How we handle your data

This notice describes the personal data Shockeen collects, why we collect it, and how you can withdraw consent or get in touch — in line with the Digital Personal Data Protection Act, 2023.

What we collect & why

• Order data — name, WhatsApp number, delivery address, PIN code, order details — collected when you place an order, used to bake and deliver it, retained as part of standard business records.
• Account & sign-in data — if you choose "Continue with Google" at checkout, we receive your name, email address, and Google profile picture from Google to create and recognise your account; we never receive your Google password. Signing in is optional — you can always order as a guest instead. When you have an account we store your saved addresses and order history to make repeat orders easier.
• Waitlist data — name, email, and WhatsApp number — collected only when you opt in from an unserved PIN code, used only to notify you when we launch in your area. Deleted within 90 days of the launch notification unless you separately opt in to flavour / seasonal updates.
• Technical data — IP address and browser user-agent — collected automatically for security, fraud prevention, and rate-limiting. Not used for marketing.

Cookies & advertising measurement

To know whether our advertising works, shockeen.in uses the Meta Pixel with Meta’s Conversions API, and Google’s advertising tags, on customer-facing pages only. They record page views, menu views, PIN-code checks, cart and checkout steps, and confirmed orders with the order value.

• What is sent — the event and its value, a random event id, your browser’s advertising cookie ids, your IP address and browser user-agent, and — only for a confirmed order or a signed-in customer — your email address and phone number in one-way hashed (SHA-256) form. Never your name, never your delivery address.
• Attribution cookies — two small first-party cookies (90 days and 7 days) remember which link or ad brought you here, so we can see which campaigns actually lead to orders. They are not shared with anyone.
• Your choice — the notice at the bottom of the page lets you pick “Essential only”, which switches the Meta and Google tags off on that browser for 180 days. Our own order records are unaffected. You can also manage ad preferences at Meta (Settings → Ads) and Google (adssettings.google.com).
• Retention — event records on our own server are kept for 90 days for reconciliation and then deleted. Meta and Google keep what they receive under their own policies.

Your rights

You can withdraw consent, request a copy of your data, ask for correction, or request deletion at any time by emailing anurag@shockeen.in with the WhatsApp number you used.

Grievance Officer

We aim to respond to data requests within 7 working days. If your concern is not resolved, you may approach the Data Protection Board of India.

Last updated: May 2026