Privacy Policy

1. Information We Collect

Depending on how you interact with us, we may collect:

• your name, mobile number, email address and delivery address;
• order details, transaction history, preferences and feedback;
• payment status and transaction references received from payment providers;
• loyalty programme, rewards and promotional preferences;
• communications with our customer support team;
• device, browser, IP address, cookie and website usage information; and
• any information you voluntarily provide through reservations, catering enquiries, feedback forms, contests or other interactions.

We do not ordinarily store complete debit card, credit card, UPI PIN or banking credentials. Payments are processed by authorised third-party payment service providers.

2. How We Use Your Information

We may process your personal data to:

• accept, prepare, deliver and manage your orders;
• process payments, refunds, cancellations and customer support requests;
• administer reservations, catering enquiries and loyalty benefits;
• communicate order updates and service-related information;
• send offers and marketing communications where you have consented or where otherwise permitted by law;
• personalise and improve our website, menu, services and customer experience;
• prevent fraud, misuse and security incidents;
• maintain business, tax and transaction records; and
• comply with legal, regulatory and contractual obligations.

Where processing is based on consent, you may withdraw your consent at any time. Withdrawal will not affect processing already undertaken lawfully.

3. Sharing of Personal Data

We may share limited personal data with persons who assist us in providing our services, including:

• payment gateways and banks;
• delivery and logistics partners;
• website, point-of-sale, ordering, CRM, loyalty and cloud-service providers;
• customer communication and marketing service providers;
• professional advisers, auditors and insurers; and
• government, regulatory or law-enforcement authorities where required by law.

These parties may process personal data only for the relevant service or lawful purpose. We do not sell or rent your personal data. Orders placed through third-party platforms such as food aggregators are also governed by the privacy policies of those platforms.

4. Cookies and Analytics

Our website may use cookies and similar technologies to maintain website functionality, remember preferences, analyse usage and improve performance. You may restrict cookies through your browser settings; disabling certain cookies may affect website functionality. Where legally required, non-essential cookies will be used only after obtaining your consent.

5. Marketing Communications

We may send offers, updates and promotional messages where you have opted in or where permitted by applicable law. You may opt out at any time by using the unsubscribe facility provided in the communication or by contacting us. You may continue to receive essential communications relating to existing orders, transactions or customer-service requests.

6. Children’s Personal Data

Our website and online ordering services are intended to be used by adults. We do not knowingly create accounts for, or directly market to, children without appropriate parental or guardian involvement. Where personal data of a child is required to be processed, we will obtain verifiable consent from the parent or lawful guardian where required by applicable law.

7. Data Retention

We retain personal data only for as long as reasonably necessary to fulfil the purposes described in this policy, provide services requested by you, maintain transaction, accounting and tax records, resolve disputes and complaints, and comply with legal and regulatory obligations. Personal data that is no longer required will be deleted, anonymised or securely archived, subject to applicable law.

8. Data Security

We use reasonable technical and organisational safeguards to protect personal data against unauthorised access, disclosure, alteration, loss or misuse. However, no website, electronic transmission or storage system can be guaranteed to be completely secure. You should protect your device, passwords and account information and immediately inform us of suspected unauthorised use. Where required by law, we will notify affected individuals and the relevant authority of a personal-data breach.

9. Your Rights

Subject to applicable law, you may request:

• information about the personal data processed by us;
• correction or updating of inaccurate or incomplete personal data;
• erasure of personal data that is no longer required;
• withdrawal of consent;
• redressal of a grievance concerning personal-data processing; and
• nomination of another person to exercise your rights in the event of death or incapacity.

We may request reasonable information to verify your identity before acting on a request.

10. International Processing

Some technology or cloud-service providers may process or store information outside India. Where this occurs, we will take reasonable steps to ensure that the processing is undertaken in accordance with applicable Indian law and any restrictions prescribed by the Government of India.

11. Third-Party Websites

Our website may contain links to third-party websites, payment pages, delivery platforms or social-media services. Their handling of personal data is governed by their own terms and privacy policies. We are not responsible for the privacy practices of independent third parties.

12. Grievance and Privacy Contact

For privacy questions, consent withdrawal, rights requests or grievances, contact the Privacy and Grievance Officer, Fenn & Jacob Associates LLP, Mahabelly Canteen, Ground Floor, Plot No. 05, Kh. No. 264, Westend Marg, Saidulajab, New Delhi – 110030. Email: connect@mahabelly.com · Phone: +91 9017906907. We will acknowledge and address grievances within the period prescribed under applicable law or, where no period is prescribed, within a reasonable time.

13. Changes to This Policy

We may update this Privacy Policy to reflect changes in law, technology or our business practices. The revised policy will be published on this page with an updated effective date. Material changes may also be communicated through other appropriate means.