Privacy Policy

Last Updated: 23 June 2026

1. Introduction

Saini's Hospitality (“we,” “us,” “our,” operating brands Toku, Trisarah, House of Sopranos, and Cater 9) is committed to protecting the privacy of visitors and customers (“you,” “your”) who use our website and mobile application (collectively, the “Platform”).

This Privacy Policy explains how we collect, use, disclose, and safeguard your information, in compliance with the Information Technology Act, 2000, the IT (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection Act, 2023.

2. Information We Collect

We may collect the following types of information:

  • Personal identification information — name, phone number, email address
  • Delivery information — address, landmark, pincode
  • Order information — order history, items ordered, special instructions
  • Payment information — transaction ID and status only. We do NOT store card, UPI, or bank details, which are processed directly by Paytm and Razorpay
  • Device and usage information — IP address, browser type, pages visited, via cookies
  • Communications sent via our contact form or support channels

3. How We Use Your Information

We use the information we collect to:

  • Process and deliver your orders
  • Communicate order status via SMS, email, or WhatsApp
  • Provide customer support and respond to inquiries
  • Improve our menu, services, and Platform experience
  • Send promotional offers (only with consent; opt-out available anytime)
  • Detect and prevent fraud or unauthorized activity
  • Comply with legal obligations and regulatory requirements

4. Third-Party Disclosure

We share information only with the following categories of service providers:

  • Payment gateways (Paytm, Razorpay) — to process payments securely
  • Delivery partners (Porter, Rapido) — name, phone, and address shared to fulfil delivery
  • Point-of-sale providers — for kitchen operations and order management
  • WhatsApp Business API providers — for order notifications, with consent
  • Analytics and hosting providers — to improve Platform performance

We do not sell or rent your personal information to third parties for their independent marketing purposes.

5. Data Protection Measures

We implement industry-standard security measures, including:

  • Encrypted data transmission (SSL/TLS)
  • Restricted employee access on a need-to-know basis
  • Secure cloud hosting with reputable providers
  • Regular security reviews and vulnerability assessments

While we strive to protect your data, no method of internet transmission or electronic storage is 100% secure. We cannot guarantee absolute security.

6. Your Rights

You have the right to:

  • Access the personal information we hold about you
  • Request correction of inaccurate or incomplete information
  • Request deletion of your data, subject to legal retention requirements
  • Withdraw consent for promotional communications at any time
  • Lodge a grievance with our Grievance Officer (see Section 11)

7. Cookies Policy

We use essential cookies (session management, cart persistence) and analytics cookies (usage patterns, page views) to provide and improve our services.

You can control or disable cookies via your browser settings, though this may affect cart persistence and other Platform functionality.

8. Data Retention

We retain personal information as long as necessary to fulfil the purposes outlined in this policy, comply with legal obligations (tax records, consumer protection), resolve disputes, and enforce our agreements.

9. Children's Privacy

Our Platform is not directed at individuals under 18 years of age. We do not knowingly collect personal information from minors. If you believe we have inadvertently collected such data, please contact us immediately.

10. Policy Updates

We may update this policy periodically to reflect changes in our practices or applicable law. Material changes will be notified via a Platform banner or email/SMS at least 7 days before taking effect.

11. Grievance Officer & Compliance

Per the Information Technology Act, 2000:

We acknowledge grievances within 24 hours and aim to resolve them within 30 days.

12. Governing Law

This Privacy Policy is governed by and construed in accordance with the laws of India.

13. Contact Us

For questions about this Privacy Policy, please contact us at sainishospitality@gmail.com or +91 9502 63 6611.