Privacy Policy

This Privacy Policy applies to Chantilly The Workshop and its website, online store, and related customer interactions (collectively, the “Site”, “Store”, or “Services”). In this policy, “we”, “us”, and “our” refer to Chantilly The Workshop, based in Mumbai, Maharashtra, India.

If you have any questions about this Privacy Policy or wish to exercise your rights in relation to your personal data, you may contact us using the details listed in the “Contact us and grievance redressal” section below.

Information you provide directly

We may collect personal data that you provide when you place an order, schedule a pick up, contact us, subscribe to our communications, or otherwise interact with us. This may include your name, email address, phone number, billing address, shipping address, pickup preferences, order details, and any information you share in messages or support requests.

Information collected automatically

When you visit the Site, certain technical and usage information may be collected automatically, including your IP address, browser type, device information, pages viewed, referring URL, approximate location based on IP, and information about how you navigate and interact with the Site.

Transaction and payment information

When you make a purchase, payment-related information is processed through our payment and ecommerce partners. We do not typically store your full card details on our own systems. We may receive limited transaction information such as payment status, order reference, and billing details required to process your order and maintain records.

We may use personal data for the following purposes:

• to provide, operate, and maintain our website and online store;
• to process and fulfil orders, including shipping and pickup scheduling;
• to communicate with you regarding your order, enquiry, account, or customer support request;
• to detect, prevent, or investigate fraud, abuse, security incidents, or technical issues;
• to improve our products, services, website experience, and internal operations;
• to comply with legal, regulatory, accounting, and tax requirements;
• to send marketing or promotional communications where permitted by law or where you have chosen to receive them.

We process personal data only for lawful purposes and only to the extent necessary for those purposes.

Where required under applicable law, we process your personal data on the basis of your consent, for the performance of a contract with you, for compliance with legal obligations, or for our legitimate uses and business purposes to the extent permitted by law.

Where processing is based on consent, you may withdraw your consent by contacting us, subject to any legal or operational consequences of such withdrawal. Withdrawal of consent will not affect the lawfulness of processing carried out before withdrawal.

We and our service providers may use cookies, pixels, tags, and similar technologies to operate the Site, remember preferences, keep your cart active, understand traffic patterns, measure performance, and improve the shopping experience.

These technologies may include essential cookies required for the functioning of the store, as well as analytics and performance cookies used by Shopify and any enabled third-party tools.

You can control cookies through your browser settings. Please note that disabling certain cookies may affect the functioning of parts of the Site, including cart, login, and checkout features.

We may share personal data with trusted service providers and partners only to the extent reasonably necessary to operate our business and provide our services. These may include:

• Shopify, which powers our online store and related ecommerce infrastructure;
• payment gateways, payment processors, and banking partners for payment authorisation and settlement;
• shipping, delivery, logistics, and pickup-related partners where relevant;
• technology, analytics, marketing, communications, and customer-support tools that we use in connection with the Site;
• professional advisers, auditors, insurers, and legal or regulatory authorities where required.

We may also disclose personal data if required by law, regulation, court order, lawful government request, or to protect our rights, customers, systems, or operations.

We retain personal data only for as long as reasonably necessary for the purpose for which it was collected, including to fulfil orders, provide support, maintain records, resolve disputes, enforce agreements, comply with legal obligations, and protect our legitimate business interests.

Retention periods may vary depending on the nature of the data, transaction history, support queries, and compliance requirements. Certain technical logs and security-related records may also be retained for a limited period in accordance with applicable security and legal requirements.

We use reasonable technical, organisational, and contractual safeguards designed to protect personal data against unauthorised access, disclosure, misuse, alteration, or destruction. However, no method of transmission over the internet or method of electronic storage is completely secure, and we cannot guarantee absolute security.

You are responsible for maintaining the confidentiality of your account credentials and for notifying us promptly if you believe your account or personal data has been compromised.

Our Site is not intended for children, and we do not knowingly collect personal data from children in violation of applicable law. If you believe that a child has provided us with personal data without appropriate authorisation, please contact us so that we can review and take appropriate action.

Our website and ecommerce infrastructure may involve processing by service providers or systems located outside India. By using the Site and providing your personal data, you acknowledge that your personal data may be processed in jurisdictions outside India, subject to applicable law and reasonable safeguards implemented by the relevant service providers.

Subject to applicable law, you may have rights in relation to your personal data, including the right to request information about personal data we process about you, request correction or updating of inaccurate or incomplete data, request deletion of personal data no longer required for the purpose for which it was collected, withdraw consent where processing is based on consent, and seek grievance redressal in accordance with applicable law.

To exercise any of these rights, please contact us using the details below. We may require reasonable verification of your identity before responding to your request.

If you have any questions, concerns, or requests regarding this Privacy Policy or the way your personal data is handled, please contact us at:

Chantilly The Workshop
Email: chantillythecafe@gmail.com
Phone: +91 97693 56862
Address: Shop No 2, Darvesh Royale Building, Opposite Kotak Mahindra Bank, Perry Road, Bandra West, Mumbai, 400050 Maharashtra, India

If required by applicable law, you may also address your complaint or grievance to our designated grievance contact / officer at the contact details above or such other details as we may publish from time to time.

We may update this Privacy Policy from time to time to reflect changes in our business practices, technology, legal requirements, or service providers. The revised version will be posted on this page with an updated “Last updated” date. Your continued use of the Site after such changes become effective will be subject to the revised Privacy Policy.