Privacy Policy

In compliance with applicable data protection laws of India.

PRIVACY POLICY OF GRUBWALA

In Compliance with Information Technology Act, 2000, Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, Digital Personal Data Protection (DPDP) Act 2023 and Digital Personal Data Protection Rules 2025 (DPDP Rules)

At Grubwala, ("Grubwala," "we," "us," or "our") we are committed to protecting your personal data and respecting your privacy. This Data Privacy Policy (also "Policy") outlines when, why and how we collect, use and otherwise handle (collectively "process") personal information about our customers, potential customers and users of our websites ("Data Principals").

PLEASE READ THIS PRIVACY POLICY CAREFULLY TO UNDERSTAND OUR POLICIES AND PRACTICES REGARDING YOUR INFORMATION AND HOW WE WILL TREAT IT. BY ACCESSING OR USING OUR WEBSITE, YOU AGREE TO ACCEPT ALL THE TERMS CONTAINED IN THIS PRIVACY POLICY AND ACKNOWLEDGE AND AGREE WITH THE PRACTICES DESCRIBED HEREIN. IF YOU DO NOT AGREE WITH THE TERMS OF THIS PRIVACY POLICY, PLEASE DO NOT ACCESS AND USE OUR WEBSITE.

"Personal Data" is any information relating to you, which can be used to personally identify you, either directly or indirectly.

"Sensitive Personal Data or Information" or "SPDI" is information such as your: (i) password; (ii) financial information such as bank account or credit card or debit card or other payment instrument details; (iii) physical and physiological information; (iv) sexual orientation; or (v) biometric information.

"Data Principal" means the individual to whom the personal data relates.

"Data Fiduciary" means the Company, which determines the purpose and means of processing personal data.

"Data Processor" means any person who processes personal data on behalf of the Company.

1. Collection of Personal Data or Information

When you browse our website we may collect the following information: your IP address, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access the Website; information about how you use the Website ("User Data").

2. Categories of Information Collected

The information we collect on or through our Services may include:

A) Personal information

Name, address, email address, postal code, password and other information you may provide with your account, such as your gender, mobile phone number, date of birth, anniversary date, user bio, nationality and website. This also includes your profile picture that will be publicly displayed as part of your account profile. You may optionally provide us with this information through third-party sign-in services such as Facebook and Google. In such cases, we fetch and store whatever information is made available to us through these sign-in services.

B) Your content

Information you provide through our Services, including your reviews, photographs, comments, lists, followers, the users you follow, current and prior reservation details, food ordering details and history, special requests, contact information of people and other information you provide on our Services, and other information in your account profile.

C) Your bookings and preferences

We also record dietary preferences or restrictions, cuisine preferences, preferred price points, occasion types (e.g., birthday, anniversary) and any data you input or actions you take while interacting with specific features.

D) Your activities

The search terms you have looked up and results you selected, how long you used our Services and which features you used; the ads you clicked on.

E) Your communications

Communications between you and other users, delivery partners or merchants through our Services, some of which may be recorded for internal purposes; your participation in a survey, poll, sweepstakes, contest or promotion scheme; your request for certain features (e.g., newsletters, updates or other products); your communication with us about employment opportunities posted to the Services; your correspondence with our customer service and other grievance redressal mechanisms. If you exchange messages with others through the Services, we may store them in order to process and deliver them, allow you to manage them, and investigate possible violations of our Terms of Service and wrongdoing in connection with the Services. If you send information from the Services to your mobile device via SMS text message, we may log your phone number, phone carrier, and the date and time that the message was processed. Carriers may charge recipients for texts that they receive.

F) Your transactional information

If you make purchases through our Services, we may collect and store information about you to process your requests and automatically complete forms for future transactions, including (but not limited to) your phone number, address, email, billing information and credit or payment card information. This information may be shared with third-parties which assist in processing and fulfilling your requests.

G) Public contributions

You may also provide information (such as ratings, reviews, tips, photos, comments, likes, bookmarks, friends, lists, etc.) to be published or displayed on publicly accessible areas of our Services, or transmitted to other users of our Services or third-parties (collectively, "User Contributions"). Your User Contributions are posted on publicly accessible areas of our Services and transmitted to others at your own risk. We may display this information on the Services, share it with businesses, and further distribute it to a wider audience through third party sites and services. You should be careful about revealing any sensitive details about yourself in such postings.

H) Image / video data

We may collect and process images and video recordings of individuals attending events or visiting our office premises for security and safety purposes. This includes the use of closed-circuit television (CCTV) systems at our facilities. CCTV footage may capture individuals' images, vehicle information, and other identifying details. We may also collect photographs or videos during events for promotional or documentation purposes.

I) Contact information

If you choose to utilise any of our services which require uploading of your contact book, then we will collect and process such information as well, which could include the name and phone number of contacts stored on your device(s). By uploading or providing access to your contact list or any third-party personal information, you represent and warrant that you have obtained the explicit, informed consent of each individual to share their information with us for the purposes described in this policy or at the time of collection, and you agree to indemnify us against any claims arising from your failure to obtain such consent. By providing access to or uploading your Contacts, you represent that you have obtained the necessary consent from your Contacts to share their information with us for these purposes, and you expressly consent to our collection, storage, and use of this information as described.

J) Information volunteered by you

As part of various service offerings provided by us from time to time, you may be given the opportunity to provide us with information that allows us to facilitate these services and in doing so, you consent to providing us with such information. This includes, without limitation, any information you provide in response to surveys, feedback requests, promotional offers, contests, user research studies, beta testing programs, or when utilizing any new or optional features we may introduce. By volunteering any such information, you explicitly consent to its collection and use for the purposes stated at the time of collection and as generally described in this Privacy Policy.

3. Modes of Collection of Data

Automated technologies or interactions: As you interact with the Website, we will automatically collect User Data about your equipment, browsing actions, and patterns. We collect User Data by using cookies, server logs, and other similar technologies.

Third parties or publicly available sources: We may receive User Data about you from analytics providers such as Google, advertising networks, and search information providers.

4. Use of Information Collected

We may use the information to:

4.1 Provide you with information, products, or services,

4.2 Notify you about changes to our Website, and any products or services;

4.3 Anonymize data and aggregate data for statistics;

4.4 To administer and protect our business and this Website (including troubleshooting, data analysis, testing, system maintenance, support, reporting, and hosting of data).

4.5 To use data analytics to improve the Website, our products and services, marketing, customer relationships, and your experiences.

4.6 To comply with applicable legal requirements, such as government regulations and industry standards, contracts, and law enforcement requests.

5. Data Sharing with Other Recipients

5.1 Internally to other entities and or individuals associated or consulting with us that provide IT and system administration services.

5.2 External third parties, such as Service providers who provide IT and system administration services and other third party if we are under a duty to disclose or share your Personal Data/SPDI in order to comply with any legal obligation, or to protect the rights, property and/or safety of Grubwala, its personnel and others;

5.3 Any other third party for the purposes of acting in accordance with the requirements of a court, regulator or government agency, for example, complying with a court order or acting in accordance with an applicable law or regulation;

5.4 Police and other law enforcement agencies in connection with the prevention and detection of crime; or

5.5 Professional advisers including lawyers, bankers, auditors, and insurers who provide consultancy, banking, legal, insurance, and accounting services.

5.6 Third parties to whom we may choose to sell, transfer, or merge parts of our business or our assets. Alternatively, we may seek to acquire other businesses or merge with them.

We require all third parties to respect the security of your User Data and to treat it in accordance with the law. We do not allow our third-party service providers to use your User Data for their own purposes and only permit them to process your User Data for specified purposes and in accordance with our instructions.

6. Protection of Personal Data

6.1 We implement technical and organisational security measures to protect your Personal Data/SPDI against the risk of loss, misuse, or unauthorised alteration or destruction. Such measures may include the use of firewalls, encryption (where appropriate), access rights management processes, careful selection of processors and other technically and commercially reasonable measures to provide appropriate protection for your Personal Data. Where appropriate, we may also make backup copies and use other such means to prevent accidental damage to or destruction of your Personal Data.

7. Cookie Policy

7.1 We use cookies to distinguish you from other users of the Website and remember your preferences. This helps us to provide you with a seamless user experience when you use our Website and also allows us to improve the Website.

7.2 We collect data by way of 'cookies'. Cookies are small data files which are sent to your browser from the Website and are stored on your computer or device (hard drive). The cookies shall not provide access to data in your computer or device such as email addresses or any other data that can be traced to you personally.

7.3 The data collected by way of cookies will allow us to administer the Website and provide you with a tailored and user-friendly service. The cookies shall enable you to access certain features of the Website. Most web browsers and devices can be set to notify when you receive a cookie or prevent cookies from being sent. If you prevent cookies from being collected, it may limit the functionality that we can provide when you visit the Website.

7.4 Additionally, you may encounter cookies or other similar devices on certain pages of the Website that are placed by third parties. We do not control the use of cookies by third parties. If you send us personal correspondence, such as emails, or letters, or if other users or third parties send us correspondence about your activities or postings on the Website, we may collect such information within a file specific to you.

8. Data Security Measures

8.1 We have put in place appropriate security measures to prevent your User Data from being accidentally lost, used, or accessed in an unauthorized way, altered, or disclosed. In addition, we limit access to your User Data to those employees, agents, contractors, and other third parties who have a business need to know. They will only process your User Data on our instructions and they are subject to a duty of confidentiality.

8.2 We have put in place procedures to deal with any suspected User Data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

9. Data Retention

9.1 We will only retain your User Data for as long as reasonably necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, or reporting requirements. We may retain your User Data for a longer period in the event of a complaint or if we reasonably believe there is a prospect of litigation in respect to our relationship with you.

9.2 To determine the appropriate retention period for User Data, we consider the amount, nature, and sensitivity of the User Data, the potential risk of harm from unauthorized use or disclosure of your User Data, the purposes for which we process your User Data and whether we can achieve those purposes through other means, and the applicable legal, regulatory, or other requirements.

10. Your Rights

Under certain circumstances, you have rights under applicable data protection laws in relation to your User Data which may be classified as personal data under applicable law. You have the right to:

10.1 Request access to such personal data: This enables you to receive a copy of the personal data we hold about you and to check that we are lawfully processing it.

10.2 Request the correction of such personal data: This enables you to have any incomplete or inaccurate data we hold about you corrected, though we may need to verify the accuracy of the new data you provide to us.

10.3 Request the erasure of such personal data: This enables you to ask us to delete or remove personal data where there is no good reason for us continuing to process it.

10.4 You also have the right to ask us to delete or remove your personal data where you have successfully exercised your right to object to processing (see below), where we may have processed your information unlawfully or where we are required to erase your personal data to comply with local law. Note, however, that we may not always be able to comply with your request of erasure for specific legal reasons which will be notified to you, if applicable, at the time of your request.

10.5 Request restriction of processing of such personal data: This enables you to ask us to suspend the processing of your personal data.

10.6 Request the transfer of such personal data to you or to a third party: We will provide to you, or a third party you have chosen (where technically feasible), your personal data in a structured, commonly used, machine-readable format. Note that this right only applies to automated information which you initially provided consent for us to use or where we used the information to perform a contract with you.

10.7 Withdraw consent at any time where we are relying on consent to process your personal data. However, this will not affect the lawfulness of any processing carried out before you withdraw your consent. If you withdraw your consent, we may not be able to provide certain products or services to you. We will advise you if this is the case at the time you withdraw your consent.

10.8 If you wish to exercise any of the rights set out above, please contact us. You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we could refuse to comply with your request in these circumstances.

10.9 We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.

10.10 We try to respond to all legitimate requests within one month. Occasionally it could take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.

11. Complaints

If you have a complaint about how we use your personal data and information, we would always prefer you to contact us first. You can file a complaint by contacting our Data Protection Officer, whose details are provided below:

Advocate Karan Dogra

Data Protection Officer

[email protected]

Contact Us

To ask questions or comment about this Privacy Policy and our privacy practices, contact us at:

Email: [email protected]

Address: 308, Shivai Plaza,

Near Marol Metro Station, Andheri East - 400059

PLEASE NOTE: IF YOU USE OUR WEBSITE, YOU HAVE AGREED TO AND ACCEPTED THE PRACTICES DESCRIBED IN THIS PRIVACY POLICY AND THE TERMS AND CONDITIONS SET FORTH IN OUR TERMS OF USE, AS APPLICABLE. IF YOU DO NOT AGREE WITH THE TERMS OF THIS PRIVACY POLICY OR OUR TERMS OF SERVICE, PLEASE DO NOT USE OUR WEBSITE