Privacy Policy - Chitti Babu Biryani

Last updated: 8 September 2026

Chitti Babu Biryani ("we", "us", "our") respects your privacy. This Privacy Policy explains what personal information we collect when you use chittibabubiryani.in (the "Website") or place an order with us, how we use it, who we share it with, and the choices you have. It is written to comply with the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection Act, 2023.

In short: we collect only what we need to cook and deliver your order and to reply to you. We never sell your data. Payment details go directly to our payment gateway and are never stored on our servers.

1. Information we collect

1.1 Information you give us

Order details: name, phone number, email address, delivery address and any order notes.
Contact form and email: your name, email, phone number (optional) and the message you send.
Phone orders: the details you give us over the phone to fulfil the order.

1.2 Information collected automatically

Technical data: IP address, browser type and device information, recorded in server logs and alongside contact-form submissions to prevent spam and abuse.
Cookies: the Website itself sets no tracking cookies. Embedded third-party services such as Google Maps may set their own cookies. See section 6.

1.3 Payment information

When you pay online, your card, UPI or bank details are entered directly into our licensed payment gateway's secure checkout. We receive only a confirmation of payment and a transaction reference. We do not see, collect or store your full payment details.

2. How we use your information

To prepare, pack and deliver your order and to contact you about it, including cancellations, delays and refunds.
To respond to your enquiries, feedback and complaints.
To process refunds and keep the transaction records that tax and accounting law require.
To detect and prevent fraud, hoax orders and abuse of the Website.
To improve our menu and service based on aggregated, non-identifying order patterns.

We do not use your information for automated profiling and we do not send marketing messages unless you have separately opted in, which you can withdraw at any time.

3. Legal basis

We process your information because it is necessary to perform the contract you enter when you order from us, because you have consented by submitting it, or because we have a legitimate interest in running our business securely and complying with the law.

4. Who we share it with

We share personal information only with the parties needed to deliver our service:

Recipient	What they receive	Why
Payment gateway	Order amount, order reference, your contact details as required for the transaction	To process your payment securely
Delivery riders / partners	Name, phone number, delivery address, order contents	To deliver your order and reach you at the door
Hosting and infrastructure (Cloudflare)	Website traffic data, contact-form submissions	To host the Website and store form messages securely
Email service provider	Contact-form contents	To notify us of your message
Government or law enforcement	Only what is legally required	When compelled by law or a valid legal request

We do not sell, rent or trade your personal information to anyone. Orders placed through Swiggy, Zomato or other platforms are governed by those platforms' privacy policies.

5. How long we keep it

Order and payment records: up to 8 years, as required by Indian tax and accounting law.
Contact-form messages: up to 12 months, then deleted unless part of an ongoing matter.
Server logs: up to 90 days.

6. Cookies and third-party embeds

Our pages embed Google Maps so you can find and get directions to the restaurant, and load fonts and icons from Google Fonts and Cloudflare's CDN. These providers may receive your IP address and set their own cookies under their privacy policies. You can block third-party cookies in your browser without affecting your ability to order.

7. Security

The Website is served over HTTPS. Contact-form submissions are stored in an access-controlled database and are rate-limited to deter abuse. Payment data never touches our systems. No method of transmission over the internet is completely secure, but we take reasonable and appropriate measures to protect the information we hold.

8. Your rights

You may ask us to:

Tell you what personal information we hold about you and provide a copy.
Correct information that is inaccurate or incomplete.
Delete your information, where we are not required by law to keep it.
Withdraw consent to any processing based on consent, such as marketing messages.

To exercise any of these rights, email info@chittibabubiryani.com with the subject "Privacy request". We will respond within 30 days. If you are not satisfied with our response, you may raise a complaint with the Data Protection Board of India.

9. Children

The Website is not directed at children under 18. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.

10. Changes to this policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with a new "Last updated" date. Continued use of the Website after a change means you accept the updated policy.

11. Grievance officer and contact

Under Indian law you may raise privacy concerns with our grievance officer:

Chitti Babu Biryani, Kukatpally, Hyderabad, Telangana, India
Phone: +91 96663 13134, +91 83282 75941
Email: info@chittibabubiryani.com