Privacy policy
Last updated
This policy explains what we collect when you order from BiriyaniKing, why we need it, who else sees it, and what you can ask us to do with it.
Draft wording, awaiting professional review. Don’t rely on it, and don’t publish this page — it is excluded from search engines and from the sitemap until the review is signed off.
1. What we collect
To take an order: your name, email address, phone number, delivery address, what you ordered and the outlet that made it.
To take payment: the payment gateway processes your card, UPI or wallet details and returns a reference and a result. Card numbers never reach our servers and we do not store them.
To sign you in: your email address and the one-time codes we send it, which are stored only as hashes and expire.
To book a trial meal or handle a franchise enquiry: what you tell us in the form — your location, the format you are interested in, your investment range and your food-business background.
Automatically, when you browse: your IP address, device and browser, and which pages you opened, so we can keep the site working and secure.
2. Why we use it
To accept, cook, deliver and invoice your order, and to tell you where it is.
To take payment and issue refunds, and to reconcile what each outlet is owed.
To meet our obligations under tax and food-safety law, which set how long some records must be kept.
To keep accounts and payments secure, and to investigate fraud or abuse.
To answer your support requests.
To send marketing, only if you asked for it. Every marketing email has an unsubscribe link, and order and account emails are not marketing.
3. Who else sees it
The outlet that makes your order, and the partner who operates it, see what they need to cook and deliver it.
Our delivery riders see your name, address and phone number for the duration of the delivery.
Our payment gateway, email provider and hosting provider process data on our instructions and may not use it for anything else.
Swiggy and Zomato, when you order through them — their own privacy policies cover what they collect.
A public authority, where the law requires it.
We do not sell personal data.
4. How long we keep it
Order, invoice and tax records are kept for as long as tax law requires. Support conversations are kept while a complaint is open and for a reasonable period afterwards. One-time codes expire within minutes. An inactive account and its addresses are deleted on request, except where a record must be kept for tax.
5. Your choices
You can edit your addresses and contact details yourself in your account at any time.
6. Cookies
We set a session cookie so you stay signed in and your cart survives a page reload, and we remember the delivery location you chose. These are necessary for the site to work. We do not use advertising cookies.
7. Security
Traffic to this site is encrypted, passwords and one-time codes are stored only as hashes, and access to customer data is limited to staff who need it for their role. No system is perfectly secure; if a breach affects you we will tell you and the authorities as the law requires.
8. Children
This site is not intended for children under 18, and we do not knowingly collect their data.