Privacy Policy
This notice explains what personal data Near Choice processes, why it is needed, how long it is retained, who receives it and how you can exercise your rights. Effective 8 October 2026.
Privacy notice under Section 5
Babu Enterprises is the Data Fiduciary for the Near Choice customer and administration platforms. We provide this clear, itemised notice before or alongside collection so you can make an informed choice.
Purposes and lawful processing
- Provide restaurant discovery, serviceability checks, accounts, secure sign-in, carts, orders, payments, delivery, pickup, dine-in, support and feedback.
- Operate restaurant, employee and administrator tools, including billing, inventory, menu, order and delivery management.
- Prevent fraud, protect accounts, diagnose failures, keep audit evidence, comply with law and respond to grievances.
- Send optional promotions only where consent has been obtained. You may withdraw that consent at any time.
Processing is based on your consent where the DPDP Act requires it and on permitted legitimate uses where applicable, including voluntary provision for a requested service, compliance with law, emergencies, employment and security safeguards. Refusing optional data does not affect necessary service, but information required to fulfil an order or verify an account must be provided for that feature.
Sharing and cross-border processing
Data is shared only as needed with the selected restaurant, authorised staff, assigned delivery personnel, hosting and database providers, email and messaging providers, Google reCAPTCHA, WhatsApp/Meta services, professional advisers and public authorities where legally required. Some contracted providers may process data in India, the United States, the European Economic Area or another region in which that provider operates. We require purpose limitation, confidentiality and reasonable security safeguards and do not sell personal data.
Security and personal-data breaches
We use HTTPS, access controls, role-based permissions, password hashing, protected authentication cookies, rate limits, validation, logging and backups. No system is risk-free. If a personal-data breach occurs, Near Choice will contain and assess it and provide notices to affected Data Principals and the Data Protection Board of India as required.
Personal data categories, purposes and retention
| Data category | Purpose | Typical retention |
|---|---|---|
| Name, mobile, email, username, password hash and account status | Create, secure and support an account; send OTP or verification messages. | While the account is active, then up to 90 days unless law, fraud prevention or an open request requires longer. |
| Delivery address, area, pincode and optional location coordinates | Find serviceable restaurants, calculate delivery and fulfil the order you request. | Precise browser location is used for the current search; saved order addresses follow the related order record. |
| Cart, order, invoice, tax, discount, payment-status and refund records | Process orders, customer support, reconciliation, fraud control and legal or tax records. | Up to 8 years after the relevant transaction where financial-record retention applies. |
| Restaurant, owner, employee, attendance, role and operational records | Run authorised restaurant administration, staffing, billing and security controls. | During the business or employment relationship, then up to 3 years, subject to statutory records. |
| Reviews, feedback, support messages and communications | Resolve service concerns and improve the platform and restaurant experience. | Up to 3 years after closure, or earlier on a valid erasure request where no exception applies. |
| IP address, device/browser data, security logs, session identifiers and audit events | Secure the service, prevent abuse, investigate incidents and maintain availability. | Normally up to 180 days; confirmed security incidents may be retained up to 3 years. |
| Consent choices, referral and optional marketing preferences | Remember privacy choices, apply referrals and send consented communications. | Consent evidence and preferences for up to 3 years after withdrawal; referral records follow the related transaction. |
| Data-rights and grievance submissions | Verify, investigate, respond and demonstrate compliance. | Up to 3 years after the request is closed. |
Retention may be shortened when data is no longer necessary or extended for a legal hold, dispute, fraud investigation, tax obligation or other lawful requirement. At the end of retention, data is deleted, anonymised or securely isolated from ordinary use.
All six Data Principal rights and intake
- Access: your right to access a summary of personal data being processed, processing activities and recipients.
- Correction: your right to correction of inaccurate or misleading personal data and completion of incomplete data.
- Erasure: your right to erasure of data that is no longer necessary, subject to lawful retention duties.
- Withdraw consent: your right to withdraw consent as easily as it was given, without affecting earlier lawful processing.
- Nominate: your right to nominate a nominee (right to nomination) to exercise your rights in the event of death or incapacity.
- Grievance: your right to grievance redressal through our Grievance Officer and, after using this mechanism, the Data Protection Board of India where applicable.
Submit the form below or email kumar@nearchoice.com. We may request proportionate identity verification. We will acknowledge and respond within 30 days.
Grievance Officer
Use the contact below for questions, complaints, consent withdrawal and Data Principal requests. Include your request reference when following up. The response SLA is 30 days.
You can also submit a data-rights request or grievance online. We will respond within 30 days.
Cookie policy and consent withdrawal
Necessary cookies and similar storage support security, anti-forgery protection, sign-in, sessions, restaurant selection, cart and privacy choices. They are required for a feature you request and cannot be disabled through the preference panel. Optional analytics and marketing categories default to off.
- Necessary: authentication, session, security, cart, selected restaurant and consent-preference storage; session duration or up to 12 months depending on purpose.
- Analytics: optional measurement of feature use and performance; not loaded until you accept.
- Marketing: optional campaign or advertising measurement; not loaded until you accept.
Accept All and Reject All are shown with equal prominence. You can withdraw or change consent at any time from any page by choosing . Withdrawal does not affect processing that was lawful before withdrawal.
Children's data policy
Near Choice is not directed to children under 18 and does not knowingly permit them to create an independent account or place an order. We do not knowingly track, behaviourally monitor or target advertising to children. If a service must process a child's personal data, we will first obtain verifiable consent from the parent or lawful guardian and apply age-appropriate safeguards unless a lawful exception applies.
A parent or guardian who believes a child submitted data may contact the Grievance Officer for access, correction or erasure. We will verify the request and remove the data unless retention is required by law or necessary to protect the child.