BhojRestro Technologies Pvt. Ltd. is committed to protecting your privacy. This policy explains how we collect, use, disclose, and safeguard your information in compliance with GDPR and CCPA.
Data Controller: BhojRestro Technologies Pvt. Ltd. (“BhojRestro”, “we”, “us”), registered in India, Bengaluru, Karnataka.
We operate a QR-based restaurant ordering and management platform at bhojrestro.in (the “Service”).
Privacy enquiries: privacy@bhojrestro.in
For users in the EEA or UK, our legal bases under Article 6 GDPR are:
| Recipient | Purpose | Safeguard |
|---|---|---|
| Razorpay | Payment processing | PCI-DSS; DPA in place |
| Firebase / Google | Push notifications, analytics | SCCs / adequacy decision |
| Vercel / AWS | Hosting & infrastructure | DPA; ISO 27001 certified |
| PostgreSQL (self-hosted) | Database storage | Encrypted at rest & in transit |
| Law enforcement | Legal obligation | Only when legally required |
| Business successors | M&A or asset sale | Data protection terms required |
Request deletion at any time: privacy@bhojrestro.in
BhojRestro is based in India. Transfers to or from the EEA/UK are protected by:
Session management, authentication, CSRF. Cannot be disabled.
Basis: Contract / Legitimate InterestLanguage preferences, UI settings, QR session state.
Basis: Legitimate InterestGoogle Analytics, Vercel — anonymised usage data.
Basis: ConsentRetargeting pixels (if enabled). Not shared without consent.
Basis: ConsentRight of Access (Art. 15)
Obtain a copy of personal data we hold about you.
Right to Rectification (Art. 16)
Correct inaccurate or incomplete personal data.
Right to Erasure (Art. 17)
Request deletion of your data.
Right to Restrict Processing (Art. 18)
Limit how we use your data in certain circumstances.
Right to Data Portability (Art. 20)
Receive your data in a structured, machine-readable format.
Right to Object (Art. 21)
Object to processing based on legitimate interests or direct marketing.
Withdraw Consent
Withdraw consent at any time without affecting prior processing.
Lodge a Complaint
File a complaint with your supervisory authority (e.g., ICO, CNIL).
Request disclosure of categories and specific pieces of personal information collected in the past 12 months, including sources and purposes.
Request deletion of personal information, subject to exceptions (legal obligations, security, completing transactions).
Request correction of inaccurate personal information.
We do not sell or share personal information for cross-context behavioural advertising.
Limit use of sensitive personal information to purposes necessary to provide the Service.
We will not discriminate against you for exercising CCPA rights.
Submit a verifiable consumer request to privacy@bhojrestro.in with subject “CCPA Request”. We do not disclose personal information for third-party direct marketing (Cal. Civ. Code § 1798.83).
The Service is not directed to children under 16. We do not knowingly collect personal information from children. Contact privacy@bhojrestro.in if you believe we have inadvertently collected such data and we will delete it promptly.
To report a vulnerability: security@bhojrestro.in
We may update this Policy periodically. For material changes we will post a new “Last Updated” date, email registered users, and display a prominent dashboard notice. Continued use after the effective date constitutes acceptance.
BhojRestro Technologies Pvt. Ltd.
Bengaluru, Karnataka, India
EEA residents may direct GDPR requests to:
mailgdpr@bhojrestro.in