Privacy Policy

Welcome to The Bong Box (“we”, “our”, or “us”). We operate a cloud kitchen in Bangalore dedicated to serving authentic homestyle Bengali cuisine. We value your trust and are committed to protecting your personal information and your right to privacy in accordance with applicable Indian laws, including the Information Technology Act, 2000 and the Digital Personal Data Protection (DPDP) Act.

This Privacy Policy applies to all information collected through our mobile applications (Customer App & Admin/KDS App), website, backend APIs, and related online ordering services.

1. Information We Collect

We collect information that you voluntarily provide to us when you register, place orders, or contact us:

• Personal Identifiers: Name, phone number, email address, and delivery addresses (flat/house number, street, landmark, and postal PIN code).
• Order & Transaction Details: Selected food items, add-ons, portion preferences, dietary instructions, applied promo codes, invoice totals, and delivery time slot selections.
• Payment Information: Transaction identifiers, payment mode (UPI, Card, NetBanking, COD), and payment gateway statuses. We do not collect or store your sensitive card details or UPI PINs; all payments are processed securely by RBI-authorized payment aggregators (e.g. Razorpay).
• Device & Notification Data: Device model, OS version, and Firebase Cloud Messaging (FCM) tokens required to send real-time order tracking notifications and kitchen status updates.

2. How We Use Your Information

We use your information for legitimate business purposes, including:

• Processing and preparing your food orders at our kitchen hub.
• Coordinating route logistics and timely doorstep delivery within Bangalore delivery zones.
• Sending transactional notifications (order received, cooking, dispatched, delivered) via Push Notifications, SMS, and WhatsApp.
• Providing dedicated customer support and resolving grievance inquiries.
• Detecting fraud and ensuring the security and integrity of our ordering platform.

3. Information Sharing and Disclosure

We do not sell, rent, or trade your personal data to third parties for marketing purposes. We share data only with:

• Delivery Partners & Fleet: Assigned delivery executives receive your name, contact phone number, and delivery address strictly to fulfill your order.
• Service Providers: Cloud hosting infrastructure (Vercel, MongoDB Atlas), database servers, and Firebase Cloud Messaging.
• Legal Compliance: When required by Indian law or government authorities to comply with statutory legal processes.

4. Data Security & Storage

We implement industry-standard encryption (TLS/HTTPS), role-based database authentication, and secure tokenization to safeguard your information. All user data is stored on secure cloud database clusters located in India-compliant regions.

5. User Rights & Account Deletion

You have full control over your personal data and account:

• Access & Update: You can view and update your profile details and saved addresses directly in the Customer App.
• Account & Data Deletion: You can request immediate deletion of your account and associated personal data at any time:
  • Web Request Form: Submit an instant online request at thebongbox.in/delete-account.
  • In-App: Open the App ➔ Go to Profile ➔ Tap “Delete Account”.
  • Email Support: Send an email to orders@thebongbox.in.

6. Food Safety & FSSAI Compliance

The Bong Box operates in strict compliance with the Food Safety and Standards Authority of India (FSSAI) regulations and cloud kitchen food safety protocols.

7. Contact & Grievance Redressal

If you have any questions, feedback, or grievance requests concerning this Privacy Policy, please contact our Grievance Desk: