Privacy Policy

OrdNow Technologies Pvt. Ltd. ('OrdNow') is the Data Fiduciary under the Digital Personal Data Protection Act, 2023 (DPDP Act) for personal data collected through our platform. Our Data Protection Officer can be reached at dpo@ordnow.com.

Identity & Contact Data: Name, mobile number, email address collected at registration.

Location Data: Delivery address, GPS coordinates for location-based services. We collect location only when the app is in use or when you explicitly grant background location permission.

Order Data: Order history, restaurant preferences, payment method (non-sensitive reference only).

Device Data: Device type, operating system, IP address, browser type for fraud prevention and analytics.

Communication Data: Support tickets, chat messages, reviews and ratings you submit.

Order Fulfilment: Processing your food orders, coordinating with restaurants and delivery partners (Contractual Necessity).

Customer Support: Handling complaints, refund requests, and account issues (Legitimate Interest / Consent).

Marketing: Sending promotions and offers — only with your explicit consent, which you may withdraw at any time from Notification Settings.

Safety & Fraud Prevention: Detecting and preventing fraudulent transactions (Legitimate Interest).

Compliance: Meeting legal obligations under Indian law including IT Act 2000, Consumer Protection Act 2019, and DPDP Act 2023.

We share your personal data with restaurant partners (name, phone, address) only to fulfil your order. We share your name and order details with delivery partners for delivery purposes.

We engage third-party processors including Razorpay (payments), Firebase (push notifications), and Google Analytics (usage analytics). All processors are bound by data processing agreements.

We do not sell your personal data to third parties for advertising purposes.

Right to Access: Request a summary of personal data held by us.

Right to Correction: Request correction of inaccurate or incomplete data.

Right to Erasure: Request deletion of your data — exercise via Account → Profile → Delete My Account.

Right to Grievance Redressal: File a complaint with our Grievance Officer (contact on Help page) or the Data Protection Board of India.

Right to Nominate: Nominate another individual to exercise your rights in case of death or incapacity.

To exercise these rights, email privacy@ordnow.com. We will respond within 30 days.

Account data is retained as long as your account is active. On account deletion, personal data is deleted within 30 days except where retention is required by law (e.g., financial records under GST regulations for 7 years).

We implement industry-standard security measures including TLS encryption in transit, AES-256 encryption at rest, multi-factor authentication for admin systems, and regular penetration testing.

Despite these measures, no internet transmission is 100% secure. Report any security concerns to security@ordnow.com.

Our services are not directed to individuals under 18. We do not knowingly collect data from minors. If you believe a minor has registered, please contact us for immediate deletion.

Data Protection Officer: Arjun Chatterjee | dpo@ordnow.com | OrdNow Technologies Pvt. Ltd., 1, Karin Hossain Lane, Kolkata, West Bengal 700017