1. Who we are
[Registered company name] Private Limited ("Foodysh", "we", "us") is the Data Fiduciary for personal data processed through our website and apps, under the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000.
2. Data we collect
- Account details: name, mobile number, email address.
- Delivery details: saved addresses and, with your permission, your device location.
- Order details: what you order, from where, when, and your ratings and reviews.
- Payment details: payment method and transaction status. Card and UPI details are handled by our payment partners, not stored by us.
- Device and usage data: device type, app version, IP address and how you use the app, to keep it secure and working well.
- Messages: what you send to our support team or through the contact form.
3. How we use it
- To take, deliver and support your orders.
- To share the details needed with the restaurant and delivery partner handling your order.
- To process payments, refunds and prevent fraud.
- To send order updates and, if you opt in, offers. You can opt out of marketing at any time.
- To improve our service and show kitchens relevant to your area.
- To meet legal and tax obligations.
5. Location data
With your permission, we use your device location to suggest nearby kitchens and guide your delivery partner. You can turn off location access in your phone settings and enter your address manually instead.
7. How long we keep it
We keep personal data only as long as needed for the purposes above, or as required by law (for example, tax records). When you delete your account, we delete or anonymise your data unless we must keep it for a legal reason.
8. Keeping it safe
We use encryption in transit, access controls and regular reviews to protect your data. No system is perfectly secure, so please keep your OTP and device secure too. If a breach affects you, we will inform you and the Data Protection Board of India as required by law.
9. Your rights
Under the Digital Personal Data Protection Act, 2023 you can:
- Ask for a summary of the personal data we hold about you.
- Correct, complete or update your data.
- Withdraw consent and ask us to erase your data.
- Nominate someone to exercise these rights on your behalf.
- Raise a grievance with us, and then with the Data Protection Board of India.
To use these rights, write to grievance@thepureeats.com.
10. Children
Our services are meant for adults. We do not knowingly collect personal data from children under 18 without verifiable consent from a parent or guardian.
11. Changes to this policy
We may update this policy. The date at the top shows the latest version. For significant changes, we will notify you in the app or by email.
12. Contact and grievances
Grievance Officer: [Grievance Officer name]
Email: grievance@thepureeats.com
Address: [Registered company name] Private Limited, Nashik, Maharashtra, India