# Privacy policy > This notice explains what personal data Brand Bakery collects through this website, why we collect it, where it is kept and the rights you have under Indian law. - Page: https://www.brandbakery.tech/privacy - Last updated: 2026-10-25 Breadcrumb: [Home](https://www.brandbakery.tech/) > Privacy policy Last reviewed: October 25, 2026 ## Who you are dealing with - **Business:** Brand Bakery - **Owner:** Abhishek Kumar - **Entity:** Sole proprietorship - **Registration:** MSME (Udyam) registered - **Based in:** New Delhi, India - **Email:** support@brandbakery.tech - **Grievance contact:** support@brandbakery.tech - **Governing law:** Laws of India ## Who is responsible Brand Bakery is the data fiduciary for personal data collected through this website, in the sense of India’s Digital Personal Data Protection Act, 2023 (the DPDP Act). Brand Bakery is owned and run by Abhishek Kumar in New Delhi. Our business details, including the grievance contact, are listed at the top of this page. This notice covers www.brandbakery.tech, its free tools, its API and agent tools, and enquiries you send us. Work we do for a client is also covered by the agreement for that project. ## What the enquiry form collects The enquiry form asks for your name, your email address, the service you are asking about, a budget band, a timeline and a message about the project. A phone number is optional, and you can tick a box to say we may reply on WhatsApp at that number. The form also records the page you started from and, if you arrived from a tagged link such as an ad, the campaign tags in that link (for example utm_source=google). Those tags name a campaign; we never put names, emails, phone numbers or customer IDs in them. Until you send the form they wait in your browser’s session storage. When you send the form, it goes to our server, which stores your entries together with the time, a one-way hash of your IP address made with a secret salt (not the address itself) and your browser’s user-agent string. We keep those two technical details to spot spam and abuse. An AI assistant can send the same enquiry for you through our API or MCP server; those enquiries are stored the same way and marked with the channel they came from. Please do not put passwords, payment-card details, identity documents or other sensitive personal data in a message. ## Why we use it We use an enquiry to reply to you, discuss a possible project, prepare a proposal and, if you hire us, run the work and keep business records. We rely on the consent you give by sending the enquiry. You can withdraw that consent at any time; withdrawing it does not undo processing already done. Sending an enquiry does not sign you up to a mailing list. We do not sell personal data or share it for advertising. ## Where it is stored and who processes it Enquiries are stored in Cloudflare D1, a database run by Cloudflare, which also hosts this website and protects it from attacks. We may copy an enquiry into our own project system so we can track the reply. Our business email runs on Google’s mail service, so our replies and any emails you send us are kept there. Cloudflare and Google process this data for us under their own terms and may process it outside India. See the privacy notices from [Cloudflare](https://www.cloudflare.com/privacypolicy/) and [Google](https://policies.google.com/privacy). ## Spam checks with Cloudflare Turnstile The enquiry form, “Email me my result” and the free guide form use Cloudflare Turnstile to check that a person, not a script, is sending them. Turnstile runs a short check in your browser and gives the form a token. Our server confirms that token with Cloudflare, together with your IP address, before it accepts the form. Cloudflare handles the signals used for this check under its own privacy notice. ## Website analytics and logs We count visits with Cloudflare Web Analytics, which does not use cookies and does not follow you across other websites. It reports page views, referring sites, country, device and browser type, and page-load speed, in aggregate. We also count, without cookies, which buttons and tools are used: for example a tool opened, a WhatsApp or callback button pressed, a demo played. Each count holds the page, the button, the campaign tag in the link you followed, the referring website, your country and whether you are on a phone. It holds no IP address, no browser fingerprint and nothing you type. If you choose "Allow analytics", we also use Google Analytics 4 to understand which pages and channels help. Google Analytics sets cookies only after that choice, with advertising features turned off. If you choose "No thanks", it does not load. You can change your mind at any time with the button below. Cloudflare also keeps request and security logs, such as IP addresses, browser details, timestamps and errors, so it can serve the website and block abuse. We do not use advertising pixels or advertising cookies. ## Your data in the free tools Our text, formatting, calculator, link, colour and QR tools work in your browser. What you type into them is not sent to Brand Bakery unless you use “Email me my result”, described below. Downloading or copying a result happens on your device. Some calculators offer “Email me my result”. It is optional. If you use it, your inputs and your email address go to our server, which works the result out again and sends you one email from contact@mail.brandbakery.tech through Cloudflare’s email service. We don’t keep a copy of your inputs. The email itself sits in your mailbox, and a reply lands in our inbox. Our server holds your address in memory for up to a day only to limit repeat sends. A separate box, unticked unless you tick it, asks whether you also want the Brand Bakery newsletter by email (tips for business owners and new free guides, about twice a month). If you tick it, we store your email address, the time, the tool you used, and the exact wording you ticked with its version, so we can show your consent. Reply STOP to any email, use the unsubscribe link in a newsletter, or write to the support address above, and we stop within 2 working days. Our free PDF guides ask for your name, a WhatsApp number or email address, and optionally your business name. We use them to give you the PDF and keep a record of the request, stored with the guide you asked for, the campaign tags of the page you came from, the time, and the version of the notice you saw. The newsletter box under that form is the same Brand Bakery newsletter, by email only; it is separate, starts unticked, and the PDF does not depend on it. If you gave only a WhatsApp number, we don’t add you to it. We do not call or message you because you asked for a guide. We delete a guide request after 90 days; if you joined the newsletter, we keep your contact details until you unsubscribe. Reply STOP to any message, or write to support@brandbakery.tech, to stop messages or have your details deleted sooner. The SEO audit is different: the URL you submit is sent to our server, which requests that public page and may send the URL to Google PageSpeed Insights for performance measurements. Only submit public URLs you are allowed to check, and leave out private tokens, confidential query parameters and login links. Your motion preference and your launch checklist progress are saved in your browser’s local storage. An enquiry draft started by an AI assistant can be kept in your browser’s session storage for up to 30 minutes so it survives a page change. You can clear all of this with the reset controls or your browser’s site-data settings. ## If we contacted you first We sometimes write to businesses using the contact details they publish on their own website. We keep the business name, the published email address and the page we found it on, only to send one email and one follow-up. We delete these details after 90 days if we don’t start working together. If you reply “no”, we keep only your address on a do-not-contact list so we never write again. ## How long we keep it We keep an enquiry while we are talking to you, and for as long as we need it to run a project, keep business and tax records, and meet legal duties. If an enquiry does not lead to work, you can ask us to delete it at any time. We keep a newsletter sign-up until you unsubscribe, and then only a note that you did, so we do not write to you again. We delete a free guide request after 90 days; if you joined the newsletter, we keep your contact details until you unsubscribe. Provider logs and backups are deleted on the provider’s own schedule, so a deleted record can stay in a backup for a short time. ## Your rights under the DPDP Act You can ask us for a summary of the personal data we hold about you and how we use it; ask us to correct, complete, update or erase it; withdraw consent you have given; and nominate another person to use these rights for you if you die or become unable to act. To make a request, email [support@brandbakery.tech](mailto:support@brandbakery.tech?subject=Privacy%20request) with the subject “Privacy request”. We may ask you to confirm that the request is yours. If we need to keep some data, for example for tax records, we will tell you what and why. As a data fiduciary we collect only what the form needs, keep it accurate and secure, use it only for the purposes in this notice, and will tell you and the Data Protection Board of India if a personal data breach affects you. ## Grievances If you are unhappy with how we have handled your personal data, write to the grievance contact listed at the top of this page or to [support@brandbakery.tech](mailto:support@brandbakery.tech). We will look into it and reply. The DPDP Act asks you to use this route first; if we do not resolve your complaint, you can then take it to the Data Protection Board of India. ## Children Our services are for businesses, and this website is not meant for children. We do not knowingly collect personal data from anyone under 18. If you are under 18, please ask a parent or guardian to contact us for you. ## Changes to this notice We will update this page when the way we handle data changes. The review date at the top identifies this version. Questions about this notice are welcome at [support@brandbakery.tech](mailto:support@brandbakery.tech). ## Related policies - [Privacy policy](https://www.brandbakery.tech/privacy) - [Website terms](https://www.brandbakery.tech/terms) - [Cancellations and refunds](https://www.brandbakery.tech/refund-policy) - [Website disclaimer](https://www.brandbakery.tech/disclaimer) --- Brand Bakery is a design-first digital studio in New Delhi. Start an enquiry at https://www.brandbakery.tech/contact or email support@brandbakery.tech. This is the Markdown copy of https://www.brandbakery.tech/privacy; the site index for language models is https://www.brandbakery.tech/llms.txt.