1. Who We Are
Rabi Dana Pani ("we") is a restaurant based in Jalandhar, Punjab. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our online ordering service. This policy is prepared in accordance with India's Digital Personal Data Protection (DPDP) Act, 2023.
2. Data We Collect
- Name — provided at checkout for order identification.
- Mobile number — used to confirm your order and send delivery updates via WhatsApp.
- Delivery address — used only to complete your delivery.
- Order history — items ordered, amounts, timestamps, and coupon usage.
- Location / pincode (optional) — entered voluntarily on the delivery-check page to verify we serve your area. We do not store GPS coordinates.
- Usage data — basic server logs (IP address, pages visited) for security and debugging. Not linked to your identity.
3. How We Use Your Data
- To process, prepare, and deliver your order.
- To send order status notifications via WhatsApp (Meta platform).
- To prevent fraud and abuse (rate limiting, duplicate order detection).
- To improve our menu and service (aggregated, anonymised analytics only).
We do not use your data for advertising, sell it to third parties, or use it for any purpose beyond the above.
4. Third Parties We Share Data With
- Our delivery staff — receive your name, phone, and address to complete delivery.
- Meta (WhatsApp Business Cloud API) — your phone number and order summary are transmitted to Meta's servers to send you notifications. Subject to WhatsApp's Privacy Policy.
- Supabase (database hosting) — your order data is stored on Supabase's EU/US servers. Subject to Supabase's Privacy Policy.
- Payment provider (future) — if online payments are added, your payment information will be processed by a PCI-DSS compliant provider. We will not store card details.
5. Data Retention
Order records are retained for 3 years for tax and compliance purposes under Indian law. After that, records are deleted or anonymised. You may request earlier deletion (see §7).
6. Security
We use industry-standard measures: HTTPS/TLS for all data in transit, row-level database access controls, and server-side session authentication. No system is 100% secure; please contact us immediately if you suspect unauthorised access to your data.
7. Your Rights (DPDP Act 2023)
Under India's DPDP Act, you have the right to:
- Access the personal data we hold about you.
- Correct inaccurate data.
- Erasure ("right to be forgotten") of your personal data.
- Withdraw consent for processing (note: this may mean we cannot fulfil orders).
To exercise any of these rights, email rabidanapani@gmail.com with the subject line "Data Request". We will respond within 30 days.
8. Cookies
This site uses only functional cookies: your cart items (stored locally in your browser) and an authentication session cookie for the admin dashboard. We do not use advertising or tracking cookies.
9. Children
Our service is not directed at children under 18. We do not knowingly collect data from minors.
10. Changes to This Policy
We may update this policy from time to time. Material changes will be communicated via WhatsApp if we have your number, and the "Last updated" date above will be revised.
11. Contact
For privacy concerns, contact us at rabidanapani@gmail.com or +91 98515 02700.