work to keep your information safe.

Changes to this policy

We may update this policy from time to time. The date at the top of this page shows when it was last changed.

Contact

DeshÉ, Jamnagar, Gujarat, India. Email: support@deshé.com (support@xn--desh-epa.com).