This Privacy Policy explains how Arry Foods (“HIOC”, “we”) collects, uses, and protects your personal data when you use our website and order-ahead service, in line with India's Digital Personal Data Protection Act, 2023 (DPDP).
1. Information we collect
- Contact details you provide at checkout or sign-up: name, mobile number, and (if you create an account) email.
- Order information: items ordered, pickup time, order notes, and order history.
- Payment references: transaction identifiers from our payment gateway. We do not collect or store your card number, CVV, or UPI PIN.
- Usage data: basic, privacy-friendly analytics about how the site is used.
2. How we use your data
- To take, prepare, and fulfil your orders.
- To send you transactional updates about your order (accepted, ready, cancelled) via SMS/WhatsApp — these are essential to the service.
- To operate accounts, order history, loyalty points, and reviews.
- To send marketing messages only if you have given consent, which you can withdraw at any time.
- To comply with legal and tax obligations.
3. Payment data & PCI
Online payments are processed by a third-party, PCI-DSS compliant payment gateway. Your card/UPI details are entered directly with the gateway and are never stored on our servers. We only retain gateway references needed to reconcile and, if required, refund your payment.
4. Sharing your data
We share data only as needed to run the service:
- Our payment gateway to process payments and refunds.
- Our SMS/WhatsApp provider to deliver order notifications.
- Where required by law or to protect our rights.
We do not sell your personal data.
5. Data retention
We keep order and account data for as long as needed to provide the service and to meet legal, accounting, and tax requirements, after which it is deleted or anonymised.
6. Your rights (DPDP)
You may request access to, correction of, or deletion of your personal data, and withdraw marketing consent at any time. To exercise these rights or raise a grievance, contact us at business.highoncaff@gmail.com.
7. Security
We use reasonable technical and organisational measures to protect your data, including encrypted connections and access controls. No method of transmission is fully secure, but we work to safeguard your information.
8. Team members: attendance & location
This section applies only to HIOC team members who use the staff portal to mark attendance. It does not apply to customers, and none of it describes data we collect from people ordering from us.
- What we read. Your device's location (latitude, longitude, and the accuracy of that reading) at the single moment you tap Clock in or Clock out.
- When we read it. Only at that moment. We do not track your location in the background, between punches, outside your shift, or at any time you are not actively marking attendance.
- Why. Solely to confirm the punch was made at the cafe, so that attendance and pay are based on a verifiable record rather than recollection.
- What is stored and who sees it. The reading, its accuracy, and the resulting distance from the cafe. The cafe owner can see how far from the cafe each of your punches was, as part of the attendance and payroll record.
- How long. The raw coordinates are deleted after 12 months; only the distance and the accepted/refused outcome are kept beyond that.
- Your choice. You may decline location access. Attendance then has to be recorded manually by the owner, and is marked as a manual entry rather than a verified punch. You can see your own attendance record, including any corrections made to it, in the staff portal at any time.
9. Contact / grievance officer
For any privacy question or grievance, contact HIOC at business.highoncaff@gmail.com or +91 56279 63898.