This notice explains what Brewklin Cafe stores when you order on this website, in the Brewklin Cafe app or at the cafe, and why.
Who we are
Brewklin Cafe is run by Darjedar Food (OPC) Private Limited (“we”, “us”), Aurum Q Residences, R1 Podium, Reliance Corporate Park, MIDC Industrial Area, Ghansoli, Navi Mumbai, Maharashtra 400710. Under India’s Digital Personal Data Protection Act, 2023 (DPDP Act), we are the data fiduciary for the personal data described here.
What we keep about you
- Mobile number: to sign you in with a one-time code, and so our kitchen or rider can call you about an order.
- Name: shown on your order, so our staff know who it is for.
- Your flat: tower, floor, flat and any note for the rider. We never ask for a map pin or your phone’s location.
- Table number: when you order by scanning the QR code on a table.
- Your orders: dishes and options, notes, prices, discounts and offer codes, how you paid, the time of each status change, the delivery code if we use one, your rating and note.
- Sign-in codes: stored only in a scrambled (hashed) form. A code works for 10 minutes and is removed after use.
- Help requests: your message, topic, order code if you gave one, and our reply.
- Notification token: only if you allow notifications in the app.
- Technical data: basic logs (such as time, page and error details) that keep the service secure and working.
Payments
If you pay online, Razorpay processes the payment. Your card number, UPI PIN or bank login go to Razorpay, not to us. We receive the payment reference, the amount and the result. Cash payments are recorded on your order.
Why we use it
- To take, cook, deliver and bill your order.
- To sign you in and keep your account secure.
- To answer your help requests and handle cancellations and refunds.
- To keep the accounts and tax records the law requires.
- To understand, in total, how the website is used, only if you allow it (see Cookies and storage).
We use your data with your consent, which you give when you sign in and order, and for the legitimate uses the DPDP Act allows, such as meeting a legal duty.
Who sees it
- Our cafe staff and riders: only what they need for your order (name, number, flat or table, dishes).
- Service providers who help us run the service, such as hosting, SMS and Razorpay. They may use the data only to provide their service to us.
- Authorities, when the law requires it.
We do not sell your data and we do not share it for advertising.
How long we keep it
We keep your account while you use it. Orders and bills are kept for as long as tax and accounting laws require, even if you delete your account. Help requests are kept while they are useful for support. Logs are kept for a short time.
Your rights
Under the DPDP Act you can:
- get a summary of the personal data we hold about you;
- ask us to correct, complete or update it;
- ask us to erase it, unless the law requires us to keep it;
- withdraw your consent at any time (this does not affect what was done before);
- nominate someone to use these rights for you if you cannot;
- raise a grievance with us.
You can download your data or delete your account yourself in Account settings. For anything else, send us a help request.
Grievances
Send a grievance through a help request and choose “My account”. We will reply within the time the law sets. If you are not satisfied with our answer, you can complain to the Data Protection Board of India.
Children
Our service is meant for adults. If you are under 18, please order with your parent or guardian.
Security
We protect your data with reasonable security safeguards, including encrypted connections (HTTPS) and limited staff access. If a personal data breach affects you, we will tell you and the Data Protection Board of India as the law requires.
Changes
If we change this notice, we will update the date at the top of this page.