PRIVACY POLICY

1 Purpose and Scope

Nanighar respects your privacy and is committed to processing personal data fairly, transparently and securely.

This Privacy Policy explains how Nanighar collects, uses, shares, stores and protects personal data when you:

• visit the website;

• use the Nanighar application;

• create an account;

• place or receive an order;

• contact customer support;

• participate in a promotion;

• register as a Food Partner, Mom Chef or Home Chef; or

• otherwise interact with Nanighar.

2 Data Fiduciary

For the purposes of applicable Indian data-protection law, the data fiduciary responsible for the processing described in this Policy is:

[Full Legal Entity Name]
Registered Address: [Registered Office Address]
Privacy Contact: [Privacy Email]
Grievance Officer: [Name and Email]

3 Personal Data We Collect

Depending on how you use Nanighar, we may collect:

A. Identity and contact information

• name;

• mobile number;

• email address;

• account identifier;

• profile photograph;

• date of birth, where genuinely required; and

• preferred language.

B. Delivery and location information

• delivery address;

• landmark;

• postal code;

• approximate or precise device location, with permission;

• delivery instructions; and

• saved addresses.

C. Order and transaction information

• selected dishes and Food Partners;

• order history;

• meal subscriptions;

• delivery status;

• amount paid;

• invoices;

• refund and cancellation history;

• coupons and credits; and

• transaction reference numbers.

Nanighar generally does not store complete card details, CVV numbers, UPI PINs or banking passwords. These are processed by authorised payment providers.

D. Dietary and preference information

Where voluntarily provided, we may process:

• vegetarian or non-vegetarian preferences;

• allergies;

• ingredient restrictions;

• religious or lifestyle dietary preferences;

• meal-plan preferences; and

• health-related dietary instructions.

Please provide health information only where necessary for fulfilling the requested meal or service.

E. Device and technical information

• IP address;

• browser and device type;

• operating system;

• app version;

• device identifiers;

• login information;

• usage activity;

• crash reports;

• cookie identifiers; and

• security and fraud-detection information.

F. Communications

We may collect emails, chat messages, call records, complaint details, ratings, reviews, photographs and other communications exchanged with Nanighar, a Food Partner or a delivery partner through the Platform.

Calls may be recorded for quality, training, security and complaint-resolution purposes after providing appropriate notice.

G. Food Partner information

For Mom Chefs, Home Chefs and other Food Partners, we may collect:

• identity and contact details;

• address;

• PAN or tax information;

• government-issued identification;

• bank-account information;

• FSSAI registration or licence information;

• kitchen and food-business information;

• menu, pricing and availability;

• photographs and videos;

• order-performance records; and

• information required for onboarding, verification and payment settlement.

4 Sources of Personal Data

We may receive personal data:

• directly from you;

• from Food Partners;

• from delivery partners;

• from payment gateways;

• from customer-support providers;

• from social-login services;

• from advertising or analytics partners;

• from referral programmes; and

• from publicly available or legally authorised sources.

5 How We Use Personal Data

Nanighar may process personal data to:

1. create and manage your account;

2. verify your mobile number or identity;

3. receive, confirm, prepare and deliver orders;

4. share necessary order information with Food Partners and delivery partners;

5. process payments, refunds and settlements;

6. provide dietary customisation requested by you;

7. communicate order and account updates;

8. respond to complaints and customer-support requests;

9. prevent fraud, abuse, unauthorised access and security threats;

10. maintain and improve the Platform;

11. analyse service performance and customer preferences;

12. personalise recommendations and offers;

13. send marketing communications where permitted;

14. administer promotions, referrals and loyalty benefits;

15. onboard and manage Food Partners;

16. maintain accounting, tax and business records;

17. comply with legal, regulatory and law-enforcement obligations; and

18. establish, exercise or defend legal claims.

Nanighar will process personal data on the basis of your consent, your request for a product or service, permitted legitimate uses under applicable law, compliance with legal obligations or another lawful basis.

6 Consent and Withdrawal

Where processing is based on consent, Nanighar will seek consent through a clear notice describing the personal data and purpose of processing.

You may withdraw consent through your account settings or by contacting Nanighar. Withdrawal will not affect processing already lawfully completed.

Some services may become unavailable where the withdrawn information is necessary to provide the requested service, complete a transaction, prevent fraud or comply with law.

7 Sharing of Personal Data

Nanighar may share relevant personal data with:

A. Food Partners

Food Partners may receive your name, order details, dietary instructions and limited contact or delivery information necessary to prepare and fulfil the order.

B. Delivery partners

Delivery partners may receive your name, contact number, delivery address, location, order reference and delivery instructions.

C. Payment and financial-service providers

Payment gateways, banks and refund providers may process transaction information for payment authorisation, settlement, refunds and fraud prevention.

D. Service providers

We may engage service providers for:

• hosting and cloud storage;

• customer support;

• messaging and communications;

• analytics;

• cybersecurity;

• accounting;

• marketing;

• order management; and

• technical maintenance.

These providers may process personal data only for authorised purposes and subject to appropriate contractual and security requirements.

E. Professional advisers and authorities

Information may be shared with auditors, accountants, insurers, lawyers, courts, law-enforcement agencies, FSSAI, tax authorities, consumer authorities or other regulators where reasonably necessary or legally required.

F. Business transactions

Personal data may be transferred in connection with a merger, restructuring, financing, acquisition or transfer of business, subject to confidentiality, notice and applicable law.

Nanighar does not sell or rent personal data to third parties for their independent monetary gain.

8 Cookies and Similar Technologies

Nanighar may use cookies, pixels, SDKs and similar technologies to:

• keep users signed in;

• remember preferences;

• maintain shopping carts;

• measure Platform performance;

• understand user interactions;

• prevent fraud; and

• deliver or measure advertising.

You may control non-essential cookies through the cookie-preference tool, where available, or through browser settings. Disabling essential cookies may affect Platform functionality.

9 Marketing Communications

Nanighar may use your contact information to send offers, menu updates and promotional communications where permitted by law.

You may opt out by:

• selecting the unsubscribe option;

• changing communication preferences;

• replying with the relevant opt-out instruction; or

• contacting customer support.

Nanighar may continue sending essential order, security, payment and policy communications.

10 Data Retention

Nanighar retains personal data only for as long as necessary for the stated purpose or as required by applicable law.

Retention periods may depend on:

• whether your account remains active;

• transaction, tax and accounting requirements;

• food-safety or consumer complaints;

• fraud-prevention needs;

• limitation periods for legal claims;

• pending disputes;

• regulatory directions; and

• consent or statutory requirements.

When personal data is no longer required, it will be securely deleted, anonymised or made inaccessible, subject to legally permitted retention.

Deletion of an account does not automatically require deletion of invoices, transaction records, complaint records or information that Nanighar must retain under law.

 Security Safeguards

Nanighar uses reasonable technical and organisational safeguards designed to protect personal data, including, where appropriate:

• access controls;

• authentication mechanisms;

• encryption in transit or at rest;

• secure hosting;

• activity monitoring;

• backups;

• employee confidentiality obligations;

• vendor-security requirements; and

• incident-response procedures.

No internet-based system is completely risk-free. Users must protect their passwords, OTPs and devices and promptly report suspected unauthorised access.

12 Personal-Data Breach

Where a personal-data breach occurs, Nanighar will take reasonable steps to contain and assess the incident.

Nanighar will notify affected users and relevant authorities where required under applicable law, including available information about the nature of the breach, possible consequences and recommended protective measures.

13 Your Rights

Subject to applicable law and verification, you may request:

• confirmation and a summary of personal data being processed;

• correction of inaccurate or misleading personal data;

• completion or updating of incomplete data;

• erasure of personal data that is no longer required;

• withdrawal of consent;

• access to grievance-redressal mechanisms;

• deletion of your Nanighar account;

• nomination of another person to exercise applicable rights in the event of death or incapacity; and

• information about categories of entities with which personal data has been shared, where applicable.

Requests may be submitted through the Platform or to [Privacy Email].

Nanighar may request reasonable information to verify your identity. A request may be restricted where disclosure would adversely affect another person’s rights, compromise security or fraud prevention, or conflict with a legal obligation.

14 User Responsibilities

You should:

• provide accurate information;

• avoid submitting another person’s data without authority;

• not impersonate another person;

• protect your login credentials;

• use grievance rights responsibly; and

• avoid making false or frivolous data requests.

15 Children’s Privacy

Nanighar’s account and ordering services are intended for adults.

Nanighar does not knowingly permit a person under 18 years of age to independently create an account or provide consent for processing personal data.

Where services are ordered for a child, the account must be operated by the child’s parent or lawful guardian.

If Nanighar learns that a child’s personal data was collected without appropriate authorisation, reasonable steps will be taken to delete or restrict it.

16 Cross-Border Processing

Certain technology or cloud-service providers may process or store information outside India.

Any cross-border processing will be undertaken subject to applicable Indian law, contractual safeguards and any restrictions notified by the Government of India.

17 External Links

The Platform may contain links to third-party websites or applications. Nanighar is not responsible for the privacy practices of third parties operating independently of Nanighar.

Users should review the privacy policy of the relevant third party before submitting personal information.

18 Privacy Grievances

For privacy questions or requests, contact:

Privacy Contact: [Privacy Email]
Grievance Officer: [Name]
Email: [Grievance Officer Email]
Address: [Postal Address]

Nanighar will acknowledge the grievance within the period prescribed by applicable law and make reasonable efforts to resolve it promptly.

19 Changes to this Privacy Policy

Nanighar may update this Privacy Policy to reflect changes in processing practices, technology or applicable law.

Material changes will be communicated through the Platform, email, SMS or another appropriate channel. The effective date will be displayed at the top.