Privacy Policy

Last updated: 21 August 2026

This policy explains what personal information Pinch of Spice Kitchen and Grill collects when you order from this website, why we collect it, and what we do with it.

1. What we collect

When you place an order we ask for:

• Your name
• Your phone number
• Your delivery address
• Any special instructions you choose to add
• The items, quantities and total value of your order

We do not ask for your date of birth, government ID, or card, UPI PIN or banking credentials.

2. How your order reaches us

When you confirm an order, two things happen. The details listed above are placed into a WhatsApp message that you send to us, and the same details are saved to our order database so that our kitchen can track and fulfil your order. The database is Google Cloud Firestore, hosted in Mumbai, India.

Your order therefore exists in two places: inside WhatsApp, subject to WhatsApp's own privacy terms, and in our order records. Only one restaurant account can open those records, and access is protected by a password and enforced by the database itself.

Your shopping cart is kept in your own browser's local storage on your device until you clear it. We cannot see it.

3. Why we use your information

We use it only to accept, prepare, deliver and confirm your order, to contact you about that order, and to handle any refund or complaint arising from it. We do not use it for marketing unless you ask us to.

4. Who we share it with

We share your details only with the people who need them to complete your order: our kitchen and delivery staff. If you pay online, the payment provider processes your payment under its own privacy policy; we receive confirmation that a payment succeeded, not your payment credentials.

We do not sell, rent or trade your personal information to anyone.

5. How long we keep it

We keep order records for as long as we need them for accounting and to resolve disputes, and then delete them. Cancelled orders are marked cancelled rather than erased, so that our records stay accurate.

6. Your rights

You may ask us what information we hold about you, ask us to correct it, or ask us to delete it. Contact us on the number below and we will act on your request within a reasonable time.

7. Security

This website is served over an encrypted connection (HTTPS). Order records are held in Google Cloud Firestore and can be read by exactly one restaurant account; the database rejects any other attempt to read them. Nobody browsing this website can see anyone's order but their own. Order messages held in WhatsApp are protected by that platform's encryption and by the passcode on our device.

8. Children

This website is not directed at children under 13, and we do not knowingly collect their information.

9. Changes

If we change how we handle your information, we will update this page and change the date at the top.