Privacy Policy

1. Who we are

This website (bakeexpo.in) is operated by Bakers Association Kerala ("BAK", "we", "us"), the organiser of Bake Expo 2026. We are the data fiduciary responsible for personal data collected through this site under India's Digital Personal Data Protection Act, 2023 ("DPDP Act").

Registered office: Mother Teresa Road, Anjumana, Edapally, Ernakulam, Kerala 682024, India.
Email: keralabakeexpo@gmail.com
Phone: +91 99474 80202

2. The short version

This is a brochure website for a trade exhibition. It has no user accounts, no login, and no forms that submit data to us. We do not run analytics, advertising or tracking software on it, and we set no cookies of our own. If you simply read the site, we do not build any profile of you.

We only receive personal data when you choose to give it to us — by email, by phone, or by submitting the stall reservation form on the floor plan page.

3. What we collect

3.1 Information you give us voluntarily

If you contact us to enquire about a stall, visitor pass, sponsorship, speaking slot or press access, we receive whatever you send us. Typically that is:

• Your name and the name of your business or organisation
• Your email address, phone number, or WhatsApp number
• The stall number and pricing you enquired about
• Anything else you include in your message

On the stall floor plan, selecting one or more stalls and submitting the reservation form sends us the details you enter and reserves those stalls in your name for 4 days. Alongside the fields above, that form asks for:

• Your designation and the fascia name to display on your stall
• Your business address and state
• Your business sector and website, if you have one
• Your GSTIN, if you are GST-registered — this is optional

We use these to hold the stalls, contact you about the booking, and raise your proforma and tax invoices. Your state and GSTIN are used to calculate the GST that applies. We store this in our exhibitor management system for as long as described in section 6. Submitting the form does not create an account or a password for you.

3.2 Information collected automatically

Our hosting provider (Cloudflare) processes standard server and security log data on our behalf, including your IP address, browser user-agent, requested page and timestamp. This is used to serve the site, prevent abuse and diagnose faults. We do not use it to identify individual visitors, and we do not combine it with anything else.

Third-party services embedded in the site — listed in section 6 — receive your IP address and browser information as an unavoidable consequence of your browser loading content from them.

3.3 What we do not collect

• No analytics, heatmaps, session recording or advertising pixels
• No cookies set by this website (see our Cookie Policy)
• No payment or card details — this site processes no payments
• No sensitive personal data, and no data knowingly collected from children

4. Why we use your data, and our legal basis

Purpose	Data used	Basis under the DPDP Act
Responding to your stall, sponsorship or press enquiry	Contact details and message content	Your consent, given by contacting us
Allocating stalls and issuing exhibitor paperwork	Business and contact details	Consent / performance of the exhibitor agreement
Operating, securing and troubleshooting the website	Server and security logs	Legitimate use for providing the service you requested
Meeting tax, accounting and legal obligations	Transaction and correspondence records	Compliance with law

We do not use your data for automated decision-making or profiling, and we will not send you marketing unrelated to Bake Expo without asking you first.

5. Who we share it with

We do not sell your personal data, and we never have. We share it only with:

• Service providers who host or deliver the site and our communications, acting on our instructions (see section 6)
• The Bake Expo organising committee and appointed event contractors — for example stall fabrication or venue operations — strictly where needed to deliver your participation in the event
• Authorities, where we are legally required to disclose information

6. Third-party services on this site

Loading a page causes your browser to request content from these providers, each of which will see your IP address:

Provider	Purpose	Sets cookies?
Cloudflare	Website hosting, CDN and bot protection	Yes — security cookies
Mux	Hosting and playback of the homepage hero video	Yes — player and playback analytics
Google Fonts	Serving the site's typefaces	No — but your IP is logged by Google
Microsoft Azure Blob Storage	Hosting the event photo gallery images	No
Microsoft Azure (SQL & email)	Storing stall reservations and sending confirmation emails	No

Links to Instagram, Facebook, LinkedIn, Google Maps and other external sites are plain links — those services only receive data once you click through, and their own privacy policies then apply.

7. International transfers

Some of the providers above process data on servers outside India. Where that happens, we rely on providers that offer contractual data-protection safeguards, and we transfer data only to territories not restricted by the Government of India under the DPDP Act.

8. How long we keep it

• Enquiries that don't proceed: up to 24 months from last contact, so we can pick up the conversation for the next edition
• Exhibitor and sponsor records: for the duration of the relationship plus the period required by Indian tax and accounting law (currently 8 years)
• Server and security logs: short-term, as retained by our hosting provider

We delete or anonymise personal data once it is no longer needed for these purposes.

9. Your rights

Under the DPDP Act you have the right to:

• Access a summary of the personal data we hold about you and how we process it
• Have inaccurate or incomplete data corrected, updated or completed
• Have your data erased where we no longer need it
• Withdraw consent at any time — this does not affect processing already carried out
• Nominate another person to exercise these rights on your behalf in the event of death or incapacity
• Raise a grievance with us, and escalate to the Data Protection Board of India if unresolved

To exercise any of these, email keralabakeexpo@gmail.com. We will respond within a reasonable period and in any case within the timelines prescribed under the DPDP Act. We may ask you to verify your identity first.

10. Grievance redressal

If you are unhappy with how we have handled your personal data, contact our grievance officer:

Grievance Officer — Bake Expo 2026
Bakers Association Kerala, Mother Teresa Road, Anjumana, Edapally, Ernakulam, Kerala 682024
Email: keralabakeexpo@gmail.com
Phone: +91 99474 80202

If we do not resolve your complaint to your satisfaction, you may complain to the Data Protection Board of India.

11. Security

The site is served over HTTPS and we apply reasonable security safeguards to the data we hold. No method of transmission or storage is completely secure, and we cannot guarantee absolute security — but we will notify you and the Data Protection Board of India of any personal data breach as required by law.

12. Changes to this policy

We may update this policy as the event and the site evolve. The "last updated" date above always reflects the current version. Material changes affecting how we use your data will be highlighted on this page.

13. Contact

Questions about this policy? Email keralabakeexpo@gmail.com or call +91 99474 80202. See also our Terms of Use and Cookie Policy.