This policy explains what personal data Sri Foods (Sri Foods, "we") collects when you order online, why, and your rights. We follow the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000 and its rules. We are the "data fiduciary" for your order data.
1. What we collect
- Your name and mobile number, entered at checkout (or your WhatsApp number when you order through WhatsApp).
- Your order: items, amounts, order type (dine-in / takeaway), pickup time, any note you write, token and bill number.
- Your WhatsApp choice: whether you agreed to order updates on WhatsApp, or replied STOP, with the date and time.
- Payment status and reference from the payment gateway. We do not receive your UPI PIN, card number or bank login.
- Basic technical data (such as IP address and browser type) in server logs, used only for security and fixing errors.
2. Why we use it
- To take, prepare and hand over your order, and to call your name or token at the counter.
- To issue your bill and keep the accounts and tax records the law requires (GST, income tax).
- To send order updates on WhatsApp, only if you agreed.
- To handle refunds, complaints and questions, and to prevent fraud or misuse.
We use your data only for these purposes. We do not sell it, and we do not use it for advertising or profiling.
3. Consent
By placing an order you consent to us using the data above to fulfil it. WhatsApp updates are separate and optional: you can untick the box at checkout, or reply STOP on WhatsApp at any time. Withdrawing consent does not affect orders already placed.
4. Who we share it with
- Payment gateways (such as PhonePe Payment Gateway or Razorpay) to process your payment.
- WhatsApp (Meta), only if you agreed to order updates.
- Our technology providers that host the website and database for us (for example Supabase and Vercel), who may only use the data on our instructions.
- Government authorities, only when the law requires it.
5. How we protect it
Data travels over encrypted connections (HTTPS) and is stored on secure cloud servers. Only our staff who need it can see order details, every login is personal, and sensitive keys are stored encrypted. Staff actions on bills and settings are logged.
6. How long we keep it
- Orders and bills: for as long as Indian tax and accounting laws require (currently up to 8 years).
- Your contact details for WhatsApp updates: until you withdraw consent; after that we stop messaging you.
- Server logs: a short period, for security only.
7. Your rights
You can ask us to:
- tell you what personal data we hold about you and how we use it;
- correct or update it;
- delete it, except records we must keep by law (such as bills);
- stop WhatsApp messages (reply STOP), or withdraw consent;
- resolve a complaint, and nominate someone to exercise these rights for you if you are unable to.
Contact the grievance officer below; we reply within 30 days. If you are not satisfied, you may complain to the Data Protection Board of India.
8. Children
If you are under 18, please order with the permission of a parent or guardian. We do not track, profile or target ads at anyone.
9. Cookies and browser storage
We use only what the website needs to work: your cart is saved in your own browser, and staff logins use a login cookie. We do not use advertising or tracking cookies.
10. Changes
We may update this policy; the date below shows the latest version.
11. Contact and grievance officer
Grievance officer: BHASKAR I K, Sri Foods, E & F blocks, LADIES HOSTEL, VIT UNIVERSITY, VELLORE. Phone: 6362391822. Email: hello@zestofoodclub.com.
We acknowledge every complaint within 48 hours and resolve it within one month of receiving it.
Last updated: 11 October 2026