Privacy Policy

EAT Foods Pvt. Ltd. ("Aziza Kitchen") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains what we collect, how we use it, and the rights you have under the Digital Personal Data Protection Act, 2023 (India) and other applicable laws.

1. Data we collect

• Account data: name, email, phone, password (hashed), profile photo.
• Order data: delivery address, order items, special requests, payment method (we do not store full card numbers — Stripe does), invoice records.
• Health & nutrition data: if you enroll in a program — weight, waist, dietary preferences, condition tags, progress photos, coach chat messages. This is sensitive personal data; see Section 5.
• Device & usage: IP address, browser/device type, pages viewed, referral source, cookie identifiers.
• Communications: emails, WhatsApp/SMS messages with us, support tickets, surveys.

2. How we use it

• To fulfill orders, deliveries, subscriptions, and programs.
• To provide coaching, AI nutrition guidance, and progress tracking you request.
• To send transactional messages (order updates, receipts, password resets).
• To comply with tax, food-safety, and other legal obligations.
• To detect, prevent, and respond to fraud or abuse.
• With your consent — to send marketing and personalized recommendations.

3. Legal bases (DPDP Act)

We process data based on (a) your consent, (b) the legitimate uses listed in Section 7 of the DPDP Act, including performance of a contract you requested, compliance with law, and responding to medical emergencies.

4. Sharing

We share data only with:

• Service providers (Lovable Cloud / Supabase for hosting, Stripe for payments, transactional email/SMS providers) under written contracts and data-processing agreements.
• Coaches and dietitians assigned to your program — strictly limited to what they need to help you.
• Government authorities when required by law (court order, tax audit, food-safety inspection).

We do not sell your data.

5. Sensitive data

Health, nutrition, and progress photos are sensitive. We store them in a private, access-controlled bucket; only you, your assigned coach, and authorized admins can view them. You may delete them anytime from your dashboard.

6. Retention

• Invoices and tax records: 8 years (statutory requirement).
• Order history: while your account is active, plus 3 years.
• Progress data and photos: until you delete them or close your account.
• Marketing data: until you withdraw consent.

7. Your rights

• Access — request a copy of your data.
• Correction — update inaccurate data anytime from your profile.
• Erasure — close your account; we'll delete personal data except what we must retain by law.
• Withdraw consent — turn off marketing or analytics at any time.
• Grievance — contact our Data Protection Officer (below). If unresolved in 30 days, you may appeal to the Data Protection Board of India.

8. Cookies

We use strictly necessary cookies for sign-in and cart, and optional analytics/marketing cookies only with your consent (granted via our cookie banner). You can manage this anytime from the footer.

9. Security

Data is encrypted in transit (TLS) and at rest. Passwords are hashed. We use row-level security so users can read only their own data. We follow industry-standard practices but no system is 100% secure.

10. International transfers

Some service providers process data outside India. We rely on standard contractual clauses and provider certifications to maintain protection.

11. Children

Aziza Kitchen is not intended for users under 18. We do not knowingly collect data from children.

12. Grievance Officer

Data Protection Officer
EAT Foods Pvt. Ltd.
Shop 12, SG Highway, Bodakdev, Ahmedabad, Gujarat 380054, India
Email: contact@azizakitchen.com · Phone: +91 99250 00000