Privacy Policy

Varalakshmi Tiffins ("we," "us," "our," or "Company") operates the website https://varalakshmitiffins.com (the "Website") and provides fresh South Indian breakfast services, including direct delivery, catering, and live counter services.

This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our Website, place orders through our platform, or interact with us via delivery partners like Swiggy, Zomato, or direct contact.

1. Information We Collect

A. Information You Provide Directly

• Contact Information: Name, email address, phone number, home/office address for delivery
• Order Information: Items ordered, quantity, delivery preferences, dietary restrictions, special instructions
• Payment Information: Credit/debit card details, UPI, wallet (processed securely by payment gateways; we do NOT store full card numbers)
• Account Information: Username, password, profile preferences if you create an account
• Communication Data: Messages, emails, calls, and chat logs when you contact us
• Feedback & Reviews: Comments, ratings, and testimonials you submit on our Website or delivery apps

B. Information Collected Automatically

• Device Information: Device type, operating system, IP address, browser type
• Usage Data: Pages visited, time spent, clicks, search queries, referral source
• Location Data: Approximate location (for delivery mapping) only with your permission
• Cookies & Tracking: Cookies, pixels, and analytics tools to improve your experience

C. Information from Third Parties

• Delivery Platforms: Swiggy, Zomato share your order data with us
• Payment Gateways: Transaction confirmations and verification details
• Spam Detection Services: Automated tools to prevent fraud and abuse

2. How We Use Your Information

We use the information we collect for the following purposes:

• Order Processing: To prepare, package, and deliver your orders accurately and on time
• Customer Support: To respond to inquiries, resolve issues, and handle complaints
• Delivery & Logistics: To coordinate delivery routes and communicate with you about order status
• Payment Processing: To securely process transactions and prevent fraud
• Communication: To send order confirmations, receipts, delivery updates, and promotional offers (if you opt-in)
• Personalization: To remember your preferences and suggest items you may like
• Website Improvement: To analyze user behavior and enhance our Website features
• Marketing: To send newsletters, special offers, and event invitations (with your consent)
• Legal Compliance: To comply with laws, regulations, and legitimate business requests
• Food Safety: To maintain quality records and handle dietary allergies or special requests

3. Cookies & Tracking Technologies

What are Cookies? Cookies are small files stored on your device that help us recognize you and improve your experience.

Types of Cookies We Use:

• Essential Cookies: Required for Website functionality (login, payment, security)
• Performance Cookies: Analyze how you use the Website to improve features
• Marketing Cookies: Track your interactions to show relevant ads and offers
• Comment Cookies: If you leave comments, we save your name, email, and website for 1 year
• Login Cookies: Login sessions last 2 days; "Remember Me" lasts 2 weeks

Managing Cookies: You can disable cookies in your browser settings, but some Website features may not function properly.

4. Who We Share Your Data With

We only share your personal data with trusted third parties for legitimate business purposes:

• 📱 Delivery Partners: Swiggy, Zomato (for order fulfillment)
• 💳 Payment Processors: Razorpay, PayU, Google Pay (payment processing only)
• 🚚 Logistics & Courier Services: For delivery tracking and coordination
• 📊 Analytics Providers: Google Analytics (anonymized data only)
• 🛡️ Fraud Detection Services: To prevent spam and unauthorized access
• 📧 Email Marketing Platforms: Only if you subscribe to our newsletter

We DO NOT sell, trade, or rent your personal information to third parties for marketing purposes.

5. Data Security

We implement industry-standard security measures to protect your data:

• 🔐 SSL Encryption: Your Website data is encrypted in transit
• 🔐 Secure Payment Gateway: Credit card data is NOT stored on our servers
• 🔐 Access Controls: Only authorized staff can access customer data
• 🔐 Regular Audits: We monitor for vulnerabilities and potential breaches

6. Data Retention

We retain your data for the following periods:

• Order Information: Retained for 3 years (for tax and business records)
• Account Data: Retained as long as your account is active; you can delete it anytime
• Payment Data: Retained per payment gateway terms (typically 3-5 years)
• Comments & Reviews: Retained indefinitely to maintain community feedback
• Website Usage Data: Anonymized after 26 months
• Email Lists: Retained until you unsubscribe

7. Your Rights & Choices

A. Access & Portability

You have the right to request a copy of all personal data we hold about you in a portable, machine-readable format.

B. Correction & Updates

You can update your profile information, delivery address, and contact details at any time through your account.

C. Deletion Rights

You can request deletion of your account and personal data. We will comply within 30 days, except where we are legally required to retain the data.

D. Marketing Opt-Out

You can unsubscribe from promotional emails by clicking the "Unsubscribe" link at the bottom of any email or updating your preferences in your account.

E. Withdraw Consent

You can withdraw consent for location tracking, cookies, or analytics at any time through your browser or account settings.

8. Children's Privacy

Our Website and services are NOT intended for children under 13 years old. We do not knowingly collect data from children. If we discover a child has provided information, we will delete it immediately. Parents/guardians who believe their child has shared data should contact us at info@varalakshmitiffins.com.

9. Third-Party Links & Embedded Content

Our Website may contain links to third-party websites (e.g., Swiggy, Zomato, Google Maps, social media). We are NOT responsible for their privacy practices. We recommend reviewing their privacy policies before sharing information.

Embedded Content: Videos, maps, and images from external sources may collect data about you. We have no control over these services.

10. International Data Transfers

If you access our Website from outside India, your data may be transferred to and processed in India. By using our services, you consent to this transfer and processing in accordance with this Privacy Policy.

11. Contact Information & Requests

To exercise any of your rights or if you have privacy concerns, contact us:

We will respond to all requests within 30 days. If we cannot process your request, we will explain why.

12. Changes to This Privacy Policy

We may update this Privacy Policy occasionally to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of significant changes by:

• Posting the updated policy on our Website with a new "Last Updated" date
• Sending you an email notification
• Requesting your explicit consent if changes affect how we use your data

Your continued use of our Website after changes indicates acceptance of the updated policy.

13. Compliance & Legal Basis

This Privacy Policy complies with:

• Information Technology Act, 2000 (India)
• Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011
• Consumer Protection Act, 2019
• Digital Personal Data Protection Act, 2023 (DPDP Act)