We only collect what we need to get a warm thali to your door. This policy explains what that is, why we need it and how we keep it safe.
1. Who we are
The Thali Project (“TTP”, “we”, “us”, “our”) is a delivery-only Gujarati cloud kitchen based in Ahmedabad. This Privacy Policy explains what personal information we collect when you visit thethaliproject.com or order from us, how we use it, and the choices you have.
2. Information we collect
Information you give us
When you order or contact us by WhatsApp, phone, email or social media, we may collect:
- Your name and mobile number
- Your delivery address and any landmark or directions you share
- Your order details, meal preferences and any notes you send us (for example, spice level or ingredients you want to avoid)
- Messages, photos or feedback you send us, including complaints
- Payment confirmation details, where applicable. We do not ask for or store your card numbers, UPI PINs or banking passwords.
Information collected automatically
Like most websites, our hosting provider may automatically record basic technical information when you visit, such as your IP address, browser type, device type and the pages you view. This is used to keep the website secure and running.
Our website loads fonts from Google Fonts, which means your browser connects to Google’s servers. At the time of this update, our website does not use advertising cookies or third-party analytics trackers. If this changes, we will update this policy.
3. How we use your information
- To receive, prepare, deliver and confirm your orders
- To contact you about your order, delivery or any issue with it
- To respond to your questions, feedback and complaints
- To send you updates about our menu and offers, only if you have agreed to receive them. You can opt out at any time.
- To improve our food, service and website
- To prevent fraud or misuse, and to meet our legal and tax obligations
We process your personal data on the basis of your consent, which you give when you share your details to place an order, and for other legitimate uses permitted under the Digital Personal Data Protection Act, 2023 and other applicable Indian laws.
4. How we share your information
We do not sell or rent your personal information. We share it only when needed to serve you:
- Delivery staff and partners: your name, phone number and address, so they can deliver your order
- Messaging platforms: when you contact us on WhatsApp, your messages are handled by WhatsApp (Meta) under its own privacy policy
- Food delivery platforms: if you order through Zomato, Swiggy, Toiing or a similar platform, that platform collects your data under its own privacy policy and shares with us only what is needed to fulfil your order
- Service providers: such as our website hosting provider, who process data on our behalf
- Legal requirements: where required by law, court order or a government authority
5. How long we keep it
We keep your information only for as long as needed to serve you, resolve any issues, and meet legal, tax and accounting requirements. When it is no longer needed, we delete it or make it anonymous. You can ask us to delete your information at any time (see “Your rights”).
6. How we protect it
We take reasonable steps to protect your information, including limiting access to people who need it to process your order. No method of storing or sending data online is completely secure, so we cannot guarantee absolute security, but we will act promptly if we become aware of a problem.
7. Your rights
Under the Digital Personal Data Protection Act, 2023, you have the right to:
- Ask what personal data we hold about you and how we use it
- Ask us to correct or update inaccurate or incomplete information
- Ask us to delete your personal data, unless we need to keep it by law
- Withdraw your consent at any time, for example by asking us to stop sending offers
- Nominate another person to exercise these rights on your behalf in case of death or incapacity
- Raise a complaint with our Grievance Officer, and if unresolved, with the Data Protection Board of India
To exercise any of these rights, message or email us using the details below.
8. Offers and messages
If you agree, we may send you occasional messages about our menu, new thalis or offers on WhatsApp or SMS. You can stop these at any time by replying “STOP” or telling us directly. Order-related messages, such as confirmations and delivery updates, are not marketing and will still be sent.
9. Children
Our website and ordering service are meant for adults. If you are under 18, please place orders with the involvement of a parent or guardian. If we learn that we have collected data from a child without such consent, we will delete it.
10. Third-party links
Our website links to WhatsApp, Instagram, Facebook and food delivery platforms. These services have their own privacy policies, and we are not responsible for how they handle your data.
11. Changes to this policy
We may update this Privacy Policy from time to time. The latest version will always be on this page, with the date it was last updated at the top.