Privacy Policy

Effective Date: 1 August 2026  |  Last Updated: 10 August 2026

1. Who We Are

Atharav Kitchen ("we", "us", "our") is a cloud kitchen operating from 1st Floor, Shastri Nagar, Jain Mandir Road, Near Saroj Apartment, Bank More, Dhanbad, Jharkhand – 826001. We operate the website atharav-kitchen.pages.dev and accept orders via this website, WhatsApp, Zomato, and Swiggy.

For privacy-related questions, contact us at: chotugupta7395@gmail.com or +91 79035 67007.

2. What Information We Collect

When you place an order, we collect:

• Your name and mobile phone number
• Delivery address
• Order items and total bill amount
• Date and time of the order

When you create an account, we also collect:

• Email address (if you sign in with Google)
• Date of birth (optional — for birthday offers only)
• Profile photo (from Google, if you use Google Sign-In)

Automatically collected information:

• Browser type and device type (via Google Analytics)
• Pages visited and time spent (via Google Analytics)
• Approximate city-level location (via Google Analytics — not precise GPS)
• Errors and crashes (via Sentry, anonymised)

3. How We Use Your Information

• To process and deliver your food order
• To send you order status updates via WhatsApp notifications
• To provide you loyalty points and coupon discounts
• To send you promotional offers (only if you opt in)
• To improve our website performance and fix bugs
• To detect and prevent fraud or price manipulation

4. How We Store Your Data

Your data is stored securely in Google Firebase Firestore, a cloud database operated by Google LLC. Data is stored in Google's servers (primarily in the US and/or Asia region). Firebase uses industry-standard encryption for data in transit (TLS) and at rest.

We apply strict Firestore Security Rules to ensure:

• You can only read your own orders and profile
• Your phone number is hidden from delivery riders after delivery
• No one can modify your order price or wallet points beyond set limits

5. Data Sharing

We do not sell your personal data to any third party. We only share data in the following limited cases:

• Delivery riders: Your name, address, and phone number are shared with the assigned delivery rider to complete your order. After delivery is marked, your phone number is hidden from the rider.
• Zomato / Swiggy: If you order via Zomato or Swiggy, their own privacy policies apply. We receive order details from them but not your payment information.
• Google services: We use Firebase (storage, auth), Google Analytics (traffic analysis), and Google Maps (delivery address). Their respective privacy policies apply.
• Legal requirements: We may disclose data if required by Indian law or court order.

6. Cookies & Local Storage

We use browser localStorage (not cookies) to remember:

• Your cart items (so they are not lost on page refresh)
• Your login session (managed by Firebase Authentication)
• Your preference for the chatbot widget (whether you've opened it)

We use Google Analytics cookies to understand how visitors use our website. You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.

7. Your Rights (Under Indian IT Act & DPDP Act 2023)

Under the Digital Personal Data Protection Act 2023 (India), you have the right to:

• Access: Request a copy of the personal data we hold about you
• Correction: Update your name, address, or date of birth from your profile section
• Deletion: Request deletion of your account and associated data
• Grievance: File a complaint if you believe your data is being misused

To exercise any of these rights, contact us at chotugupta7395@gmail.com. We will respond within 30 days.

8. Data Retention

• Order data is retained for 3 years for accounting and dispute resolution purposes
• Customer profiles are retained as long as the account is active
• Deleted accounts: data is removed within 30 days of a verified deletion request
• Google Analytics data is retained for 14 months (Google's default)

9. Children's Privacy

Our service is not directed at children under 13 years of age. We do not knowingly collect personal data from children. If you believe a child has provided us with their data, please contact us immediately.

10. Security

We take reasonable technical and organisational measures to protect your data, including:

• HTTPS (TLS encryption) for all data in transit
• Firebase Authentication for secure login
• Firestore Security Rules to prevent unauthorised access
• Content Security Policy (CSP) headers to prevent XSS attacks
• Error monitoring via Sentry (anonymised)

No system is 100% secure. If you discover a security vulnerability, please report it to us privately at chotugupta7395@gmail.com.

11. Third-Party Links

Our website links to Zomato, Swiggy, Instagram, Facebook, and WhatsApp. These are external services with their own privacy policies. We are not responsible for their data practices.

12. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last Updated" date at the top will reflect any changes. Continued use of our website after changes means you accept the updated policy.

13. Contact Us

For any privacy-related questions or data requests:

• 📧 Email: chotugupta7395@gmail.com
• 📞 Phone: +91 79035 67007
• 📍 Address: 1st Floor, Shastri Nagar, Jain Mandir Road, Near Saroj Apartment, Bank More, Dhanbad, Jharkhand – 826001