Privacy Policy

1. Who we are

TheBuch (“we”, “us”, “our”) runs a platform that lets you order fresh raw meat, seafood and cooked non-veg food from independent meat shops and restaurants (“Partners”), delivered by independent delivery partners (“Riders”).

This policy explains what personal data we collect through the TheBuch customer app, the TheBuch Partner app, the TheBuch Rider app and this website (together, the “Services”), why we collect it, and the choices you have. It is written to comply with India’s Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000 and its rules.

2. What we collect

We only collect what we need to run the Services.

• Account details: your mobile number (used to log in with a one-time password), and your name and email address if you choose to add them.
• Delivery addresses: the addresses you save, any landmarks, and delivery instructions such as “leave at door”.
• Location: with your permission, your device location to find shops that deliver to you and to fill in your address. You can always enter an address manually instead.
• Orders: what you ordered, from which shop, cooking requests, prices, offers applied, tips, ratings and order history.
• Payments: payments are processed by Razorpay. We receive a payment reference, the amount and the payment status. We never see or store your full card number, CVV, UPI PIN or netbanking password.
• Support: messages you send us and details you share when you contact support.
• Device and usage data: device model, operating system, app version, IP address, crash logs and basic in-app activity, used to keep the apps working and secure.

If you are a Partner

Business name, owner and contact details, shop address, menu and prices, GST/FSSAI details where required, and bank account details for payouts.

If you are a Rider

Name, mobile number, photo, government ID and driving licence details for verification, vehicle details, bank account details for payouts, and your live location while you are online or on an active delivery.

3. How we use your data

• To create and secure your account and verify your mobile number.
• To show shops near you, take your order, and pass it to the Partner and Rider who fulfil it.
• To show live order tracking and send you order updates by notification or SMS.
• To process payments, refunds, tips and Partner/Rider payouts.
• To provide customer support and resolve complaints or disputes.
• To prevent fraud and abuse, and keep the Services safe.
• To improve the apps, fix bugs and understand which features are used.
• To send offers and updates, only if you have not opted out. You can opt out at any time.
• To meet our legal, tax and regulatory obligations.

4. Who we share it with

We do not sell your personal data. We share it only as needed to deliver the Services:

• Partners see your order, name and cooking requests so they can prepare it.
• Riders see your name, delivery address, delivery instructions and a way to contact you for the duration of the delivery. Customers see the Rider’s name and live location while an order is on its way.
• Service providers who work on our behalf, such as Razorpay (payments), cloud hosting, maps, SMS/OTP and push-notification providers. They may only use your data to provide their service to us.
• Authorities, when required by law, court order or to protect the rights and safety of our users, Partners, Riders or the public.
• A successor business, if TheBuch is involved in a merger, acquisition or sale of assets, subject to this policy.

5. App permissions

• Location: to find nearby shops and set your address (customers), and to track deliveries (Riders, only while online or on a delivery).
• Notifications: for order updates, new orders (Partners) and delivery requests (Riders).
• Camera/photos: only if you choose to upload a photo, such as a product image or ID document.

6. How long we keep it

We keep your data while your account is active. If you delete your account, we delete or anonymise your personal data within 30 days, except where we must keep certain records (such as invoices and transaction records) for longer to meet tax, accounting or legal requirements.

7. How we protect it

We use encryption in transit (HTTPS), access controls and other reasonable security practices to protect your data. No system is perfectly secure, but if a breach affects your personal data we will notify you and the relevant authorities as required by law.

8. Your rights and choices

You can:

• Access and update your profile and addresses in the app.
• Ask for a summary of the personal data we hold about you.
• Ask us to correct or complete inaccurate data.
• Withdraw consent, for example by turning off location access or opting out of marketing.
• Delete your account and personal data.
• Nominate another person to exercise these rights on your behalf.
• Raise a grievance with us, and then with the Data Protection Board of India if unresolved.

To make a request, including account deletion, email privacy@thebuch.in from your registered email or mention your registered mobile number. We will respond within 30 days.

9. Children

The Services are meant for people aged 18 and over. We do not knowingly collect personal data from children. If you believe a child has given us their data, contact us and we will delete it.

10. This website

This website does not require an account. Our hosting provider may log basic technical data such as IP address and browser type to keep the site running and secure. Food photos are loaded from Unsplash, which may receive your IP address when serving them.

11. Changes to this policy

We may update this policy from time to time. The “Last updated” date above shows the latest version. If we make significant changes, we will let you know in the app before they take effect.

12. Contact and grievance officer

For questions, requests or complaints about your personal data, contact our Grievance Officer at privacy@thebuch.in. For anything else, reach us at hello@thebuch.in.