Malt Catering ("we", "us", or "our") is a food catering service operated from Thiruvananthapuram, Kerala, India. This Privacy Policy explains how we collect, use, store, and protect information about you when you use our website and mobile-friendly ordering platform (the "Service").
By creating an account or placing an order, you agree to the practices described in this policy. If you do not agree, please do not use the Service.
1. Information We Collect
Information you provide directly:
- Full name, phone number, and email address (used for account creation and communication)
- Delivery address, including house number, building name, street, locality, city, state, and PIN code
- Meal preferences (vegetarian or non-vegetarian) recorded at the time of ordering
- Payment reference numbers, transaction mode, and payment dates that you or our staff enter manually
- Any notes or special instructions you attach to an order
Information collected automatically:
- IP address and browser user-agent string (stored with each login session for security purposes)
- Session cookies required for you to remain signed in
- Date and time of orders, status changes, and account activity
Information collected via third-party sign-in:
- If you sign in with Google, we receive your name and email address from Google OAuth. We do not receive or store your Google password.
2. How We Use Your Information
- To create and manage your account
- To process and deliver your meal orders
- To assign delivery personnel and track container logistics
- To send order confirmations, delivery updates, and service announcements via SMS or phone
- To generate invoices and maintain billing records
- To detect and prevent fraudulent or unauthorised activity
- To comply with applicable Indian laws and regulations
3. How We Share Your Information
We share your information only in the following limited circumstances:
- Delivery executives: Your name, phone number, and delivery address are shared with our delivery personnel solely for the purpose of completing your order.
- Payment processors: If a payment gateway is integrated in the future, transaction data will be shared with the gateway provider. We will update this policy before any such integration goes live.
- Legal obligations: We may disclose your information to law-enforcement agencies, courts, or government authorities in Thiruvananthapuram or elsewhere in India if required by law or a valid legal order.
- Business continuity: In the event of a merger, acquisition, or transfer of business operations, your information may be transferred to the successor entity, subject to the same privacy obligations.
4. Data Retention
We retain your personal information for as long as your account is active or as needed to provide the Service. Order records, invoices, and payment references are retained for a minimum of seven (7) years to comply with Indian accounting and tax laws. You may request deletion of your account at any time; however, legally mandated records will be retained for the required period even after account closure.
5. Cookies and Session Data
We use a single, encrypted, HTTP-only session cookie to keep you signed in. This cookie does not track your activity across other websites. No third-party advertising or analytics cookies are placed by us.
Disabling cookies in your browser will prevent you from logging into the Service.
6. Security
We implement reasonable technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include encrypted session tokens, HTTPS-enforced connections, and role-based access controls limiting which staff can see sensitive information.
No method of transmission over the internet is completely secure. While we strive to protect your data, we cannot guarantee absolute security.
7. Your Rights
Under the Information Technology Act, 2000, and the Digital Personal Data Protection Act, 2023 (once notified), you have the right to:
- Access the personal information we hold about you
- Correct inaccurate or incomplete information via your account profile
- Request deletion of your account and associated personal data (subject to legal retention requirements)
- Withdraw consent for processing where consent is the legal basis
To exercise any of these rights, contact us at the details in Section 9. We will respond within a reasonable time, and no later than thirty (30) days.
8. Children's Privacy
The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal data, please contact us immediately and we will take steps to delete it.
9. Contact Us
For any questions, concerns, or requests relating to this Privacy Policy or your personal data, please contact:
Thiruvananthapuram, Kerala, India
Email: contact@maltcatering.com
10. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. Continued use of the Service after such changes constitutes your acceptance of the revised policy. We encourage you to review this page periodically.