Legal Notice

Privacy Policy

Food Villa ("we", "us", or "our") operates a specialized internal mobile application for Waiters and Stewards (the "App"), along with a management console at admin.foodvilla.net for Restaurant Managers. This Privacy Policy outlines our practices regarding the collection, use, storage, and protection of personal data in relation to the use of these platforms.

1. Categories of Personal Data Collected

We believe in data minimization. In connection with the App and management console, we only collect and process the following personal data:

• Waiter/Steward Name: Stored to identify who took a particular table order.
• Authentication Credentials: A username and password generated by the Restaurant Manager to allow waiters/stewards to log into the App.

No other personal data (such as phone numbers, emails, or personal billing details of the staff) is collected or processed through the App.

2. Device Permissions and Usage

To function correctly within the restaurant environment, the App requests permissions to access specific device capabilities. While these are hardware permissions rather than personal data, we disclose their usage for absolute transparency:

• Internet Access: The App uses the phone's internet connection to sync menus and transmit order information in real-time to the restaurant's administration and billing portal at admin.foodvilla.net.
• Bluetooth Access: The App uses local Bluetooth connectivity to discover and pair with local receipt and kitchen order ticket (KOT) printers, enabling staff to print order slips directly at the kitchen counter. We do not use Bluetooth to track your location or share data with other devices.

3. Purpose of Processing

We process the collected personal data solely for the following business and operational purposes:

• To verify identity and authenticate access for authorized staff logging into the App.
• To track, allocate, and process orders placed inside the restaurant.
• To maintain internal billing audits, performance evaluations, and restaurant records.

The legal basis for this processing is the execution of service and employment duties. The data is processed strictly within the restaurant network and is never shared, sold, or distributed to any third parties for marketing, advertising, or profiling purposes.

4. Data Storage, Security, and Retention

All data is hosted securely and processed within servers managed under Food Villa's control. We implement reasonable security practices and procedures to protect your personal data from unauthorized access, alteration, disclosure, or destruction.

Personal data is retained only as long as necessary to fulfill the operational purposes described in this policy, or as required by applicable laws in India. When a waiter or manager ceases their association with Food Villa, their credentials and associated personal details are deactivated and erased in accordance with our data erasure protocols.

5. Your Rights as a Data Principal

Under the DPDP Act, 2023, as a waiter, steward, or restaurant manager (the "Data Principal"), you have the following rights:

• Right to Information & Access: You can request details about what personal data we hold and how we process it.
• Right to Correction & Erasure: You can request us to correct inaccurate data or request the deletion of your personal data when it is no longer required for the purpose it was collected.
• Right to Grievance Redressal: You have the right to register a grievance with us regarding any aspect of our processing of your personal data.
• Right to Withdraw Consent: You have the right to withdraw your consent to data processing at any time, though this may prevent you from using the App or performing related job duties.

6. Grievance Redressal & Contact

If you have any questions, concerns, or wish to exercise any of your rights as a Data Principal under the DPDP Act, 2023, please contact our designated Grievance Officer:

If your grievance is not resolved by our Grievance Officer within the timelines specified under the DPDP Act, you also have the right to file a complaint directly with the Data Protection Board of India (DPBI).