Privacy Policy

Effective Date: 12 April 2026

Last Updated: 12 April 2026

Glenary’s Cafe (“we”, “us”, or “our”) operates the website glenaryscafe.com (the “Site”) and associated online ordering services. This Privacy Policy explains how we collect, use, store, share, and protect your personal information when you visit our Site, place an order, or interact with us in any way.

By using our website or placing an order, you consent to the data practices described in this Policy. If you do not agree, please refrain from using our services.

1. Who We Are

Glenary’s Cafe is a bakery and food retail business operating in Siliguri, West Bengal, India. Our registered address for correspondence is:

Marina’s Motel, Bihar More, towards Nepal Road, Bagdogra, West Bengal – 734014

Email: contact@glenaryscafe.com

Phone / WhatsApp: +91 9679348821

2. Information We Collect

We collect information you voluntarily provide to us and information generated automatically when you use our Site.

2.1 Information You Provide Directly

  • Full name, email address, phone number, and delivery address when you create an account or place an order
  • Company name and contact details when placing a corporate packet lunch order
  • Payment information — processed securely by third-party payment gateways; we do not store card numbers on our servers
  • Messages or enquiries submitted via the Contact Us form
  • Franchise enquiry details including background information and investment capacity
  • Loyalty programme registration data (name, email, order history)

2.2 Information Collected Automatically

  • IP address, browser type, operating system, and device identifiers
  • Pages visited, time spent on pages, and clickstream data via cookies and analytics tools
  • Referring URLs (which website sent you to ours)
  • Location data (approximate, derived from IP address)

2.3 Information from Third Parties

  • If you sign in using a third-party service (e.g. Google), we may receive your name and email as permitted by that service’s terms
  • Payment processors may share transaction confirmation data with us

3. How We Use Your Information

We use the information we collect for the following purposes:

  1. To process and fulfil your orders, including preparation, packaging, and delivery coordination
  2. To send you order confirmations, delivery updates, and customer service communications
  3. To manage your account and loyalty club membership
  4. To respond to enquiries, complaints, and franchise queries
  5. To improve our website, menu, and customer experience through analytics
  6. To send you promotional communications, offers, and updates — only if you have opted in
  7. To comply with applicable Indian laws, tax obligations, and regulatory requirements
  8. To detect, investigate, and prevent fraudulent or unauthorised activity
  9. To process and respond to franchise applications

We will never sell, rent, or trade your personal information to third parties for their own marketing purposes.

4. Legal Basis for Processing (Under Indian Law)

We process your personal data in accordance with the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (“SPDI Rules”), and, where applicable, in anticipation of the Digital Personal Data Protection Act, 2023.

Our legal bases for processing include:

  • Your consent, where explicitly given (e.g. marketing communications)
  • Performance of a contract — to process and deliver your orders
  • Compliance with a legal obligation under Indian law
  • Our legitimate interests in operating, improving, and securing our business

5. Cookies & Tracking Technologies

Our website uses cookies — small text files stored on your device — to enhance your experience and analyse usage. We use the following types:

  • Essential Cookies: Required for the website and shopping cart to function correctly. Cannot be disabled.
  • Analytics Cookies: Used to understand how visitors use our Site (e.g. Google Analytics). Collected data is anonymised.
  • Preference Cookies: Remember your settings such as login status and cart contents.
  • Marketing Cookies: Used to show relevant offers, if you have opted in. Set by third-party advertising partners.

You may manage or disable non-essential cookies through your browser settings. Disabling essential cookies will affect the functionality of our Site and checkout process.

6. Sharing Your Information

We do not sell your data. We may share your information only with:

  • Delivery and logistics partners who fulfil your orders — limited to name, address, and phone number
  • Payment gateway providers (e.g. Razorpay, PhonePe, or similar) for secure transaction processing
  • Email and SMS service providers used to send transactional and marketing communications
  • Analytics providers such as Google Analytics, operating under data processing agreements
  • Legal and regulatory authorities when required by applicable Indian law or a court order
  • Prospective franchise partners, limited to aggregated business performance data and no personal customer data

All third-party service providers are contractually bound to process your data only for the purposes we specify and to maintain appropriate security measures.

7. Data Retention

We retain your personal data for as long as necessary to fulfil the purposes outlined in this Policy:

  • Order and transaction records: 7 years (as required under the Income Tax Act, 1961)
  • Account data: For the duration of your account and 2 years after closure
  • Marketing preferences: Until you withdraw consent or unsubscribe
  • Enquiry and contact records: 2 years from the date of last contact
  • Franchise enquiry data: 3 years from the date of enquiry

Upon expiry of these periods, data is securely deleted or anonymised.

8. Data Security

We implement industry-standard technical and organisational security measures to protect your personal data from unauthorised access, loss, misuse, or disclosure. These include:

  • SSL/TLS encryption for all data transmitted via our Site
  • Restricted access to personal data on a need-to-know basis
  • Secure, password-protected database environments
  • Regular security reviews of our systems and practices

While we take every reasonable precaution, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security and shall not be held liable for breaches beyond our reasonable control.

9. Your Rights

Under Indian data protection law, you have the following rights regarding your personal data:

  • Right to Access: Request a copy of the personal data we hold about you
  • Right to Correction: Request correction of inaccurate or incomplete data
  • Right to Erasure: Request deletion of your personal data, subject to legal retention obligations
  • Right to Withdraw Consent: Withdraw marketing consent at any time by clicking ‘Unsubscribe’ or contacting us
  • Right to Grievance Redressal: Raise a complaint regarding our handling of your data

To exercise any of these rights, please contact us at hello@glenaryscafe.com with your full name, registered email address, and a description of your request. We will respond within 30 days.

10. Children’s Privacy

Our website and services are not directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us immediately and we will delete it promptly.

11. Third-Party Links

Our Site may contain links to third-party websites (e.g. Google Maps, social media platforms, or payment gateways). We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies independently.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or services. The updated Policy will be posted on this page with a revised “Last Updated” date. We encourage you to review this page periodically. Continued use of our Site after any changes constitutes acceptance of the revised Policy.

13. Contact & Grievance Officer

If you have any questions regarding this policy, please contact us:

Business Name: Glenary’s Cafe

Website: glenaryscafe.com

Email: contact@glenaryscafe.com

Phone / WhatsApp: +91 96793 48821

Address: Marina’s Motel, Bihar More, towards Nepal Road, Bagdogra, West Bengal — 734014

In accordance with the Information Technology Act, 2000 and the SPDI Rules, 2011, you may raise a grievance regarding your data to our designated Grievance Officer at the contact details above. We will acknowledge your complaint within 48 hours and resolve it within 30 days.