Privacy Policy

This Privacy Policy explains how FOOD-66, a sole proprietorship of Himanshu Singh Chauhan (“Biryani66”, “we”, “us”) collects, uses, discloses, and safeguards your personal data when you use our website and ordering services. We process personal data in accordance with India’s Digital Personal Data Protection Act, 2023 (the “DPDP Act”).

1. Data we collect

• Account data: name, email address, phone number, and password (stored only as a salted hash).
• Order data: delivery address, city, pincode, contact phone, items ordered, and order history.
• Payment data: processed entirely by our payment partner Razorpay. We never receive or store your card, UPI, or bank credentials — only a payment reference and status.
• Technical data: functional cookies required to keep you signed in and to remember your selected outlet.

2. Why we use your data (purposes)

• To create and manage your account and authenticate you.
• To process, deliver, and provide support for your orders and table bookings.
• To process payments and issue refunds through Razorpay.
• To meet legal, tax, and accounting obligations.

We do not use your data for advertising or sell it to third parties.

3. Cookies

We use only strictly necessary, functional cookies: a session cookie to keep you signed in and a cookie to remember your chosen outlet. We do not use advertising or third-party analytics cookies, so no consent banner is required for the cookies in use today.

4. Sharing & processors

We share the minimum data necessary with service providers acting on our instructions: Razorpay (payments), our cloud hosting and database provider, and our email provider for transactional messages. These providers are bound to use the data only to provide their service.

5. Data retention

We keep account data for as long as your account is active. Order records are retained for the period required by applicable tax and accounting law, after which personally identifying delivery details are anonymised. You may request deletion at any time (see your rights below).

6. Your rights under the DPDP Act

• Access: request a copy of the personal data we hold about you.
• Correction: update inaccurate or incomplete data from your account.
• Erasure: request deletion of your account and personal data, subject to legal retention requirements.
• Withdraw consent: withdraw consent where processing relies on it.
• Grievance redressal: raise a complaint with our Grievance Officer.

To exercise these rights, email biryani66.com@gmail.com or use the data tools in your account settings.

7. Security

We protect your data with encryption in transit (HTTPS), hashed passwords, role-based access controls, and rate limiting. No method of transmission or storage is completely secure, but we work to protect your data using industry-standard measures.

8. Grievance Officer

As required by the DPDP Act, our Grievance Officer is:
Himanshu Singh Chauhan (Proprietor)
Email: biryani66.com@gmail.com
Address: Basement & Ground Floor, 663-FOOD-66, Vindhya Nagar Bulldozer Road, near Agrawal Sweets, Vindhya Nagar, Singrauli, Madhya Pradesh 486661

9. Changes to this policy

We may update this policy from time to time. Material changes will be reflected by the “Last updated” date above.