Policies
Privacy Policy
What we collect when you visit and order from us, why we need it, and what we do with it afterwards.
Last updated 30 October 2026
Who we are
Jugmug Thela is a café and flavour lab in New Delhi, India, run by Jugmug Food Studio Pvt. Ltd. We run this website and the online shop on it. The shop sells and delivers within India only. If you want to reach a person about anything on this page, write to chaicoffee@jugmugthela.com.
What we collect
When you place an order we collect your name, email address, phone number, and the billing and delivery addresses you give us, along with what you bought and what you paid. These details are needed to fulfil the order. You can order as a guest without creating an account; we still need them to get the parcel to you.
When you create an account we additionally store the username and password you choose. The password is stored hashed, which means we cannot read it.
When you write to us through a form or by email, we keep the message and your contact details so we can reply and so we have a record of what was agreed.
When you browse, our server records the usual technical details every web server records: your IP address, which pages you opened and when, and what browser you used. We also measure how the site is used — see Cookies and site analytics below.
What we never see
Card numbers, UPI PINs, net-banking credentials and anything else you type on a payment screen go directly to Razorpay, our payment processor. They never reach our website and we never store them. We receive only a confirmation that the payment succeeded or failed, and a reference number so we can match it to your order. Razorpay handle that data under their own privacy policy.
Why we need it
To fulfil your order: to take payment, pack the right things, get them to the right address, tell you where your parcel is, and handle it properly if something goes wrong. We also keep order records because tax law requires us to.
To understand and improve the site: which pages are read, which products are looked at, where visitors come from.
For marketing and remarketing: to show our products to people who have visited us, on Google and on Meta (Facebook and Instagram), and to measure whether those ads lead to orders.
To send you news and offers — only if you ticked the box at checkout.
We do not sell your data to anyone.
Cookies and site analytics
Essential cookies make the shop work: they remember what is in your basket, keep you signed in, and carry you through checkout. Turning these off breaks the shop.
Analytics cookies (Google Analytics) tell us how visitors use the site.
Marketing cookies (the Meta Pixel and Google advertising tags) are used for marketing and remarketing: to show our products to people who have visited, and to measure which ads lead to orders.
Analytics and marketing cookies are on by default. You can switch them off at any time: opt out of analytics and marketing cookies.
Cookie-free statistics. We also count visits and page views with our own statistics tool, which runs on our server and sets no cookies. It does not identify you and is not shared with anyone.
Who else sees it
Only the people who have to, and only the part they need:
- Razorpay, to process payments and refunds.
- Our courier, who gets your name, address and phone number because they cannot deliver without them.
- Our hosting provider, on whose servers the site and its database sit.
- Our accountants, our accounting software and the tax authorities, for the invoice records the law requires.
- Google, for analytics and advertising, through the cookies described above.
- Meta (Facebook and Instagram), for advertising. When marketing cookies are on and you place an order, we tell Meta that a purchase happened, with your email, phone, name, city and PIN code in hashed (scrambled, one-way) form, so Meta can match the order to an ad. Meta does not receive your full address or payment details.
- Our email and messaging services, to send order messages and — if you asked for them — news and offers.
Messages from us
Order confirmations, dispatch notices and replies to your questions are part of the service and are sent whether or not you have subscribed to anything.
News about what we have made, offers, and what is happening at the café go only to people who ticked the box at checkout, by email, SMS or WhatsApp. Every such message carries a way to stop — an unsubscribe link, or reply STOP — and you can also just write and tell us.
How long we keep it
Order and invoice records are kept for as long as tax and company law requires us to keep them. Account details stay until you ask us to close the account. Your marketing choice is kept with your order so we can show what you agreed to. Messages you send us are kept while they are useful and then deleted.
What you can ask us to do
You can ask us for a copy of what we hold about you, ask us to correct anything wrong, ask us to delete your account and personal details, or withdraw your consent to marketing messages and marketing cookies at any time. Write to chaicoffee@jugmugthela.com and we will deal with it.
Where we are obliged to keep a record — a tax invoice, for instance — we will tell you plainly what we cannot delete and why.
Keeping it safe
The site runs over HTTPS, so what you send us is encrypted in transit. Access to the order database is limited to the people who need it. No website can promise perfect security, but if anything happens that puts your data at risk, we will tell you rather than hope you do not notice.
Children
This shop is meant for adults. We do not knowingly collect personal details from children.
Changes to this policy
If we change how we handle your data we will update this page and change the date at the top. Material changes will be announced rather than slipped in quietly.
