Privacy Policy

Information you provide

When you create an account or place an order, we collect your name, email address, phone number, delivery address, and payment details. Payment card data is handled securely by our payment processor and is never stored on our servers.

Information collected automatically

We collect device information (browser type, operating system, IP address), usage data (pages visited, links clicked, time spent), and location data when you grant permission — used solely to show nearby restaurants and estimate delivery times.

Information from third parties

If you choose to sign in with Google, we receive your name, email address, and profile picture as permitted by your Google account settings.

We use your information to: process and deliver your orders; send order confirmations, receipts, and delivery updates; improve our platform and personalise your experience; respond to your support requests; send promotional offers (you can opt out any time); detect and prevent fraud; and comply with applicable legal obligations.

We share your information only as necessary to operate the platform:

Restaurants

Your name, delivery address, and order details are shared with the restaurant preparing your order.

Delivery partners

Your name, delivery address, and phone number (masked where possible) are shared with the delivery partner assigned to your order.

Service providers

We work with third-party service providers for payments, analytics, and customer support. These providers are contractually obligated to protect your data and may not use it for their own purposes.

Legal requirements

We may disclose your information if required by law, court order, or government authority.

We retain your personal data for as long as your account is active or as needed to provide services. You may request deletion of your account and associated data at any time by contacting us. We may retain certain information for up to 7 years for legal, tax, or fraud-prevention purposes.

We use industry-standard encryption (TLS) for data in transit and encrypt sensitive data at rest. Access to personal data is limited to authorised personnel. While we take security seriously, no method of transmission over the Internet is 100% secure — we cannot guarantee absolute security.

You have the right to: access the personal data we hold about you; correct inaccurate data; request deletion of your data; opt out of marketing communications; and lodge a complaint with the relevant data protection authority. To exercise any of these rights, contact us at privacy@sriishacafe.com.

We use cookies and similar technologies to keep you signed in, remember your preferences, and understand how our platform is used. You can control cookies through your browser settings. Disabling certain cookies may affect the functionality of our platform.

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a prominent notice on our platform at least 7 days before the change takes effect. Continued use of our services after the effective date constitutes acceptance of the updated policy.

If you have questions or concerns about this Privacy Policy, please contact our Data Protection Officer at privacy@sriishacafe.com or write to us at: Sri Isha Cafe, Customer Support, Tamil Nadu, India.