Privacy Policy

1. Data we collect

• Account data — your name, phone number, email address and password (stored hashed).
• Order data — the items you order, delivery addresses, order notes, and order history.
• Location data — your delivery address and, where you allow it, your device location, so riders can find you and you can track your order on a live map.
• Payment data — payments are processed by our payment partners; we receive a transaction reference and status, not your full card details.
• Device & usage data — IP address, device and browser type, and how you interact with the platform, used for security and to improve the service.
• Communications — messages you send to support, ratings and reviews you leave.

2. How we use your data

• To create and manage your account and authenticate you.
• To process orders, route them to restaurants, and dispatch riders.
• To enable live order tracking and accurate delivery estimates.
• To process payments, refunds and payouts.
• To provide customer support and respond to your requests.
• To send service messages about your orders and account.
• To send promotional messages where you have opted in — you can opt out at any time.
• To detect, prevent and investigate fraud, abuse and security incidents.
• To comply with our legal and tax obligations.

3. Location data for delivery

Location data is central to a delivery service. We use your saved delivery address to route orders, and — only with your permission — your live device location to place you accurately on the map and give the rider precise directions. Riders see only the information needed to complete your delivery. You can withdraw location permission in your device settings at any time, though some features (such as live tracking) may not work without it.

4. How we share data

We do not sell your personal data. We share it only as needed to run the service:

• Restaurants — receive your order details and the name and contact needed to prepare and confirm it.
• Riders — receive your delivery address, contact number and live location during an active delivery.
• Service providers — payment processors, mapping, SMS/email and hosting providers, bound by confidentiality.
• Legal authorities — where required by law, court order or to protect rights and safety.

5. Data retention

We keep your personal data only as long as needed for the purposes above. Order and transaction records are retained for as long as required by tax and accounting law (typically up to eight years). Account data is kept while your account is active; if you delete your account, we remove or anonymise your data within a reasonable period, except where we must retain it to meet a legal obligation or resolve disputes.

6. Your rights

Under the DPDP Act you have the right to:

• Access a summary of the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request erasure of your data where it is no longer needed.
• Withdraw consent you have previously given.
• Nominate another person to exercise your rights in the event of incapacity.
• Raise a grievance with us, and escalate to the Data Protection Board of India.

To exercise any of these rights, contact our Grievance Officer using the details below. We will respond within the timeframes required by law.

7. Data security

We use encryption in transit, hashed passwords, access controls and monitoring to protect your data. No system is perfectly secure, but we work to limit risk and will notify you and the relevant authority of any breach as required by law.

8. Cookies

We use cookies and similar technologies to keep you signed in, remember your preferences and understand how the platform is used. For details, see our Cookie Policy.

9. Children

The platform is not intended for anyone under 18. We do not knowingly collect data from children. If you believe a child has provided us data, contact us and we will remove it.

10. Changes to this policy

We may update this policy from time to time. We will post the revised version here with a new “last updated” date, and notify you of material changes.

11. Contact & Grievance Officer

For any privacy question or to exercise your rights, contact our Grievance Officer at privacy@oakandsizzler.in or call +919999999999. Flavrly is operated from Andhra Pradesh, India.