Privacy Policy – Son of Swaad

Last updated: Oct 22, 2026

Before publishing: replace every item in [square brackets], delete any section that does not apply to the website (e.g. online ordering or careers), and have a lawyer review the final text. Delete this note once done.

1. Who we are

Son of Swaad is a pure-veg restaurant and franchise brand. Our outlets are operated either by us or by independent franchise partners. When you deal directly with a particular outlet (for example, at the restaurant or over its own phone number), that outlet may also handle your information.

This Privacy Policy explains what personal data we collect through the Website, why we collect it, how we use and protect it, and the rights you have over it under the Digital Personal Data Protection Act, 2023, the Digital Personal Data Protection Rules, 2025, and other applicable Indian laws.

By using the Website or submitting your details to us, you acknowledge that you have read this Privacy Policy. Where we rely on your consent, we will ask for it separately and clearly.

2. Information we collect

a) Information you give us

Contact and feedback forms:name, mobile number, email address, city and your message.
Table reservations / party and catering enquiries:name, mobile number, date, time, number of guests, outlet and any special requests.
Online orders (if available on the Website):name, mobile number, delivery address, order details and payment status. We do not store your full card, UPI or net-banking details; payments are processed by our payment partner [name of payment gateway, e.g. Razorpay].
Franchise enquiries:name, mobile number, email address, city/state of interest, current occupation or business, investment capacity, property availability and any other details you choose to share.
Job applications (if applicable):name, contact details, CV and any information you include in it.
Offers, contests and loyalty programmes:name, mobile number, email and date of birth/anniversary if you choose to share them.

b) Information collected automatically

When you visit the Website we may collect your IP address, browser and device type, pages viewed, time spent, referring website and approximate location, through cookies and similar technologies (see Section 7).

c) Information from third parties

Advertising platforms:if you fill in a lead form on Facebook, Instagram or Google (for example, a franchise enquiry ad), we receive the details you submitted in that form.
Food delivery platforms:orders placed through apps such as Zomato or Swiggy are governed by those platforms’ own privacy policies. We receive only the order information they share with restaurants.

We ask only for information that is needed for the purpose stated. Please do not send us sensitive information (such as health or financial account details) that we have not asked for.

3. How we use your information

We use your personal data to:

Respond to your queries, feedback and complaints.
Confirm and manage table reservations, catering and party bookings.
Process, deliver and support online orders, and handle refunds.
Evaluate franchise enquiries, contact you about franchise opportunities and share your enquiry with the relevant regional team or franchise partner.
Review job applications.
Send you offers, festive deals, new menu and outlet-opening updates by WhatsApp, SMS, email or calls — only where you have agreed to receive them.
Run contests and loyalty programmes you sign up for.
Understand how the Website is used and improve our menu, services and marketing.
Show relevant Son of Swaad ads on social media and search platforms.
Prevent fraud, keep the Website secure, and comply with legal and tax obligations.

We process your personal data on the basis of your consent, or for the legitimate uses allowed under the DPDP Act (for example, where you voluntarily share information to get a service from us, or where processing is required by law).

4. Marketing communications

If you opt in, we may send you promotional messages. You can stop them at any time by:

replying STOPto our WhatsApp or SMS messages,
clicking “unsubscribe” in our emails, or
writing to us at [privacy email address].

Withdrawing your consent will not affect messages about an order or booking you have already made. We respect the TRAI Do-Not-Disturb (DND) registry for promotional SMS and calls.

5. Who we share your information with

We do not sell your personal data. We share it only as needed with:

Our outlets and franchise partners, to fulfil your order, booking or enquiry at the relevant outlet, or to follow up on a franchise lead in that region.
Service providerswho work on our behalf, such as website hosting, payment gateways, delivery partners, CRM/lead-management tools, WhatsApp/SMS/email service providers, and analytics and advertising platforms (e.g. Google, Meta). They may use your data only to provide services to us.
Government and law enforcement authorities, where required by law or to protect our rights, customers or the public.
A buyer or successor, if our business or part of it is sold, merged or restructured, subject to this Privacy Policy.

6. Where your data is stored

Your data is stored primarily on servers in India. Some of our service providers (for example, cloud, email or advertising platforms) may store or process data outside India. Any such transfer will follow the restrictions notified by the Government of India under the DPDP Act.

7. Cookies and tracking

The Website uses cookies and similar tools, including [Google Analytics] and the [Meta (Facebook) Pixel], to:

keep the Website working properly,
understand visitor numbers and behaviour, and
measure our ads and show relevant ads to you on other platforms.

You can block or delete cookies in your browser settings. Some parts of the Website may not work properly if you do. [If the Website has a cookie banner, add: You can change your cookie choices at any time using the “Cookie settings” link at the bottom of the page.]

8. How long we keep your data

We keep personal data only as long as needed for the purpose it was collected, or as required by law:

Queries and feedback:up to [12] months after the matter is closed.
Reservations:up to [6] months after the booking date.
Order and invoice records:as required under tax and accounting laws (generally up to 8 years).
Franchise enquiries:up to [24] months from the last contact, unless you become a franchise partner.
Job applications:up to [12] months.
Marketing lists:until you withdraw consent or ask us to delete your data.

After this, we delete or anonymise the data, unless we must keep it longer by law. Logs of processing may be retained for the minimum period required under the DPDP Rules.

9. How we protect your data

We use reasonable security measures, including encrypted (HTTPS) connections, access controls limited to staff who need the data, secure third-party payment processing, and regular review of our service providers. No method of transmission over the internet is completely secure, but we work to protect your information. If a personal data breach occurs, we will inform affected users and the Data Protection Board of India as required by law.

10. Your rights

Under the DPDP Act, 2023, you have the right to:

Accessa summary of the personal data we hold about you and how we use it.
Correct, complete or updateinaccurate or incomplete data.
Eraseyour data when it is no longer needed, unless we must keep it by law.
Withdraw consentat any time, as easily as you gave it. This does not affect processing done before withdrawal.
Nominateanother person to exercise your rights in case of death or incapacity.
Raise a grievancewith us, and then with the Data Protection Board of India if you are not satisfied.

To exercise any of these rights, contact our Grievance Officer (Section 13). We may need to verify your identity before acting on your request, and will respond within [90 days / the period prescribed under the DPDP Rules].

11. Children

The Website is meant for adults. We do not knowingly collect personal data of anyone under 18 years without verifiable consent from a parent or lawful guardian, and we do not track or target ads at children. If you believe a child has shared personal data with us, please contact us and we will delete it.

12. Links to other websites

The Website may link to other sites and apps, such as Instagram, Facebook, YouTube, Zomato, Swiggy or Google Maps. We are not responsible for their privacy practices; please read their privacy policies.

13. Changes to this policy

We may update this Privacy Policy from time to time. The latest version will always be on this page with the “Last updated” date. If we make significant changes to how we use your data, we will notify you on the Website or by email/WhatsApp before the change takes effect and, where required, ask for your consent again.