Privacy Policy

Last updated: 25 August 2026

This policy explains what personal data Earnest Foodworks Private Limited (trading as Dhabe Wale Sardar Ji) collects when you order from us, why, and what you can ask us to do about it. It is written with the Digital Personal Data Protection Act, 2023 in mind.

What we collect

Data	When	Why
Mobile number	Always — required	To verify it's you by OTP, and to contact you about your order
Name	At checkout	So staff can identify your order
Email	Optional	Order receipts, if you give it
Vehicle registration	Optional, dine-in only	So staff can bring your order to your car
Delivery address	Delivery orders only	To deliver your food
Order history	Every order	To prepare and fulfil orders, and to meet tax record-keeping duties
Technical data	Automatically	IP address, used to rate-limit OTP requests and prevent abuse

We do not collect or store your card, UPI or banking details. Those go directly to Razorpay and never reach our systems.

Why we're allowed to hold it

• To perform our contract with you — we cannot prepare or deliver an order without knowing what it is and how to reach you.
• Your consent — for optional fields, and for any promotional messages, which you can withdraw at any time.
• Legal obligation — tax and accounting law requires us to retain transaction records.

Who we share it with

Only what each party needs, and only to fulfil your order:

Who	What they get
Razorpay — payments	Order amount, and contact details you enter at payment
Delivery partner (Porter)	Delivery address and phone — delivery orders only
SMS provider	Mobile number, to deliver the OTP
Hosting & database	Data stored securely on our behalf

We do not sell your personal data, and we do not share it for anyone else's advertising.

How long we keep it

• Order and transaction records — retained as required by Indian tax and company law.
• OTP codes — stored only as a one-way hash, never in readable form, and expire in 10 minutes.
• Login sessions — expire after 90 days.
• Account details — kept while your account is active, then deleted on request unless we must retain them by law.

Your rights

Under the DPDP Act you may ask us to:

• Tell you what personal data we hold about you
• Correct anything inaccurate or incomplete
• Erase your data, where we are not legally required to keep it
• Withdraw consent for optional processing, including promotional messages
• Nominate someone to exercise these rights if you are unable to

Contact the grievance officer below. We will respond within 30 days.

Messages you may receive

• Order-related messages — OTP and order updates. These are necessary to provide the service and are not marketing.
• Promotional messages — only if you have opted in. Every one includes a way to stop, and you can withdraw consent at any time without affecting your ability to order.

Storage on your device

Your cart is stored in your browser's local storage so it survives if you close the page. A secure, HTTP-only cookie keeps you signed in. We do not use advertising or tracking cookies.

Security

Data is transmitted over HTTPS and stored in an access-controlled database. OTP codes and session tokens are stored only as hashes. No system is perfectly secure, but we take reasonable technical and organisational measures to protect your data.

Children

The service is not intended for anyone under 18, and we do not knowingly collect their data.

Grievance officer

Name	Gaurav Batra
Phone	+91 93100 11161
Address	DSS 47, High Street 52, HSVP Market, Sector 52, Gurugram, Haryana 122002

Changes

We may update this policy. Material changes will be reflected in the date at the top of this page.

← Back to Dhabe Wale Sardar Ji