Privacy Policy

Effective date: 1 October 2025

Overview

We collect only necessary information to process orders, improve services, and support customers in India. We do not sell personal data.

Data we collect

  • Contact details (name, email, phone)
  • Delivery details (address, pincode)
  • Order history and preferences (veg/non-veg, spice level)
  • Cookies and analytics data

How we use data

  • To fulfill orders and provide support
  • To improve menu and delivery zones
  • To comply with legal obligations

Legal basis and consent (India)

We process personal data as per the Digital Personal Data Protection Act, 2023 (DPDP Act). The primary legal bases are: consent, performance of a contract (order fulfillment), and compliance with legal obligations (tax, KYC where applicable). You may withdraw consent at any time; withdrawal does not affect processing done before withdrawal.

Cookies

We use functional and analytics cookies. You can manage preferences via your browser. See our cookie banner for choices.

  • Essential cookies: required for cart, checkout, and security.
  • Analytics cookies: help us understand visits, popular items, and improve delivery slots.

Analytics

We use privacy-friendly analytics that aggregates usage patterns. Analytics is disabled if you reject cookies via our cookie banner. We do not collect sensitive personal data via analytics.

Data retention

  • Order and invoice data: retained as required by Indian tax and accounting laws.
  • Support conversations: up to 24 months to improve service quality.
  • Analytics data: aggregated and retained for trend analysis; personal identifiers are minimized.

Sharing and processors

We may share necessary data with delivery partners and payment processors to complete your order. We require our processors to implement appropriate security measures and process data only on our instructions.

International transfers

If data is processed outside India (for example, cloud hosting), we apply reasonable security safeguards and contractual protections to ensure equivalent protection as required by applicable laws.

Your rights

  • Access and correction of your personal data
  • Erasure, subject to legal retention requirements
  • Consent withdrawal for non-essential processing
  • Grievance redressal via our contact below

Security

We use industry-standard safeguards including encryption in transit (HTTPS), access controls, and regular reviews of our systems to protect your information.

Children

Our services are intended for individuals aged 18 and above. We do not knowingly collect personal data from children. If you believe a child has provided data, contact us for prompt deletion.

Updates to this policy

We may update this policy to reflect changes in law or our operations. Significant changes will be highlighted on this page with a revised effective date.

Grievance Officer (India)

Grievance Officer, Alphabot Mumbai Pizzeria, Mumbai, Maharashtra, India. To raise concerns under the DPDP Act, please write to the contact below with “DPDP Grievance” in the subject line.

Contact

Email: hello@alphabotmumbai.pro | Phone: +91 22 4897 1234