Last updated: 23 September 2026
This Privacy Policy explains how M/S LOLLYWAY (“Lollyway”, “we”, “us”) collects, uses, shares and protects personal data when you use lollyway.com, place orders, create or use an account, request delivery, contact support, or submit reviews.
1. Contact
Business: M/S LOLLYWAY
Location: Bongaigaon, Assam 783380, India
Email: lollyway@lollyway.com
Website: https://lollyway.com
2. Personal data we collect
- Identity and contact data: name, email address and phone number.
- Order and transaction data: items ordered, order value, outlet, delivery/pickup choice, order status, payment method and transaction references. We do not intentionally store full payment-card credentials handled by payment providers.
- Delivery data: delivery address, postal code and, when you choose location-based delivery features, the map/GPS coordinates or delivery pin you provide.
- Account and authentication data: customer account identifiers, email magic-link activity, Google sign-in identifiers where you choose Google login, and security/session information.
- Support and review data: messages, complaints, feedback, product/order ratings and reviews.
- Technical data: IP address, browser/device information, cookies, logs and security events needed to operate and protect the website.
3. Why we use personal data
We use personal data to process and fulfil orders; select or route orders to the appropriate outlet; deliver orders and enable drivers to contact or navigate to customers; create and secure customer accounts; send order, delivery, authentication and service communications; provide customer support; process reviews; prevent fraud and abuse; maintain website security; improve operations; and meet accounting, tax, consumer-protection and other legal obligations.
4. Consent and permitted processing
Where consent is required, we ask for it in a clear manner and use data for the stated purpose. You may withdraw consent for optional processing by contacting us, although withdrawal does not affect processing already lawfully carried out or processing needed to complete an existing transaction or comply with law. We may also process personal data where otherwise permitted by applicable Indian law.
5. Location data
Location access is optional unless it is necessary to confirm a deliverable address for a delivery order. If you allow browser/device location access, we use the coordinates to determine serviceability, select the appropriate outlet, calculate delivery information and create navigation for fulfilment. You can deny browser location permission and use other available address-entry options where supported.
6. Who we share data with
We share only the data reasonably necessary with Lollyway outlets, authorized staff and delivery drivers, and with service providers that support hosting, website operations, email, authentication, maps/location, SMS/OTP, payment processing, analytics/security and customer communications. We may also disclose information when required by law, lawful process, regulators, courts, or to protect rights, safety and security. We do not sell personal data to advertisers.
7. Google sign-in and email magic links
If you choose Google sign-in, Google authenticates you and provides the basic account information authorized on the consent screen, such as your name/email and account identifier. Lollyway does not receive your Google password. If you use email magic-link login, we send a time-limited link to the email address associated with the customer account.
8. Cookies and similar technologies
We use cookies and similar technologies that are necessary for shopping carts, sessions, account login, outlet selection, security and site functionality. Additional analytics or marketing technologies, if introduced, will be handled in accordance with applicable consent requirements.
9. Data retention
We retain personal data only for as long as reasonably needed for the purposes described above, including order history, customer service, fraud prevention, accounting/tax and legal compliance. When data is no longer required, we delete, anonymize or securely isolate it subject to lawful retention requirements and backup cycles.
10. Security
We use reasonable administrative, technical and organizational safeguards designed to protect personal data, including access controls, authenticated customer login and secure service connections. No online system can be guaranteed completely secure, so customers should also protect access to their email and Google accounts.
11. Your choices and rights
Subject to applicable law, you may request information about your personal data, correction of inaccurate or incomplete data, erasure where applicable, withdrawal of consent for optional processing, and grievance redressal. You may also ask us to update account contact information. Send requests to lollyway@lollyway.com. We may need to verify your identity before acting on a request.
12. Children
The ordering service is intended to be used by persons capable of entering into a valid transaction or under the supervision of a parent or lawful guardian. We do not knowingly seek unnecessary personal data from children.
13. Cross-border processing
Some technology providers may process data on infrastructure located outside India. Where this occurs, we use providers and arrangements intended to support applicable legal requirements and reasonable data protection.
14. Grievances and updates
For privacy questions or grievances, contact lollyway@lollyway.com. We may update this Policy as our services or legal obligations change. The latest version will be posted here with an updated date.