Privacy Policy
Last updated: 16 October 2026 · Operated by Jabbergurus Pvt Ltd
This policy explains how Jabbergurus Pvt Ltd ("we", the "Data Fiduciary") processes your personal data when you use this website, in line with the Digital Personal Data Protection Act, 2023 (DPDP Act) and the Information Technology Act, 2000.
1. Data we collect
- Identity and contact: name, phone number, email.
- Delivery: addresses, landmark, pincode.
- Orders: items, notes (e.g. spice level), dietary preferences, order history.
- Payments: transaction ID and status from our payment partner. We never see or store your full card, UPI PIN or net-banking credentials.
- Technical: device, browser and basic usage logs for security.
2. Purpose and consent
We process your data only to create your account, take and deliver orders, process payments and refunds, provide support, meet legal and tax duties (GST, FSSAI), and prevent fraud. Marketing messages are sent only if you opt in, and you can withdraw consent at any time from your account or by writing to us; withdrawal does not affect processing already done.
3. Sharing
We share only what is needed with: our payment gateway (e.g. Razorpay) to process payments; delivery staff and courier partners (name, phone, address) to deliver; marketplace or quick-commerce partners only for orders placed through them; cloud hosting providers acting as our processors; and authorities when required by law. We never sell your personal data.
4. Retention
We keep order and invoice records for 8 years as required by tax law, and other data only while your account is active or as needed for the purposes above. You may ask us to delete your account at any time.
5. Your rights
Under the DPDP Act you may: access a summary of your data; correct or update it; request erasure; withdraw consent; nominate another person to exercise your rights; and raise a grievance. Write to our Grievance Officer at grievance@example.com. If unsatisfied, you may complain to the Data Protection Board of India.
6. Security
Data is encrypted in transit, access is limited by role (kitchen staff cannot see addresses or payments; delivery staff see only their assigned orders), and payments are handled by a PCI-DSS compliant gateway.
7. Children
This service is meant for users aged 18 or above. We do not knowingly process children's data without verifiable parental consent.
8. Cookies
We use essential browser storage to keep you signed in and remember your cart. We do not use third-party advertising cookies.
9. Changes & contact
Questions? Write to hello@example.com, call +91 00000 00000, or see our Contact page.