Privacy policy

Last updated: 20 May 2026

This Privacy Policy explains how Cooked ("we", "us", "our") collects, uses, stores, and protects your personal data when you use wearcooked.com (the "Site"). This policy is written to comply with India's Digital Personal Data Protection Act, 2023 ("DPDP Act") and applicable rules.

1. Who we are

Data Fiduciary: Cooked
Contact: hello@wearcooked.com
Registered address: R-103, KP 2, Jaypee Wishtown, Sector 131, Noida, Gautam Buddha Nagar, Uttar Pradesh 201304, India
Grievance contact: hello@wearcooked.com

2. What data we collect

When you use the Site, place an order, or sign up for our list, we may collect:

  • Identity & contact data: name, email, phone, shipping address, billing address.
  • Order data: products purchased, transaction amount, payment method (we do not store full card numbers — they are handled directly by Razorpay).
  • Account data: if you create an account, login credentials and preferences.
  • Device & usage data: IP address, browser type, device identifiers, pages visited, time on site, referring URL — collected via cookies and similar technologies.
  • Marketing data: email opt-in status, communication preferences.

3. Why we collect it (purposes)

  • To process and fulfil your orders, including shipping and returns.
  • To send you order confirmations, shipping updates, and customer service responses.
  • To send marketing communications (drop alerts, restock notifications) — only if you opt in.
  • To detect and prevent fraud and abuse.
  • To improve the Site, our products, and your experience.
  • To comply with applicable laws and respond to lawful requests.

4. Legal basis for processing

We process your data based on:

  • Your consent — for marketing communications, cookies (non-essential), and any optional data collection.
  • Performance of contract — to fulfil your orders.
  • Legal obligation — to comply with tax, accounting, and consumer protection laws.
  • Legitimate use — for fraud prevention and core Site functionality.

5. Who we share data with

We share your personal data only with parties who help us run the business. Each is bound by contract or law to protect it:

  • Shopify — our e-commerce platform (data may be stored outside India).
  • Razorpay — to process payments. Razorpay's privacy policy: razorpay.com/privacy
  • Shipping partners (e.g. Shiprocket, Delhivery, Blue Dart) — to deliver your order.
  • Analytics & marketing (e.g. Google Analytics, Meta Pixel) — to understand site usage and run ads. Data is pseudonymised where possible.
  • Email/SMS providers — to send transactional and marketing communications.
  • Legal authorities — if compelled by valid legal process.

We do not sell your personal data.

6. International data transfers

Some of our service providers (including Shopify) are located outside India. When we transfer your data internationally, we ensure adequate safeguards are in place — including contractual protections — to keep your data protected to a standard equivalent to Indian law.

7. How long we keep your data

  • Order and transaction records: 8 years (to comply with Indian tax and accounting law).
  • Account data: until you delete your account, then 30 days.
  • Marketing consent and contact list data: until you withdraw consent / unsubscribe, then 30 days.
  • Cookie data: per the lifespan of each cookie (mostly under 12 months).
  • Customer service correspondence: 3 years from last contact.

8. Your rights under the DPDP Act

You have the following rights regarding your personal data:

  • Right to access: get a summary of the personal data we hold about you and how it's processed.
  • Right to correction: have inaccurate or incomplete data corrected.
  • Right to erasure: request deletion of your personal data (subject to legal retention obligations).
  • Right to grievance redressal: contact us first — we will respond within 30 days. If unresolved, you may escalate to the Data Protection Board of India.
  • Right to nominate: nominate another individual to exercise your rights on your behalf in the event of death or incapacity.
  • Right to withdraw consent: at any time, for any consent-based processing. Withdrawal does not affect lawfulness of prior processing.

To exercise any of these rights, email hello@wearcooked.com with the subject line "DPDP Rights Request" and a description of your request. We will respond within 30 days.

9. Cookies and tracking

We use cookies and similar technologies for:

  • Strictly necessary cookies — to make the Site work (cart, checkout, login). These don't require consent.
  • Analytics cookies — to understand how the Site is used (Google Analytics). Loaded only with consent.
  • Marketing cookies — for advertising (Meta Pixel, Google Ads). Loaded only with consent.

You can manage your cookie preferences via our cookie banner at any time, or via your browser settings.

10. Children's data

Our products and services are intended for adults. We do not knowingly collect personal data from anyone under 18 years of age. If you are a parent or guardian and believe we have collected data from a minor, contact us at hello@wearcooked.com and we will delete it.

11. Data security

We use industry-standard security measures — encryption in transit (HTTPS/TLS), encryption at rest where possible, access controls, and regular reviews of our service providers — to protect your data. However, no online system is 100% secure. If we become aware of a personal data breach affecting you, we will notify you and the Data Protection Board of India as required by law.

12. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will post the updated version on this page with a revised "Last updated" date. If the changes are material, we will notify you by email or via a notice on the Site.

13. Contact and grievance

For any privacy-related question, request, or complaint, contact us at hello@wearcooked.com.

If you are not satisfied with our response, you may escalate to the Data Protection Board of India.