Privacy policy

Privacy Policy (India – DPDP Act Compliant)

Effective Date: 01 Sep 2025
Last Updated: 01 Sep 2025

At Vahaka Technologies, we are committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and share your personal data in compliance with the Digital Personal Data Protection Act, 2023 (“DPDP Act”) of India.

By using our website, mobile application, or any of our services (collectively, the “Platform”), you agree to the practices described in this policy.

1. Definitions under DPDP Act

  • Data Principal: You, the individual to whom the personal data relates.
  • Data Fiduciary: Vahaka, which determines the purpose and means of processing your personal data.
  • Consent Manager: If used, a registered platform for managing your consent.
  • Personal Data: Any data about an individual who is identifiable by or in relation to such data.

2. Types of Personal Data We Collect

We may collect the following categories of personal data:

a. Information You Provide
  • Name, phone number, email address
  • Delivery address and location details
  • Payment information (processed securely via payment partners)
  • Account credentials
  • Order details and preferences
  • Feedback or reviews
b. Automatically Collected Information
  • Device and browser information
  • IP address and location data
  • Usage data (e.g., app features used, time spent)
c. Third-Party Data
  • Social login information (Google, Apple, Facebook)
  • Restaurant and delivery partner feedback related to your orders

3. Legal Basis for Processing (DPDP-Compliant)

We process your personal data based on:

  • Your consent
  • Performance of a contract (e.g., fulfilling your food order)
  • Compliance with legal obligations
  • Legitimate interests, such as fraud prevention and service improvement

4. Purposes of Data Use

We use your personal data to:

  • Register and manage your account
  • Process orders and payments
  • Deliver food and services
  • Send transactional and promotional communications
  • Ensure customer service and support
  • Improve our services and platform functionality
  • Comply with legal and regulatory requirements/li>

5. Consent

We seek your free, specific, informed, unconditional, and unambiguous consent where required. You may withdraw your consent at any time by contacting us or using in-app consent settings. Consequences of such withdrawal will be communicated clearly.

6. Data Sharing and Transfers

We may share your personal data with:

  • Restaurants and delivery partners for fulfilling your orders
  • Payment processors
  • Third-party service providers (for IT, analytics, marketing)
  • Law enforcement or government agencies, if required under law
  • Business partners or acquirers in case of a merger, acquisition, or reorganization

Note: We do not sell your personal data.

If data is transferred outside India, it will be done in compliance with cross-border data transfer rules under applicable laws.

7. Your Rights as a Data Principal

As per the DPDP Act, you have the right to:

  • Access personal data
  • Correct and update your data
  • Withdraw consent
  • Erase your data (subject to contractual/legal obligations)
  • Grievance redressal

To exercise these rights, contact us at:
📧 admin@vahaka.app or use the in-app account settings.

8. Grievance Redressal Mechanism

If you have any concerns or complaints regarding the processing of your personal data:

Grievance Officer: Raju Choksi
📧 Email: raju@vahaka.app
📍 Address: LG 23 Indralok Complex, Piplod, Surat 395007
📞 Phone: +91 95104 32963

We will respond within 7 business days, as per the DPDP Act.

9. Data Retention

We retain your personal data for as long as necessary:

  • To provide services
  • To comply with legal requirements
  • For record-keeping, audits, and dispute resolution

Data no longer required will be securely deleted or anonymized.

10. Data Security

We implement reasonable technical and organizational measures to protect your data from unauthorized access, use, or disclosure, including:

  • Encryption
  • Access controls
  • Regular security audits

11. Children's Data

We do not knowingly collect data from individuals under 18 without verified parental consent. If we discover such data has been collected, it will be deleted promptly.

12. Updates to This Policy

We may update this Privacy Policy to reflect changes in law or service enhancements. We will notify you via the Platform or email before changes take effect.

13. Contact Us

For questions or concerns about this Privacy Policy, please contact:

vAhaka Technologies
📧 Email: admin@vahaka.app
📞 Phone: +91 95104 32963
📍 Address: LG 23 Indralok Complex, Piplod, Surat 395007