This draft explains how the sample shop's checkout is designed. Confirm the details and replace every bracketed prompt before publishing; have the final notice reviewed for the privacy laws that apply to your business and customers.
1. Who is responsible for your information
The shop operator is [ADD FULL LEGAL BUSINESS OR OWNER NAME], trading as Chocolate Circle. Privacy contact: [ADD PRIVACY OR CUSTOMER SUPPORT EMAIL], [ADD BUSINESS ADDRESS].
2. Information used for an order
When you check out, the website asks for your name, phone number, email address, and delivery address. To calculate an approximate distance, the checkout also sends the delivery pin’s latitude and longitude to the shop’s Cloudflare Worker. The Worker calculates the straight-line distance and uses it to suggest Porter (15 km or less) or courier (over 15 km) for the shop to book manually. The shop’s site does not send the coordinates to an external geocoding or distance API or include them in Razorpay order notes. If you choose your device’s location, your browser or device’s location services may process location information under their own terms. Provide the delivery pin, rather than a different current location, so the estimate is useful.
The checkout sends your contact and delivery details and the selected product and manual delivery-method details to the shop's Cloudflare Worker. The Worker creates a Razorpay order and includes the supplied contact and delivery address in that payment provider's order notes so the shop can fulfil the order. After Razorpay confirms payment, the Worker saves your name, phone, email, delivery address, product details, paid amount, order and payment IDs, delivery-method estimate, distance, selected flavours and wrapper designs, and policy acknowledgement in a Cloudflare D1 database controlled by the shop. Only authorized shop account users should have access to its records. The delivery coordinates are used to calculate distance but are not stored in this database. Provide only information needed to contact you and deliver your purchase.
The shopping bag is saved in your browser's local storage so it can remain available when you return. This starter site does not set up advertising analytics. Customers can request a one-time email code to view paid orders associated with that address. The shop's database stores only a hash of each sign-in code and session token; codes expire after 10 minutes, sign-in attempts are limited, and customer sessions expire after 30 days. Sign-in codes are delivered by Resend. Review the production hosting, application logs, and any services you add before publishing; update this notice if your actual practices differ.
3. Payments and service providers
Razorpay processes payment through its own checkout. This website does not collect or store your full card, bank, or payment credentials. Cloudflare runs the checkout Worker, and GitHub Pages hosts the static website. Resend delivers customer sign-in codes to email addresses associated with paid orders. These providers may process information under their own terms and privacy notices. Add or update this list if the shop starts using analytics, customer-support, shipping, or other services that receive personal information.
4. How the shop uses information
The intended use is to create and confirm payment orders, maintain the shop's paid-order and sales reports, contact you about an order, arrange its delivery, and respond to a question or issue. Add the shop's accurate retention schedule, accounting or legal recordkeeping purposes, and any other use before publishing: [ADD ACTUAL RETENTION PERIODS AND ANY OTHER PURPOSES]. This starter site does not subscribe customers to marketing messages.
5. Your privacy choices and requests
To ask about, correct, or request deletion of information, contact [ADD PRIVACY OR CUSTOMER SUPPORT EMAIL]. Add the rights available to customers, response process, and any applicable privacy authority contact after reviewing local requirements: [ADD APPLICABLE PRIVACY RIGHTS AND REQUEST PROCESS]. Some payment or accounting records may need to be retained when required by law.
6. Security and children
Checkout uses a server-side Worker to keep Razorpay secret credentials out of the website's public code. No internet transmission or storage is entirely risk-free. Add the shop's contact and response steps for a suspected privacy incident: [ADD PRIVACY INCIDENT CONTACT OR PROCESS].
7. Updates and contact
We will update this page if the shop's practices change. Effective date: [ADD EFFECTIVE DATE]. Privacy questions: [ADD PRIVACY OR CUSTOMER SUPPORT EMAIL AND POSTAL ADDRESS].