Privacy Policy

1. Data We Collect

When you create a profile:

• Name, email address, mobile number (required)
• Date of birth — optional, used only for birthday offers
• Anniversary date — optional, used only for special occasion offers
• Food preference, family size — optional, used for menu personalization
• Home address and area — optional, used for faster delivery
• Upcoming event information — optional, used for catering suggestions

When you place an order:

• Order details, items, delivery address
• GPS coordinates — only when you explicitly tap "Detect My Location"
• Payment method (we never store card numbers — Razorpay handles all card data)
• Transaction reference IDs for payment verification

Automatically collected:

• Browser type, device type, IP address
• Pages visited and time spent (for improving our service)

2. How We Use Your Data

• Processing and fulfilling your orders
• Sending order confirmations and delivery updates via WhatsApp
• Birthday and anniversary special offers (only if you provided these dates)
• Personalized menu recommendations based on your food preference
• Loyalty points tracking and tier management
• Catering outreach based on upcoming events you share with us
• Improving our service, menu, and customer experience
• Compliance with legal obligations (GST, FSSAI, IT Act)

3. Data Sharing

We do NOT sell your personal data. We share it only with:

• Delivery riders — name and phone only, for delivery coordination
• Razorpay — for payment processing. Razorpay is PCI-DSS compliant and RBI licensed
• Google — if you use Google Sign-In. Governed by Google's Privacy Policy
• WhatsApp — for order communications you initiate or consent to receive
• Legal authorities — only if required by Indian law or court order

4. Payment Data Security

• RICHS Global does not store any debit/credit card details.
• All card payments are processed directly by Razorpay on their PCI-DSS Level 1 certified infrastructure.
• UPI payments go directly between your bank and our registered UPI ID. We only see the transaction reference.
• All connections to our platform use HTTPS/TLS encryption.

5. Data Storage and Security

• Data stored on Railway cloud infrastructure (US East region, enterprise-grade security)
• Passwords are hashed using industry-standard algorithms — never stored in plain text
• Access to personal data is restricted to authorized staff only
• Regular security audits and monitoring via Sentry

6. Your Rights under DPDP Act 2023

• Right to access — request a copy of your personal data
• Right to correction — update inaccurate data via your profile page
• Right to deletion — request account and data deletion (subject to legal retention requirements)
• Right to withdraw consent — opt out of marketing communications at any time
• Right to grievance — raise complaints about how we handle your data

To exercise any right: email privacy@richsglobal.in or WhatsApp +91 88550 61800. We respond within 30 days.

7. Cookies and Local Storage

We use browser localStorage (not cookies) to store your cart, authentication tokens, and display preferences. No third-party tracking cookies are used. You can clear browser storage at any time via your browser settings. This will log you out and clear your cart.

8. Children's Privacy

Our platform is not directed at children under 13. We do not knowingly collect personal data from children under 13. If you believe a child has provided us with data, contact us immediately at privacy@richsglobal.in.

9. Data Retention

• Order and payment records: 7 years (required for GST compliance under Indian law)
• Account data: retained until you request deletion
• Marketing preferences: until you opt out
• GPS coordinates: not stored beyond the order transaction

10. Grievance Officer

As required under IT Act 2000, Section 5(9):
Name: Kunal Mhalgi
Designation: Grievance Officer
Email: privacy@richsglobal.in
Address: Ravet, PCMC, Pune, Maharashtra 411033
Response time: Within 30 days of receiving complaint

11. Changes to This Policy

We will notify you of significant changes via WhatsApp or email. Continued use after changes constitutes acceptance of the updated policy.