Privacy Policy

1.About This Policy

Homemade by Manju Raju is a home-based cloud kitchen brand specialising in Godavari and Andhra cuisine, operating from Hyderabad, Telangana, India.

This Privacy Policy explains:

• What personal data we collect from you
• Why and how we collect, use, store, and protect it
• Your rights as a Data Principal under Indian law
• How to exercise those rights or lodge a complaint

By placing an order you acknowledge you have read this Policy and provide your free, specific, informed, unconditional, and unambiguous consent to the collection and processing of your personal data as described herein, in accordance with Section 6 of the DPDP Act, 2023.

2.Identity of the Data Fiduciary

3.Personal Data We Collect

3.1 Data Collected During Order Placement

• Full Name — to identify you and address your order
• Email Address — for order confirmation and receipts
• Phone Number — for order-related communication
• Delivery Address — to dispatch your order correctly

3.2 Data Collected During Payment

Payments are processed through third-party payment gateways. We do not collect, store, or process your credit card number, debit card number, UPI ID, or banking credentials. Payment data is handled entirely by our payment processor under RBI guidelines and PCI-DSS standards.

3.3 Data Collected Automatically

Our website may automatically collect non-personal technical data such as browser type, device type, IP address, and pages visited for analytics purposes. This data is not linked to your personal identity.

4.Purpose of Processing Your Personal Data

We process your personal data strictly for:

• Receiving, confirming, preparing, and fulfilling orders
• Communicating order status and delivery timelines
• Processing payments and issuing receipts
• Facilitating cancellations and processing refunds
• Resolving customer service queries and disputes
• Complying with applicable laws and regulations
• Detecting, preventing, or addressing fraud or security issues

We will not process your data for any purpose beyond those listed above without your explicit consent.

5.Legal Basis for Processing

5.1 Consent

By placing an order you voluntarily provide your personal data and consent to processing for the purposes described in this Policy. You may withdraw consent at any time (see Section 10).

5.2 Legitimate Use

Certain activities — such as retaining order records for accounting or tax compliance — may be carried out on the basis of legitimate use as permitted under the DPDP Act.

6.Orders, Payments, and Cancellations

6.1 Orders

Your personal data is used to prepare, package, and dispatch your order.

6.2 Payments

All payments are processed through secure third-party gateways under RBI oversight. We do not store or have access to your payment credentials. Transactions are secured using SSL/TLS encryption.

6.3 Cancellations and Refunds

Contact us immediately to cancel an order. Refunds are credited to your original payment method within timeframes stipulated by your payment provider.

7.Disclosure and Sharing of Personal Data

We do not sell, rent, trade, or disclose your personal data to any third party for commercial purposes.

Data may be shared only in these limited circumstances:

7.1 Delivery Partners

Name, phone, and address shared with delivery personnel solely to complete your delivery.

7.2 Payment Processors

Order value and transaction reference shared with payment gateway for processing.

7.3 Legal Compliance

Disclosed to authorities if required by applicable law or valid court order.

7.4 Business Continuity

In the event of a merger or acquisition, data may transfer to a successor entity with equivalent data protection obligations.

8.Data Retention and Erasure

• Order records: retained up to 3 years
• Payment transaction references: up to 7 years (as required by Indian tax regulations)
• Customer service correspondence: up to 1 year after resolution

Upon expiry of the retention period or receipt of a valid erasure request, your personal data will be securely deleted or anonymised.

9.Data Security Safeguards

We implement reasonable security practices including:

• SSL/TLS encryption for all data transmitted via our website
• Restricted access — only authorised personnel involved in order fulfillment may access customer data
• Third-party payment processing — no payment credentials stored on our servers
• Regular review of data handling practices

10.Your Rights as a Data Principal

Under Chapter III of the DPDP Act, 2023, you have the following rights:

10.1 Right to Access Information (Section 11)

You may obtain a summary of the personal data we hold about you and the purposes for which it is being processed.

10.2 Right to Correction and Erasure (Section 12)

You may request correction of inaccurate or incomplete personal data, or erasure of data where it is no longer necessary for the stated purpose.

10.3 Right to Withdraw Consent (Section 6)

You may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

10.4 Right to Grievance Redressal (Section 13)

You may raise a grievance with us and expect it to be addressed within 30 days of receipt.

10.5 Right to Nominate (Section 14)

You may nominate another individual to exercise your data rights in the event of your death or incapacity.

10.6 Right to File a Complaint with the Data Protection Board

If you are unsatisfied with our response, you may file a complaint with the Data Protection Board of India.

11.Processing of Children's Data

Our services are intended for adults aged 18 and above. We do not knowingly collect personal data from minors. If we become aware that personal data of a minor has been collected without verified parental consent, we will promptly delete such data.

Please contact us immediately if you believe your child's data has been collected by us.

12.Cookies and Website Tracking

Our website may use cookies to enhance user experience and analyse website traffic. We do not use tracking technologies to build behavioural profiles for advertising purposes.

You may control or disable cookies through your browser settings. Disabling cookies may affect website functionality such as adding items to cart.

13.Grievance Redressal — Contact Us

To exercise your rights, raise a concern, or make a data-related request, please contact us:

14.Changes to This Privacy Policy

We may update this Policy from time to time to reflect changes in our business practices or applicable legal requirements. Material changes will be communicated via email or a prominent notice on our website prior to taking effect.

Continued use of our services after any update constitutes acceptance of the revised Policy.

15.Governing Law and Jurisdiction

This Policy is governed by Indian law, including but not limited to:

• Digital Personal Data Protection Act, 2023
• Information Technology Act, 2000
• Consumer Protection Act, 2019
• Food Safety and Standards Act, 2006

Any dispute arising out of or in connection with this Policy shall be subject to the exclusive jurisdiction of the competent courts in Hyderabad, Telangana, India.