Our Privacy Commitment
At Cups & Coasters Café, we are committed to protecting your privacy and safeguarding the personal information you share with us. This Privacy Policy explains how we collect, use, store, and protect information when you visit our café, use our website, or place orders through our digital services, including WhatsApp.
We process personal information in accordance with applicable Indian laws, including the Information Technology Act, 2000 and its associated rules, and follow reasonable security practices to protect user data.
Effective Date: DD/MM/YYYY
Last Updated: DD/MM/YYYY
Information We Collect
Personal Information
We collect personal information that you voluntarily provide to us when you:
- Place an order through our website or WhatsApp ordering system
- Make a dine-in, takeaway, or pickup request
- Provide your contact details for order confirmation or support
- Communicate with us for customer service or inquiries
- Use our digital services or interact with our platform
Types of Information Collected
| Category | Examples | Purpose |
|---|---|---|
| Personal Information | Name, phone number, email address, delivery/pickup preferences, transaction details | Processing and delivering orders, customer communication, and order management |
| Device & Technical Data | IP address, browser type, device type, interaction logs, WhatsApp message metadata | Improving software performance, ensuring security, preventing fraud, and troubleshooting issues |
| Payment Information | Payment details processed securely by Razorpay (no card or payment data stored by us) | Secure payment processing in compliance with PCI-DSS standards |
| WhatsApp Communication Data | Order confirmations, payment alerts, customer support messages | Sending order updates, providing support, and confirming transactions |
How We Use Your Information
Primary Purposes
We use the information collected for the following purposes:
- Order Processing: To accept, prepare, and deliver dine-in, takeaway, or pickup orders
- Payment Handling: To process payments securely through authorized payment gateways
- Communication: To send order confirmations, status updates, payment alerts, and respond to customer inquiries
- Service Improvement: To improve our menu offerings, software performance, and overall customer experience
- Personalization: To remember order preferences and improve service quality
- Security & Fraud Prevention: To detect, prevent, and investigate fraudulent or unauthorized activity
- Legal & Regulatory Compliance: To comply with applicable laws, regulations, and legal obligations
Data Retention Period
We retain personal information only for as long as necessary to fulfill the purposes for which it was collected, including order processing, customer support, legal compliance, and internal analytics. Customer data is generally retained for up to 3 years from the last interaction, unless a longer retention period is required or permitted by law.
Data Protection & Security
Security Measures
We implement reasonable technical and organizational measures to safeguard your personal information against unauthorized access, misuse, alteration, disclosure, or destruction. These measures include:
- Encrypted communication using secure protocols (HTTPS)
- Restricted access to systems and databases on a need-to-know basis
- Secure server infrastructure and firewall protection
- Use of trusted, PCI-DSS–compliant payment gateways
- Regular system monitoring to detect suspicious activity
Third-Party Sharing
We share user information only when necessary to provide our services or to comply with legal obligations. We do not sell or rent personal data.
| Third Party | Purpose | Data Shared |
|---|---|---|
| Razorpay (Payment Gateway) | Secure payment processing | Payment and transaction details (handled directly by Razorpay) |
| Internal Staff | Order preparation and fulfillment | Name, order details, delivery/pickup preference |
| WhatsApp (Meta Platforms) | Order communication and support | Phone number, message metadata |
| Legal / Regulatory Authorities | Compliance with applicable laws | Information required under legal obligation |
Cookies & Tracking Technologies
What Are Cookies?
Cookies are small text files stored on your device when you visit our website. They help the website function properly, improve performance, and remember basic preferences.
Types of Cookies We Use
| Cookie Type | Purpose | Duration | Essential |
|---|---|---|---|
| Essential Cookies | Enable core website functionality, security, and session management | Session | Yes |
| Functional Cookies | Remember basic user preferences and settings | Up to 1 year | No |
| Analytics Cookies | Understand website usage and improve performance (aggregated data) | Up to 2 years | No |
Your Rights & Choices
User Rights
In accordance with applicable Indian data protection laws, you have certain rights regarding the personal information we collect and use.
Right to Access
You may request confirmation of whether we process your personal information and obtain a summary of the data associated with your orders or account.
Right to Correction
You may request correction of inaccurate or incomplete personal information such as contact details or order-related information.
Right to Deletion
You may request deletion of your personal information, subject to legal, accounting, or operational retention requirements.
Right to Communication Opt-Out
You may opt out of non-essential WhatsApp or communication messages. Transactional and service-related messages may still be sent.
Right to Withdraw Consent
Where processing is based on consent, you may withdraw your consent at any time, without affecting the legality of prior processing.
Right to Raise Concerns
You may contact us regarding concerns about data usage, security, or privacy practices.
Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data handling practices, please contact us using the details below.
Privacy & Support Contact
Cups & Coasters Café
CL Magic Building, Katraj–Kondhwa Road
Beside VIIT College, Bibwewadi–Kondhwa
Kondhwa Budruk, Pune, Maharashtra, India – 411048
Email: privacy@cupsandcoasters.com
Phone: +91 98226 60198
Response Time
We aim to respond to privacy-related requests and inquiries within 7 business days. Complex or legally sensitive requests may require additional time, and we will keep you informed if so.
Policy Updates
We may update this Privacy Policy from time to time to reflect changes in our business practices, technologies, legal requirements, or operational needs. Any updates will be reflected by revising the “Last Updated” date at the top of this policy.
Your Continued Use
Your continued use of our website, WhatsApp ordering system, or services after any updates indicates your acceptance of the revised Privacy Policy. We encourage you to review this policy periodically.
Last Updated: DD/MM/YYYY
Previous versions of this Privacy Policy are available upon request.
