Privacy Policy — de Delhi

On our website (dedelhikitchen.com): Booking a table sends us your name, email address and phone number, the date, time and size of your party, and any note you add; we email a confirmation and, on the day, a reminder you can switch off, and delete the booking six months after the visit. A catering inquiry sends us your name, email address and phone number, and the details of your event: its type, date, number of guests, city, the style of service you want, and your message. A message from the contact page sends us your name, email address, phone number and message. We use these details only to answer you and to arrange what you asked for. A reservation is a request until we confirm it.

When you place an order: your name, so the kitchen and counter staff can identify your order; your email address and/or phone number, if you choose to provide them — used for your receipt and to connect your orders to you if you return; a delivery address, only if you choose delivery; and the contents of your order, any notes you add to it, and your tip. You can order as a guest. An account is never required.

If you create an account (optional): sign-in uses a one-time code sent to your email — there are no passwords. An account stores your name, email, phone number, saved delivery address, order history, and (if you choose to save a card, where that is offered) a reference to your saved payment card. You can delete your account at any time (Account → Delete account), which removes this information.

If you use a gift card or loyalty, where offered: checking a gift card balance uses the gift card number you enter. If you join a loyalty program, your phone number identifies your loyalty account.

Card payments are processed by Clover (Fiserv, Inc.), our payment processor. When you enter a card, the card form is provided directly by Clover (Fiserv, Inc.): your full card number, expiry, and security code go to Clover (Fiserv, Inc.) and never touch our systems. We receive only a one-time payment token and a masked reference (card brand and last four digits). If you save a card to your account, it is stored by Clover (Fiserv, Inc.), not by us. Their handling of your payment data is described in their privacy policy.

Order status notifications (optional): if you allow notifications, the app registers a push token for your device so we can tell you about your order. Decline or disable notifications any time in your device settings; ordering works fully without them.

Diagnostics: if the app or our service encounters an error, technical details (device model, operating system version, app version, and what went wrong) are reported to our error-monitoring service so we can fix problems. These reports are not used for advertising or profiling.

On your device: your cart, favourites, and recent orders are stored locally for convenience. They stay on the device.

Website analytics (dedelhikitchen.com and order.dedelhikitchen.com only, and only if you accept): we use Google Analytics to understand how our websites are used — which pages are opened, which dishes are looked at, whether a reservation request is sent, and whether an order is completed — so we can make them better. If you accept cookies, Google Analytics stores two cookies in your browser, _ga and _ga_2B55MXPH9D, which hold a randomly generated identifier for the browser rather than anything about you. We have also turned on Google signals, one of Google's advertising features: if you are signed in to a Google account and allow Google to personalize ads, Google can connect your visits from different devices and add approximate age, gender and interests to our reports. We only ever see totals across many visitors, never who you are, and you can switch it off by turning off ad personalization in your Google account (My Ad Center). We do not use Google Analytics to show you ads, it is not linked to any advertising account, and we do not sell or share this information. The data is kept for 14 months and then deleted automatically. If you decline, no analytics cookie is stored; before you answer, measurement is anonymous and cookieless. You answer once for both websites, and you can change your answer by clearing their cookies. The de Delhi mobile app does not do this.

• We do not sell or rent your information to anyone.
• We show no ads and never use your information to target advertising. The de Delhi mobile app uses no advertising or cross-app tracking technology; Google signals, described above, is used on our websites only.
• We do not access your device's location, contacts, photos, or microphone.
• We collect nothing for purposes unrelated to your orders, reservations and events.

• To prepare, deliver, and hand over your orders, and to send your receipt.
• To answer reservation requests, catering inquiries and messages sent through our website.
• To tell you the status of an order you placed.
• To process refunds and respond when you contact us about an order.
• To operate loyalty rewards and gift cards, if you use them.
• To keep the service secure and to meet legal obligations (for example, tax and bookkeeping records of sales).

Only the service providers needed to run our websites and the app, and only for the purposes above:

• Clover (Fiserv, Inc.) — payments, orders, receipts, and (where offered) saved cards, loyalty and gift cards
• Expo — delivering push notifications
• Mailgun — sending sign-in code emails, and passing on what you send through our website's forms
• Sentry — error and crash diagnostics
• Google (Analytics, with Google signals) — understanding how our websites are used, only if you accept cookies
• Cloud hosting providers — running our websites, servers and database

We may also disclose information if required by law. If our business is ever sold or reorganized, order records may transfer as part of that business.

Order and payment records are kept as required for business, tax, and accounting purposes. Account information is kept until you delete your account. Push tokens are kept only while notifications are enabled for your device. Reservation requests, catering inquiries and messages are kept only as long as we need them to answer you and to keep a record of your booking or event. What you send through our website's forms is deleted from our systems after six months.

• Delete your account any time: Account → Delete account.
• Order as a guest and provide only your name.
• Turn off notifications in your device settings.
• Decline analytics cookies on the bar at the foot of either of our websites, or change your answer later by clearing their cookies.
• Keep your visits out of Google signals by turning off ad personalization in your Google account (My Ad Center), or stop Google Analytics in your browser altogether with Google's opt-out add-on.
• Ask us to access, correct, or delete personal information we hold about you — contact us using the details below. We handle personal information in accordance with Canadian privacy law, including PIPEDA.

All communication between our websites, the app and our servers is encrypted in transit. Payment card details are handled exclusively by Clover (Fiserv, Inc.)'s certified payment systems. Access credentials we hold are stored encrypted.

The app is a food-ordering service intended for general audiences and is not directed at children under 13. We do not knowingly collect personal information from children.

If our practices change, we will update this page and its effective date. Material changes will be noted in the app and on our website.

Questions or requests about your personal information:

• de Delhi Indian & Hakka — 1077 North Service Road, 11, Mississauga Ontario L4Y 1A6 · +1 782-414-1859
• By email: Kitchendedelhi@gmail.com
• Or through the contact options at dedelhikitchen.com