This policy explains how FOOD CAFE CATERERS, a proprietorship of Joby Johny trading as Kiriyanthan's ("we", "us"), handles personal data when you visit kiriyanthans.in, enquire with us, or book our catering services. We process personal data in line with the Digital Personal Data Protection Act, 2023 (the "DPDP Act") and the rules made under it. For the purposes of the DPDP Act we are the Data Fiduciary for the personal data described here.
1. This website
This website is information only. It has no forms, no accounts, no online ordering and no payment pages. It sets no cookies, runs no analytics or advertising trackers, and loads nothing from third-party servers. Like any web server, our hosting keeps standard technical logs (IP address, date and time, page requested, browser type) for security and troubleshooting. These logs are not used to identify or profile visitors and are deleted on a rolling basis. The site may be delivered through Cloudflare, a content-delivery and security service, which processes the same technical information to deliver and protect the site.
2. What we collect
When you enquire or book with us by phone, email, in person or through the LA Mirage booking platform, we may collect:
- Contact details: your name, phone number, email address and postal or billing address.
- Event details: event date, venue, type of function, expected and final guest counts, and menu choices.
- Dietary and allergy information that you choose to tell us, so that we can prepare food safely.
- Billing details: details needed for GST tax invoices (including a GSTIN if you give one), and records of payments and refunds.
- Correspondence: messages and call notes about your booking or any complaint.
We do not collect card numbers, UPI PINs, net-banking passwords or similar payment credentials. Those are handled by our payment gateway (see Payments).
3. Why we use it
We use your personal data only for the purposes you gave it for, or as the law requires:
- to respond to your enquiry and prepare a quotation;
- to plan, prepare and serve the catering you have booked, including coordinating with your venue;
- to issue invoices, collect payments, send payment reminders and process refunds;
- to meet our legal obligations, including GST, accounting and food-safety requirements; and
- to handle complaints and resolve disputes.
We process your data on the basis of your consent, which you give when you share it with us for an enquiry or booking, and, for invoices and tax records, because the law requires us to keep them. We do not use your data for marketing unless you have separately agreed to it, and we do not sell personal data.
4. Who we share it with
We share personal data only as needed to deliver the service you booked or to comply with law:
- Razorpay (Razorpay Software Private Limited), our payment gateway, to create payment links and process payments and refunds.
- LA Mirage Convention Center, Koratty, when your event is at LA Mirage or you booked our catering through la-mirage.in. LA Mirage runs the booking platform on which our catering invoices and payment links are generated and recorded; for that it processes your catering booking and payment data on our behalf. Data you give LA Mirage for your venue booking is handled by LA Mirage under its own privacy policy.
- Your event venue, to the extent needed to deliver the catering on the day.
- Our accountants, auditors and professional advisers, who are bound by confidentiality.
- Government authorities, including the GST and food-safety authorities, where the law requires it.
- Email and communication providers that carry our messages to you.
Some of these service providers (for example, for email or website delivery) may process data outside India. Where they do, it is only for the purposes above and only to countries not restricted by the Government of India under the DPDP Act.
5. Payments
Payments to FOOD CAFE CATERERS are processed by Razorpay. When you pay, you enter your payment details on Razorpay's secure pages, not on ours. Razorpay processes them under its own terms and privacy policy. We receive confirmation of the payment (amount, date, reference and status) but never your full card or bank credentials.
6. How long we keep it
- Invoices, payment and refund records, and the details on them, are kept for as long as tax and accounting laws require. Under GST law this is currently at least 72 months from the due date of the annual return for the year concerned.
- Other booking and event details are kept for up to 3 years after your event, so that we can deal with any questions, complaints or claims, and are then deleted.
- Enquiries that do not lead to a booking are deleted within 12 months.
- If you withdraw consent or ask us to erase your data, we delete it unless the law requires us to keep it.
7. How we protect it
We take reasonable security safeguards to protect personal data against unauthorised access, loss or misuse. Access is limited to people who need it to serve your booking. If a personal data breach occurs, we will inform the Data Protection Board of India and affected people as the DPDP Act and its rules require.
8. Your rights
Under the DPDP Act you may:
- ask for a summary of the personal data we hold about you and how we use it, and the people we have shared it with;
- ask us to correct, complete or update your data;
- ask us to erase your data, subject to what the law requires us to keep;
- withdraw consent you have given, at any time, as easily as you gave it (this does not affect processing already done, and we may not be able to continue a booking without the data it needs);
- nominate another person to exercise these rights for you in the event of your death or incapacity; and
- raise a grievance with us, and if you are not satisfied with our response, complain to the Data Protection Board of India.
To use any of these rights, contact our grievance officer below. We may need to verify your identity before acting on a request. We respond as soon as we can, and in any case within the period set by the Digital Personal Data Protection Rules (currently 90 days at most).
9. Grievance officer
Joby Johny, Proprietor, FOOD CAFE CATERERS (Kiriyanthan's)
VII/124, Foodcafe Caterers, Mookkannoor, Ernakulam, Kerala 683577, India
Email: joby@kiriyanthans.in · Phone: +91 99472 32335, +91 90481 01392
10. Children
Our services are booked by adults. We do not knowingly collect personal data from children except where a parent or guardian gives it to us (for example, a child's dietary needs for an event), and we use it only for that purpose.
11. Changes to this policy
We may update this policy from time to time. The current version is always on this page, with the date it was last updated.