Privacy Policy

At 20 Degree Chocolatier, we craft chocolate with care, and we handle your information the same way. This Privacy Policy explains what we collect from you, why we collect it, how we protect it, and what control you have over it. Please take a few minutes to read it,  we've kept it in plain language, because you deserve to understand it, not decode it.

1. Who We Are

The website www.20degree.in is owned and operated by [Legal Entity Name], registered in Punjab, India ("we", "us", "our"). We manufacture premium handcrafted chocolates and deliver them across India, crafted in Punjab.

For the purposes of India's Digital Personal Data Protection Act, 2023, we act as the Data Fiduciary for the personal data you share with us. When we say "you" or "your", we mean you as a visitor, customer, or subscriber of our Website.

2. What This Policy Covers

This Policy applies to your use of our Website, your orders with us, your interactions with our customer support, and the marketing communications you receive from us. It sits alongside our Terms and Conditions, and by using our Website, you accept both.

3. Information You Give Us

You share information with us directly when you shop, sign up, or reach out. This may include:

• Your identity and contact details: your name, email address, phone number, and WhatsApp number.
• Your delivery details: your shipping address, pincode, delivery instructions, and any alternate contact you provide.
• Gifting details: the recipient's name, address, phone number, and the message you'd like us to include with their box.
• Your account details: your login credentials and saved preferences.
• Your order history: the products you buy, the occasions you buy for, and your past transactions.
• Your dietary information: any allergy or ingredient concerns you tell us about, so we can help you order safely.
• Your communications with us: the emails, WhatsApp messages, and support queries you send us.
• Your feedback: reviews, ratings, photographs, and survey responses you choose to share.

If you order chocolates as a gift, please make sure the recipient is comfortable with you sharing their details with us. We use those details only to deliver their gift.

4. Information We Collect Automatically

When you browse our Website, our systems record certain technical details on their own. This includes your IP address, device type, browser and operating system, referring page, the pages you view, how long you spend on them, what you search for on our site, and the date and time of your visit.

We use this to understand how our Website performs, to spot problems, and to make your shopping experience better. On its own, this data doesn't identify you personally.

5. Payment Information

We do not store your card numbers, CVV, UPI PIN, or net banking credentials on our servers.

When you pay us, your payment details go directly to our payment gateway partners, who are PCI-DSS compliant and handle that data under their own privacy policies. We receive only a confirmation of your transaction, along with limited details such as the payment method and the last few digits of your card, so we can identify your order and process any refund.

6. Cookies and Similar Technologies

Our Website uses cookies — small text files stored on your device — to keep it working properly and to improve your experience. We use them to:

• Keep you signed in and remember your cart.
• Save your preferences and pincode.
• Understand how visitors navigate our Website, through analytics tools.
• Show you relevant chocolate suggestions and advertising.

You can manage cookies through your browser settings and choose to block or delete them. Please note that disabling essential cookies may prevent parts of our Website, such as your cart and checkout, from working as intended.

7. Why We Use Your Information

We use your information only for purposes we can explain to you:

 

We do not use your personal data for automated decision-making that produces legal or similarly significant effects on you.

8. Who We Share Your Information With

We do not sell your personal data. We never have and we don't intend to.

We share what's necessary, with parties who need it to serve you:

• Our delivery partners, who need your name, address, and phone number to bring your order to your door.
• Our payment gateways, who process your transaction securely.
• Our technology providers, including our e-commerce platform, hosting, email, and analytics services.
• Our marketing and communication partners, where you have consented to receive updates from us.
• Our professional advisers, such as our auditors and legal counsel, where required.
• Government or law enforcement authorities, where we are legally obliged to disclose information.
• A successor entity, if our business is ever merged, acquired, or restructured, in which case we'll notify you.

Every partner we work with is bound to use your data only for the purpose we've engaged them for.

9. Where Your Data Is Stored

Our Website runs on Shopify, and some of our service providers store or process data on servers located outside India. Where your data is transferred internationally, we take reasonable steps to ensure it is handled with protection comparable to what we describe in this Policy, and in accordance with applicable Indian law.

10. How We Protect Your Information

We take security seriously. We use SSL encryption across our Website, restrict access to your data to team members who genuinely need it, work with PCI-DSS compliant payment partners, and review our safeguards periodically.

That said, we want to be honest with you: no method of transmission over the internet is entirely secure. While we do our best to protect your data, we cannot guarantee absolute security. Please help us by keeping your account password confidential and by telling us immediately at [your email address] if you suspect any unauthorised access to your account.

11. How Long We Keep Your Data

We keep your information only as long as we need it:

• Your order and invoice records: for as long as Indian tax and accounting law requires, currently up to 8 years.
• Your account details: until you ask us to delete your account, plus a short period afterwards.
• Your marketing preferences: until you unsubscribe or withdraw consent.
• Your support conversations: for a reasonable period, so we can help you better next time.
• Your website analytics data: typically in aggregated, non-identifiable form.

Once we no longer need your data, we delete it or anonymise it.

12. Your Rights

Under the Digital Personal Data Protection Act, 2023, you have real control over your data. You may:

• Access the personal data we hold about you and ask how we've used it.
• Correct any information that is inaccurate, outdated, or incomplete.
• Erase your data, where we no longer need it for the purpose we collected it or to meet a legal obligation.
• Withdraw your consent at any time, including for marketing.
• Nominate another person to exercise your rights on your behalf, if you are unable to.
• Raise a grievance with us, and escalate to the Data Protection Board of India if you're not satisfied with our response.

To exercise any of these, write to us at [your email address]. We'll verify your identity and respond within a reasonable timeframe. There's no charge for making a request.

13. Marketing Communications

We'd love to tell you when we launch a new bar or open festive gifting, but only if you want to hear from us. You can unsubscribe from our marketing emails at any time using the link at the bottom of every email, or by writing to us.

Transactional messages about your order, confirmations, dispatch alerts, delivery updates, will continue regardless, because you need them.

14. Children's Privacy

Our Website is meant for adults. We do not knowingly collect personal data from anyone under 18. If you are under 18, please ask your parent or guardian to place an order for you. If we discover that we have collected a child's data without verifiable parental consent, we will delete it promptly. If you believe this has happened, please contact us at [your email address].

15. Third-Party Links

Our Website may link to other sites our Instagram, our delivery partner's tracking page, or content we think you'll enjoy. Once you leave our Website, this Policy no longer applies. We encourage you to read the privacy policy of any site you visit.

16. In the Event of a Data Breach

If a security incident affects your personal data, we will investigate it promptly, take reasonable steps to contain it, notify you and the Data Protection Board of India as required by law, and tell you what we're doing about it. We'd rather be transparent with you than quiet.

17. Updates to This Policy

We may revise this Policy as our business, our technology, or the law evolves. When we do, we'll update the "Last updated" date at the top, and we'll notify you of significant changes by email or a notice on our Website. Your continued use of our Website after we publish an update tells us you accept it.

18. Grievance Officer

In line with Indian law, we've appointed a Grievance Officer to address your concerns about how we handle your data:

[Name] Grievance Officer, 20 Degree Chocolatier Email: [grievance email address] Phone: [phone number] Address: [registered address]

We aim to acknowledge your grievance within 24 hours and resolve it within the timeframe prescribed by law.

19. Talk to Us

Questions about your data? We're happy to answer them.

Email: 20degreechocolatier@gmail.com

Phone: +91 9872384703

Instagram: @20degreechocolatier

 

Last updated: July 18, 2026