1. Introduction
Welcome to The Northeasty, a cloud kitchen headquartered in Delhi, India, specialising in authentic cuisine from the Northeast states of India including Assam, Meghalaya, Manipur, Nagaland, Arunachal Pradesh, Mizoram, Tripura, and Sikkim.
This Privacy Policy describes how we collect, use, store, share, and protect your personal information when you place orders, use our website or mobile application, interact with our delivery partners, or otherwise engage with our services (collectively, “Services”).
By using our Services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with these practices, please do not use our Services.
2. Information We Collect
2.1 Information You Provide Directly
• Full name and contact details (phone number, email address)
• Delivery address(es) and location data
• Payment information (processed securely through third-party payment gateways; we do not store full card details)
• Order history and food preferences
• Communications with our customer support team
• Feedback, reviews, or ratings you submit
2.2 Information Collected Automatically
• Device information (device type, operating system, browser type)
• IP address and approximate geographic location
• Usage data such as pages visited, time spent, and interactions within our app or website
• Cookies and similar tracking technologies (see Section 7 for details)
2.3 Information from Third Parties
• Order and delivery data from third-party food aggregator platforms (e.g., Swiggy, Zomato) if you place orders through them
• Payment verification data from payment gateway providers
• Promotional engagement data from advertising platforms
3. How We Use Your Information
We use the information we collect for the following purposes:
• Processing and fulfilling your food orders and arranging delivery to your address
• Communicating with you about your orders, including confirmations, updates, and delivery notifications
• Providing customer support and resolving complaints or disputes
• Personalising your experience, including menu recommendations based on past orders
• Processing payments and preventing fraudulent transactions
• Sending promotional offers, newsletters, or updates about our menu (only with your consent; you may opt out at any time)
• Analysing usage patterns to improve our Services, menu, and delivery experience
• Complying with applicable laws, regulations, and legal obligations
• Protecting the rights, safety, and property of The Northeasty, our customers, and third parties
4. Sharing Your Information
We do not sell your personal data. We may share your information with the following categories of parties:
4.1 Delivery Partners
Your name, phone number, and delivery address are shared with our logistics and delivery partners solely for the purpose of fulfilling your order.
4.2 Payment Processors
Payment information is shared with authorised third-party payment gateway providers (such as Razorpay, Paytm, or UPI service providers) to securely process transactions.
4.3 Technology Service Providers
We may share data with cloud hosting, analytics, and software providers who assist in operating our platform, subject to strict data processing agreements.
4.4 Food Aggregator Platforms
If you order via a third-party aggregator, that platform’s privacy policy governs data collected on their platform. We receive only the order data necessary to prepare and fulfil your meal.
4.5 Legal and Regulatory Bodies
We may disclose your information if required by law, court order, or government authority, or when we believe disclosure is necessary to protect rights, safety, or prevent fraud.
5. Data Retention
We retain your personal information for as long as necessary to fulfil the purposes outlined in this Policy, unless a longer retention period is required or permitted by law. Specifically:
• Order and transaction records are retained for a minimum of 7 years in compliance with applicable tax and financial regulations under Indian law.
• Account information is retained for as long as your account remains active, or for 3 years after your last interaction with our Services.
• Marketing preferences and communication logs are retained until you withdraw consent or request deletion.
Upon expiry of the relevant retention period, data is securely deleted or anonymised.
6. Data Security
We take the security of your personal information seriously and implement appropriate technical and organisational safeguards, including:
• Encryption of data in transit using industry-standard SSL/TLS protocols
• Restricted access to personal data on a need-to-know basis
• Regular review of data collection, storage, and processing practices
• Secure payment processing through PCI-DSS compliant payment partners
While we strive to protect your data, no method of transmission over the internet or electronic storage is 100% secure. In the event of a data breach, we will notify affected users and relevant authorities in accordance with applicable law.
7. Cookies and Tracking Technologies
Our website and app use cookies and similar technologies to enhance your browsing experience, remember your preferences, and gather analytics. These include:
• Essential cookies: Required for the operation of our platform (e.g., maintaining your cart or session)
• Analytical cookies: Help us understand how users interact with our Services (e.g., Google Analytics)
• Marketing cookies: Used to deliver relevant promotional content (only with your consent)
You can control or disable cookies through your browser or device settings. Note that disabling certain cookies may affect the functionality of our Services.
8. Your Rights
As a user based in India, and in accordance with the Digital Personal Data Protection Act, 2023 (DPDPA), and other applicable laws, you have the following rights:
• Right to Access: Request a copy of the personal data we hold about you
• Right to Correction: Request correction of inaccurate or incomplete personal data
• Right to Erasure: Request deletion of your personal data, subject to legal retention obligations
• Right to Withdraw Consent: Withdraw consent for marketing communications at any time
• Right to Grievance Redressal: Lodge a complaint with our Grievance Officer (see Section 11)
To exercise any of these rights, please contact us at the details provided in Section 11. We will respond to all requests within 30 days.
9. Children’s Privacy
Our Services are not directed to individuals under the age of 18. We do not knowingly collect personal data from minors. If we become aware that a child under 18 has provided us with personal information, we will take steps to delete such data promptly. If you believe a minor has provided us their information, please contact us immediately.
10. Third-Party Links and Platforms
Our website or app may contain links to third-party websites or services (such as food aggregator platforms or social media pages). This Privacy Policy does not apply to those platforms. We encourage you to review the privacy policies of any third-party services you use in connection with our Services.
11. Grievance Officer and Contact Information
In accordance with the Information Technology Act, 2000 and the DPDPA 2023, we have appointed a Grievance Officer. If you have any complaints, concerns, or queries regarding this Privacy Policy or the handling of your personal data, please contact:
Grievance Officer – The Northeasty
Address: Humayunpur, Safdarjung Enclave, Delhi, India
Email: grievance@northeasty.com
Response Time: Within 30 days of receipt of complaint
12. Updates to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or business operations. When we make material changes, we will notify you by posting a prominent notice on our website or app, or by sending an email notification. The revised Policy will take effect from the date indicated at the top of the document.
We encourage you to review this Policy periodically. Your continued use of our Services after the effective date of any change constitutes your acceptance of the updated Policy.
Thank you for trusting The Northeasty with your personal information.
We are committed to bringing you the authentic tastes of Northeast India — safely and responsibly.Your privacy policy goes here.