Privacy Policy

The Bihari Taste ("we", "our" or "us") respects your privacy. This policy explains what personal data we collect through this website and ordering service, why we use it, how it is protected, and how you can contact us about it.

1. Personal data we collect

• Account details: name, phone number and/or email address, password credentials (stored as a secure password hash), and date of birth for the 18+ account eligibility rule.
• Order details: selected outlet, items, delivery/pickup details, order notes, order history and payment status. Card/UPI credentials are handled by the relevant payment provider and are not intended to be stored by us.
• Technical and security data: IP address, session/security logs, timestamps and basic device/browser information where generated by the website.

2. Why we use it

We use personal data to create and secure customer accounts, verify the declared 18+ eligibility, accept and fulfil orders, communicate about orders, process/refund payments through configured providers, provide customer support, prevent fraud and misuse, maintain business records, and meet applicable legal obligations. We do not use account data for unrelated purposes without giving an appropriate notice and obtaining consent where required.

3. Sharing

We may share only the information needed with the selected franchise/outlet and its authorised staff to prepare and deliver your order, and with service providers such as hosting, messaging and payment providers where configured. We may disclose information when required by law. We do not sell personal data.

4. Retention and security

We retain information only for as long as reasonably necessary for the purposes above, legal/accounting requirements, dispute handling and security. We use access controls, password hashing, session protections and other reasonable safeguards. No internet service can guarantee absolute security. If a personal data breach occurs, we will take appropriate steps and provide notices as required by applicable law.

5. Your choices and rights

You may request access to, correction or erasure of your personal data, withdraw consent where processing is based on consent, raise a grievance, and exercise other rights available under applicable law. Some records may need to be retained where required by law or for legitimate dispute/accounting purposes. You can contact us using the details below. We will respond within the period required by applicable law.

6. Adults only

Customer accounts on this website are intended only for individuals who have completed 18 years of age. We ask for date of birth and an age confirmation during registration. The current website flow relies on the information declared by the registrant and is not an independent identity-document age verification service. Do not create an account if you are under 18.

7. Cookies and sessions

We use essential session cookies for sign-in, security and cart functionality. Disabling cookies may prevent parts of the service from working.

8. Changes to this policy

We may update this policy when our service or legal requirements change. The current version and update date will be shown on this page. Where required, we will seek fresh consent for material changes.

9. Contact and grievance requests

For privacy questions, data requests or complaints, contact the website operator through the official contact details published on the website or the relevant outlet. Before launch, the business owner must replace this instruction with a monitored privacy/grievance email address and postal contact details in the website configuration and this page.

Important: This is a practical website privacy notice template, not a legal opinion or a certification of DPDP compliance. The operator should have the final notice, retention schedule, vendor contracts, security controls and grievance contact reviewed by an India-qualified privacy lawyer before production launch.