Privacy Policy

1. Introduction

Welcome to Spinacho, a brand owned and operated by Nutriwave Spinacho Foods Private Limited ("Spinacho", "Company", "we", "our", or "us"). Spinacho operates a digital platform that enables users to discover and order food from independent Restaurant Partners.

This Privacy Policy explains how we collect, use, disclose, store, and protect personal information when you access or use the Spinacho website, mobile application, or any other digital services operated by the Company (collectively, the "Platform").

We are committed to protecting your privacy and handling your personal information responsibly, transparently, and in accordance with applicable laws. By accessing or using the Platform, you acknowledge that you have read, understood, and agreed to this Privacy Policy.

2. Scope

This Privacy Policy applies to all users of the Platform, including:

• Visitors browsing the Platform;
• Registered users;
• Customers placing orders;
• Restaurant Partners using our services; and
• Individuals communicating with us through our official support channels.

This Privacy Policy applies only to information collected by Spinacho and does not apply to third-party websites, applications, or services that may be linked from the Platform.

3. Information We Collect

Depending on how you interact with the Platform, we may collect the following categories of information.

3.1 Personal Information

Information that may identify you directly, including:

• Full Name
• Mobile Number
• Email Address
• Delivery Address
• Billing Address

3.2 Account Information

When you create or manage an account, we may collect:

• Account credentials
• Encrypted password
• Account preferences
• Login activity

3.3 Order Information

To facilitate your orders, we may collect:

• Order history
• Restaurant selected
• Items ordered
• Delivery instructions
• Order amount
• Payment status
• Refund status

3.4 Payment Information

Payments made through the Platform are processed by authorised third-party payment service providers. Spinacho does not store:

• Credit or debit card numbers;
• CVV;
• UPI PIN;
• Internet banking credentials; or
• Any other sensitive payment authentication information.

We may receive limited payment-related information such as:

• Transaction reference;
• Payment confirmation;
• Payment status; and
• Refund status.

3.5 Device & Technical Information

We may automatically collect certain technical information, including:

• IP Address;
• Device type;
• Browser type;
• Operating System;
• App version;
• Device identifiers;
• Language settings;
• Time zone; and
• Log information.

3.6 Location Information

With your permission, the Platform may collect location information to:

• Determine service availability;
• Display nearby Restaurant Partners;
• Estimate delivery times; and
• Improve Platform functionality.

Location access may be disabled at any time through your device settings, although certain Platform features may not function as intended.

3.7 Communications

When you contact us, we may retain records of:

• Customer support requests;
• Emails;
• Feedback;
• Reviews;
• Surveys; and
• Other communications relating to the Platform.

4. How We Collect Information

Information may be collected when you:

• Register or manage an account;
• Browse the Platform;
• Place an Order;
• Make a payment;
• Contact Customer Support;
• Subscribe to communications;
• Submit reviews or feedback; or
• Interact with cookies or similar technologies.

5. Purpose of Processing

We process personal information for legitimate business purposes, including to:

• Create and manage user accounts;
• Process and fulfil Orders;
• Facilitate payments and refunds;
• Provide customer support;
• Communicate important service updates;
• Improve the Platform and user experience;
• Detect, prevent, and investigate fraud or unauthorised activity;
• Maintain business records; and
• Comply with legal, regulatory, and contractual obligations.

We do not sell your personal information to third parties.

6. Sharing of Information

We may share your information only where necessary for the operation of the Platform or where required by law.

Restaurant Partners

Information necessary to prepare and fulfil your Order, including:

• Name;
• Contact Number;
• Delivery Address; and
• Order details.

Delivery Service Providers

Information required to complete the delivery of your Order.

Payment Service Providers

Information required to process payments and refunds securely.

Service Providers

Trusted third-party service providers who assist us with:

• Cloud hosting;
• Technology infrastructure;
• Customer support;
• Analytics;
• Email and communication services.

These service providers are authorised to process information only for the services they provide to Spinacho.

Legal & Regulatory Authorities

Where disclosure is required by applicable law, judicial order, governmental authority, or regulatory requirement.

7. Cookies & Similar Technologies

The Platform uses cookies and similar technologies to:

• Maintain secure user sessions;
• Remember user preferences;
• Improve website performance;
• Analyse Platform usage; and
• Enhance user experience.

Additional information regarding our use of cookies is available in our Cookie Policy.

8. Data Security

Spinacho maintains reasonable administrative, technical, and organisational safeguards designed to protect personal information against unauthorised access, disclosure, alteration, misuse, or destruction. Security measures may include:

• Secure encrypted connections (SSL/TLS);
• Restricted access controls;
• Authentication mechanisms;
• Secure infrastructure; and
• Routine security monitoring.

While we strive to protect your information, no method of electronic storage or internet transmission is completely secure.

9. Data Retention

We retain personal information only for as long as necessary to:

• Provide our services;
• Comply with applicable legal obligations;
• Resolve disputes;
• Enforce our agreements; and
• Maintain legitimate business records.

Information that is no longer required will be securely deleted, anonymised, or retained only where required by law.

10. Your Rights

Subject to applicable law, you may request to:

• Access your personal information;
• Correct inaccurate information;
• Update incomplete information;
• Request deletion where legally permissible; and
• Withdraw consent where processing is based on consent.

To exercise these rights, please contact us using the details provided below.

11. Third-Party Services

The Platform may contain links to third-party websites, applications, or services. Spinacho is not responsible for the privacy practices or content of such third parties. Users are encouraged to review the privacy policies of those third parties before providing personal information.

12. Children's Privacy

The Platform is intended for individuals who are legally capable of entering into binding agreements under applicable law. Spinacho does not knowingly collect personal information from children. If we become aware that such information has been collected inadvertently, appropriate measures will be taken to remove it.

13. Changes to this Privacy Policy

Spinacho may revise this Privacy Policy from time to time to reflect changes in legal requirements, business operations, or technology. The updated version will be published on the Platform together with the revised "Last Updated" date. Continued use of the Platform following publication of any revised Privacy Policy constitutes acceptance of the updated Policy.

14. Contact Us

If you have any questions regarding this Privacy Policy or the processing of your personal information, please contact us: