Privacy Policy

1. Who We Are

Delight Pizza (“we”, “us”, “our”) is a local restaurant in Panchkula, Haryana. This Privacy Policy explains how we handle personal information you provide via our website. It is governed by the Digital Personal Data Protection Act, 2023 (DPDP Act), the Information Technology Act, 2000, and the IT (SPDI) Rules, 2011.

2. Data We Collect

A. Table Booking Form (Voluntarily Provided)

• Full Name — to identify your reservation
• Phone Number — to send a WhatsApp booking confirmation
• Preferred Date & Time — to schedule your table
• Number of Guests — for seating arrangement
• Occasion (optional) — e.g. Birthday, Anniversary
• Special Requests / Notes (optional) — dietary or setup requirements

B. Online Orders

When you place a direct WhatsApp order, the items and total amount are saved in our database for kitchen tracking. No payment details are collected by us.

C. What We Do NOT Collect

• ❌ Credit/Debit card or UPI details
• ❌ Email address, Aadhaar, or PAN number
• ❌ Browsing history or behavioural tracking data
• ❌ Social media profiles or account data

3. Geolocation (Location Access)

When you tap “Order Now”, your browser requests permission to access your GPS. This is used only to check if you are within our 4 km delivery radius.

You may deny location access at any time. If denied, you can order via Zomato or Swiggy instead.

4. Why We Collect Your Data

• Table Booking Confirmation: To confirm your reservation via WhatsApp and notify you of any changes.
• Order Tracking: To allow our kitchen team to accurately prepare and deliver your order.
• Customer Communication: To contact you only about your specific booking or order, only when initiated by you.

We do not use your data for marketing, advertising, or profiling without your explicit additional consent.

5. Where Your Data Is Stored

Your booking information is stored securely on a cloud database service operated by Google LLC, which complies with ISO 27001, SOC 1, SOC 2, and SOC 3 international security standards. Data may be stored on Google's servers outside India. Access is strictly restricted to authorised restaurant personnel only, protected by secure authentication.

For Google LLC's privacy and security practices, visit: policies.google.com/privacy

6. How Long We Keep Your Data

• Table Booking records: Maximum 90 days from booking date, then permanently deleted.
• Order records: Maximum 30 days for order history, then permanently deleted.
• Location data: Never stored — discarded immediately after the delivery range check.

You may request early deletion at any time by contacting us (see Section 14).

7. Data Sharing and Disclosure

We do not sell, rent, or trade your personal information to any third party. Your data may be shared only in these limited circumstances:

• Google LLC: As our cloud infrastructure and database provider, acting as a data processor under our instructions and bound by Google's data processing terms.
• WhatsApp (Meta Platforms, Inc.): Used to contact you for booking confirmations. Subject to WhatsApp's own privacy policy.
• Legal Requirements: If required by Indian law, a court order, or a valid government authority. We will notify you unless legally prohibited.

8. Your Rights Under the DPDP Act, 2023

• Right to Access: Request a summary of personal data we hold about you.
• Right to Correction: Request correction of inaccurate or incomplete data.
• Right to Erasure: Request deletion of your personal data from our systems.
• Right to Withdraw Consent: Withdraw consent at any time without affecting prior processing.
• Right to Grievance Redressal: Lodge a complaint with our Grievance Officer (Section 13).
• Right to Nominate: Nominate another individual to exercise these rights on your behalf.

We will respond to your request within 30 days.

9. Cookies & Tracking Technologies

Our website uses only essential technical cookies required for the website to function. We do not use advertising cookies, third-party tracking scripts (e.g. Google Analytics, Facebook Pixel), or behavioural profiling cookies. Your cart data is stored temporarily in your browser's memory only and is cleared when you close the tab.

10. Data Security

• All data in transit is encrypted via HTTPS / TLS encryption.
• Database access is protected by strict server-side access control rules that prevent any unauthorised public read or write access.
• Admin access is secured via multi-layer authentication and is restricted solely to authorised restaurant personnel.
• Our website is delivered through a secure global content delivery network (CDN) with built-in DDoS protection and automatic threat mitigation.
• All sensitive configurations and credentials are stored as encrypted server-side environment variables and are never exposed in publicly accessible code.

11. Children's Privacy

Our website is not directed at children under 18. We do not knowingly collect data from minors. If you believe a minor has submitted data to us, contact us immediately and we will delete it promptly.

12. Changes to This Privacy Policy

We may update this Policy to reflect changes in our practices or applicable law. The “Last updated” date at the top reflects the latest revision. Continued use of the website after an update constitutes acceptance of the revised policy.

13. Grievance Officer

In accordance with the Information Technology Act, 2000, IT (SPDI) Rules, 2011, and the DPDP Act, 2023, the following person is designated as Grievance Officer:

14. Contact Us