Privacy Policy

We collect only what is needed to take your order to the restaurant and the food to you:

• Account details — your mobile number (verified by one-time password), and the name and email address you add to your profile.
• Delivery details — the addresses you save, with any landmark or instructions you type, and your location if you choose to share it to find nearby restaurants or fill in an address.
• Orders — what you ordered, from which restaurant, when, the amount, the payment method, and for table orders the table you ordered from.
• Payment status — whether a payment succeeded, failed or was refunded, with the transaction reference Razorpay gives us. We never receive your full card number, CVV, UPI PIN or banking password.
• Reviews and messages — ratings and reviews you post, and anything you write to our support team.
• Technical data — your device and browser type, IP address and basic logs that keep the site secure and help us fix errors, and the cookies described below.

• to create your account and keep you signed in;
• to send your order to the restaurant and let it prepare, pack and deliver it;
• to process payments, and refunds when they are due;
• to send you order updates by SMS, WhatsApp, email or on-screen notifications;
• to answer your questions and resolve complaints;
• to show you restaurants that deliver to your area and the orders you placed before;
• to detect and prevent fraud, fake orders and misuse of offers;
• to meet our legal, tax and accounting obligations.

We do not sell your personal data. We share it only where an order or the law needs it:

• The restaurant you order from receives your name, phone number, delivery address and order details, so that it can prepare and deliver the order or reach you about it. Restaurants may use these details only for that order.
• Razorpay, our payment partner, processes online payments and refunds under its own privacy policy and the rules of the Reserve Bank of India.
• Service providerswho host and run the platform for us — our servers are in Amazon Web Services' Mumbai region, images are stored with Cloudflare, and messages are sent through SMS and messaging providers — under contracts that let them use the data only to provide that service.
• Authorities, when we are required to by law, a court order, or to protect the safety of a person.

Your data is stored on servers in India. We keep your account details for as long as your account is open. Order and payment records are kept for eight years after the order, because tax and accounting law requires it. Support conversations are kept for two years. Server logs are deleted within 90 days.

When you delete your account, we remove or anonymise your profile and saved addresses within 30 days, except for the order records we must keep by law.

The site runs over HTTPS only. Our servers are not reachable directly from the internet, the database accepts connections only from our own application server, and access is limited to the people who need it to run the service. Payments are handled entirely on Razorpay's PCI-DSS compliant systems. No system is perfectly secure, but if a breach ever affects your data we will tell you and the authorities as the law requires.

Under the Digital Personal Data Protection Act, 2023 you can:

• see the personal data we hold about you, and how it is used;
• correct or update it — most of it directly from your account page;
• ask us to delete it, subject to the records we must keep by law;
• withdraw consent you have given, for example for promotional messages;
• nominate someone to exercise these rights for you;
• complain to our Grievance Officer, and then to the Data Protection Board of India.

Write to winkgetmeal@gmail.com from the email on your account, or call us from your registered number, and we will respond within 30 days. Order updates are part of the service and cannot be switched off while an order is active; promotional messages can be switched off at any time.

We use a small number of cookies and similar browser storage: to keep you signed in, to remember your city and your cart, and to remember whether you chose the light or dark theme. We do not use advertising cookies. See the Cookie Policy for details. Blocking cookies in your browser will sign you out and empty your cart.

Wink Eat is meant for adults. We do not knowingly create accounts for children under 18 without a parent's consent; if you believe a child has given us personal data, contact us and we will delete it.

If we change how we use your data, we will update this page and the date at the top, and for significant changes we will tell you on the site or by message before they take effect.

Our Grievance Officer for privacy matters is Chandrabhan Kumar Yadav. We acknowledge every complaint within 48 hours.

• Email: winkgetmeal@gmail.com
• Phone: +91 62045 49968 (10:00 am to 10:00 pm, all days)
• Post: Chandrabhan Kumar Yadav, Mishrabatarahan, Gopalganj, Bihar 841438