Privacy Policy

1. Who we are

Rakani Hospitality LLP is a limited liability partnership registered in India (GSTIN 06ABGFR2191G1Z7). We are the “Data Fiduciary” under the DPDP Act and the “data controller” under the GDPR for the personal data described here.

This policy covers our website and the enquiries made through it. When we provide catering or cafeteria services to a client, the agreement for those services may include further terms about the data we handle on that client’s behalf.

2. What we collect

Information you give us

When you send an enquiry through our website, we collect the details you enter:

• your name and phone number (needed for us to reply);
• and, if you choose to share them, your company, email address, the kind of service you need, expected headcount, preferred date, location and anything else you tell us in your message, such as dietary requirements.

We also receive the information you share when you email, call or message us on WhatsApp.

Information collected automatically

• Technical data. Like every website, our hosting provider receives your IP address, browser and device type, the pages you request and the time of each request. This is used to deliver the site and keep it secure, and is not used to identify you.
• Analytics, only with your consent. If you accept analytics, we measure page views, the page that referred you, your approximate country, device type and page loading speed. This is anonymous and uses no cookies. See Cookies and similar technologies.

We do not take payments on this website, and we do not ask for financial details, passwords or government identity numbers. Please do not include such information in an enquiry.

3. How we use it

• to reply to your enquiry and prepare a proposal or quotation;
• to plan and deliver the services you ask for, including menus that respect any dietary requirements you share;
• to keep in touch about an enquiry or an ongoing service;
• to understand how the website is used and improve it, if you have accepted analytics;
• to keep the website and our enquiry form secure and free of spam and misuse;
• to meet our legal, tax and regulatory obligations and to establish or defend legal claims.

We will only send you promotional messages if you have agreed to receive them, and you can stop them at any time. We do not sell your personal data, and we do not use it for automated decision-making that has legal or similarly significant effects on you.

4. Our legal basis

Under the DPDP Act, we process the details in your enquiry on the basis of the consent you give by sending it to us, for the purpose of responding to you. We use technical data and analytics as described above, analytics only with your consent. We may also process data where the law allows it without consent, for example to comply with a legal obligation or a court order. You can withdraw consent at any time (see Your rights). Withdrawing consent does not affect processing that took place before it.

Under the GDPR, our legal bases are:

• steps prior to entering into a contract, and the contract itself, for handling enquiries, proposals and services;
• legitimate interests in running a secure website and replying to messages;
• consent for analytics;
• legal obligation where we must keep or disclose information by law.

5. Who we share it with

We share personal data only with people who need it to help us, and only as much as they need:

• Our team at Rakani Hospitality LLP, to respond to you and deliver our services.
• Service providers who act on our instructions, under contracts that require them to protect your data. These are Vercel Inc. (website hosting, analytics and performance measurement), Resend (delivery of enquiry emails to our team) and our email provider.
• Professional advisers, such as lawyers and accountants, where necessary.
• Authorities, where we are required to by law or by a lawful request.
• A successor business, if all or part of our business is restructured, merged or sold, under the same protections.

If you contact us on WhatsApp, your messages are also handled by WhatsApp (Meta) under its own privacy policy.

6. International transfers

Our hosting and email providers may store or process data outside India, including in the United States and the European Union. The DPDP Act permits this except to countries the Government of India restricts, and we will follow any such restriction. For personal data covered by the GDPR, our providers rely on recognised safeguards such as the European Commission’s Standard Contractual Clauses.

7. How long we keep it

• Enquiries that do not lead to a service are kept for up to 3 years after our last contact, so that we can follow up on a discussion you started. After that we delete them.
• Client records are kept for as long as the relationship lasts, and afterwards for as long as tax, accounting and other laws require.
• Technical logs are kept by our hosting provider for a short period for security, and then deleted.
• Analytics are anonymous and aggregated, so they do not identify you.

Once data is no longer needed for the purpose it was collected for, and the law does not require us to keep it, we delete it or make it anonymous.

8. Keeping it secure

We use reasonable security practices and procedures to protect personal data, as required by Indian law. These include encrypted (HTTPS) connections, access limited to the team members who need it, reputable service providers, and checks that keep automated spam out of our enquiry form. No method of transmission or storage is completely secure, but if a personal data breach affects you, we will notify you and the relevant authorities as the law requires.

9. Your rights

Depending on the law that applies to you, you have the right to:

• ask what personal data we hold about you, how we use it and who we have shared it with;
• have inaccurate or incomplete data corrected, completed or updated;
• have your data erased, unless we must keep it by law;
• withdraw your consent at any time, as easily as you gave it;
• nominate another person to exercise your rights if you die or become unable to do so (DPDP Act);
• have your grievances addressed (see section 12);
• and, under the GDPR, restrict or object to our processing and receive your data in a portable format.

To use any of these rights, email rakshak.chopra@rakani.in. We may need to confirm your identity first. We will respond within 30 days, and you will not be charged for a reasonable request.

10. Cookies and similar technologies

Our website does not use advertising cookies or any cookies that track you across other websites. It stores only the following small items in your browser:

Strictly necessary items cannot be switched off, because the site needs them to work properly. Analytics stays off unless you accept it. If your browser sends a Global Privacy Control signal, we treat it as a rejection.

You can change your choice at any time: Cookie preferences. You can also clear site data in your browser settings.

11. Children

Our website and services are meant for adults arranging catering for workplaces and occasions. We do not knowingly collect personal data from anyone under 18. If you believe a child has sent us their details, please contact us and we will delete them.

12. Grievance Officer and complaints

If you have a question or complaint about how we handle your personal data, please contact our Grievance Officer:

We will acknowledge your complaint promptly and aim to resolve it within 30 days. If you are not satisfied with our response, you may complain to the Data Protection Board of India. If you are in the EU or UK, you may also complain to your local data protection authority.

13. Changes to this policy

We may update this policy from time to time, for example when the law changes or our website does. The date at the top shows when it was last updated. If we make a significant change, we will make it clear on this page.

Please also read our Terms & Conditions.