Privacy policy
Last updated 6 September 2026
Butter Club is a small home bakery. We collect what we need to bake your order and bring it to your door, and nothing beyond it. We do not sell your personal data, and we never have.
What we collect
When you create an account
- Your email address, which is how you sign in.
- Your name, and a phone number if you give us one.
When you place an order
- Your delivery address and any delivery instructions you write.
- The contact name, phone number and email for that order.
- What you ordered, what it cost, and when.
- Any note you leave for the kitchen.
Automatically
- Basic usage analytics — pages viewed, and actions such as adding to the cart or completing an order.
- Your IP address, briefly, to rate limit sign-in attempts and order placement. This is a security measure against abuse.
We never see your card details. Card numbers, UPI IDs and bank credentials are entered directly with our payment provider and do not pass through, or get stored on, our systems. We receive only whether a payment succeeded, its amount, and a reference number.
Why we hold it
- To bake, deliver and support your order.
- To let you sign in and see your own order history.
- To keep records of sales, which we are required to retain for tax and accounting purposes.
- To understand which cookies sell, so we bake the right things.
- To send you marketing, only if you explicitly opted in. You can turn it off in your account at any time.
Who else processes it
We use a small number of service providers, each handling data only to provide their service to us:
- Supabase
- Database and sign-in. Stores your account, orders and addresses.
- Razorpay
- Payment processing. Receives your name, email, phone and order amount in order to take the payment, and is subject to its own privacy policy and to RBI regulation.
- Vercel
- Hosting for this website.
- PostHog
- Product analytics — which pages and actions are used. Linked to your account id once you are signed in.
Beyond these, we share your details with nobody. The exception is where the law requires it — a lawful order from a court or authority.
What is kept in your browser
- A sign-in cookie, so you stay signed in between visits. Without it you could not have an account.
- Your cart, saved in your browser’s local storage so a refresh does not empty it. It never leaves your device until you check out.
Clearing your browser data removes both. Doing so signs you out and empties your cart, but does not touch orders you have already placed.
How long we keep it
Order records are kept for as long as tax and accounting rules require, currently eight years in India. Your account details are kept until you ask us to delete them. Analytics data is retained in aggregate.
Your rights
You can ask us at any time to:
- tell you what we hold about you,
- correct anything wrong — you can edit most of it yourself in your account,
- delete your account and personal details,
- stop sending you marketing.
Write to us through our contact page and we will respond within 30 days. Where we must keep a record of a completed sale for tax purposes, we will tell you what is being retained and why.
Children
This site is not intended for children under 13, and we do not knowingly collect their details.
Changes
If this policy changes, the date at the top of this page changes with it. Material changes to how we handle your data will be told to you directly.