Privacy Policy

Shyama Foods (“Shyama Foods”, “we”, “us”, “our”) is a Data Fiduciary for the purposes of India's Digital Personal Data Protection Act, 2023 (“DPDP Act”) in respect of the personal data we collect through www.shyamafoods.com (the “Site”). We are an FSSAI-licensed corporate catering, cloud kitchen and hospitality business (Lic. No. 20823005001042) serving workplaces across Delhi NCR.

This Privacy Policy explains what personal data we collect through the Site, why we collect it, how we use and protect it, and the rights you have as a Data Principal. It applies to visitors to the Site and to enquiries submitted through it; it does not cover personal data we may collect offline, for example directly from our corporate clients under separate service agreements.

We collect personal data in the following ways:

• Enquiry form. When you submit the “Request a quote” form on our Contact page, we collect your name, company name, work email, phone number, service of interest and your message.
• Cookies and usage data. With your consent, we collect analytics data such as pages viewed and general usage patterns, as described in our Cookie Policy.
• Admin panel access. Our staff sign in to a password-protected admin panel to manage enquiries and menu content. This account data (name, email, hashed password) belongs to our team, not to Site visitors.

We do not knowingly collect sensitive categories of personal data (such as financial, health or biometric data) through the Site.

We use the personal data described above to:

• Respond to your enquiry and arrange a tasting session or quote;
• Plan and deliver the catering, cloud kitchen or hospitality services you request;
• Send you service-related communications by phone or email;
• Understand and improve how visitors use the Site, where you have consented to analytics cookies; and
• Meet our legal, tax and regulatory obligations, including under the FSSAI licensing regime.

We do not sell your personal data, and we do not use it for unrelated advertising.

We process personal data submitted through the enquiry form on the basis of your consent, given by voluntarily submitting the form, and to take steps at your request before entering into a service arrangement with your organisation. We process cookies and analytics data only where you have given consent through the cookie banner, and you may withdraw that consent at any time using Cookie Settings in the footer.

We do not sell or rent your personal data. We share it only with the following categories of recipients, strictly to operate the Site and respond to your enquiry:

• Our internal team, who receive enquiry details by email to follow up with you;
• Service providers who host the Site, store enquiry records, and deliver transactional email on our behalf, acting under our instructions;
• Google Analytics, only if you consent to Analytics cookies; and
• Authorities, where required by law or to protect our legal rights.

We apply reasonable security safeguards to protect personal data against unauthorised access, alteration, disclosure or destruction, including access-controlled admin accounts, hashed passwords, and signed, HTTP-only session cookies for staff logins. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we work to keep these safeguards up to date.

We retain enquiry records for as long as reasonably necessary to respond to you and maintain a record of our business relationship, or until you ask us to erase it, whichever is earlier, unless a longer period is required to meet a legal obligation. Cookie consent preferences are retained for up to 180 days, as explained in our Cookie Policy.

Under the DPDP Act, you have the right to:

• Obtain a summary of the personal data we hold about you and how we process it;
• Request correction, completion or updating of your personal data;
• Request erasure of your personal data, unless we need to retain it for a legal purpose;
• Withdraw your consent at any time, as easily as you gave it;
• Nominate another individual to exercise these rights on your behalf in the event of your death or incapacity; and
• Register a grievance with us, and, if unresolved, with the Data Protection Board of India.

To exercise any of these rights, write to us using the contact details below. We will respond as soon as reasonably possible.

The Site is intended for businesses and individuals engaging Shyama Foods for catering services, and is not directed at children. We do not knowingly collect personal data from children through the Site.

Some of our service providers, such as our hosting and email infrastructure, may process data on servers located outside India. Where this occurs, we take reasonable steps to ensure your data continues to be protected consistently with this Policy and the DPDP Act.

We may update this Privacy Policy from time to time to reflect changes in our practices or in applicable law. The “Effective date” at the top of this page shows when it was last revised. We encourage you to review this page periodically.

For questions about this Privacy Policy, to exercise your rights, or to raise a grievance about how we handle your personal data, contact our Grievance Officer at info@shyamafoods.com or +91 98997-63732, Monday to Friday, 10 AM to 6 PM.