Privacy Policy
This notice explains what personal data Near Choice processes, why it is needed, how long it is retained, who receives it and how you can exercise your rights. Effective 8 October 2026.
Privacy notice under Section 5
Babu Enterprises is the Data Fiduciary for the Near Choice customer and administration platforms. We provide this clear, itemised notice before or alongside collection so you can make an informed choice.
Purposes and lawful processing
- Provide restaurant discovery, serviceability checks, accounts, secure sign-in, carts, orders, payments, delivery, pickup, dine-in, support and feedback.
- Operate restaurant, employee and administrator tools, including billing, inventory, menu, order and delivery management.
- Prevent fraud, protect accounts, diagnose failures, keep audit evidence, comply with law and respond to grievances.
- Send optional promotions only where consent has been obtained. You may withdraw that consent at any time.
Processing is based on your consent where the DPDP Act requires it and on permitted legitimate uses where applicable, including voluntary provision for a requested service, compliance with law, emergencies, employment and security safeguards. Refusing optional data does not affect necessary service, but information required to fulfil an order or verify an account must be provided for that feature.
Sharing and cross-border processing
Data is shared only as needed with the selected restaurant, authorised staff, assigned delivery personnel, hosting and database providers, email and messaging providers, Google reCAPTCHA, WhatsApp/Meta services, professional advisers and public authorities where legally required. Some contracted providers may process data in India, the United States, the European Economic Area or another region in which that provider operates. We require purpose limitation, confidentiality and reasonable security safeguards and do not sell personal data.
Security and personal-data breaches
We use HTTPS, access controls, role-based permissions, password hashing, protected authentication cookies, rate limits, validation, logging and backups. If a personal-data breach occurs, Near Choice will contain and assess it and provide notices to affected Data Principals and the Data Protection Board of India as required.
Personal data categories, purposes and retention
| Data category | Purpose | Typical retention |
|---|---|---|
| Name, mobile, email, username, password hash and account status | Create, secure and support an account; send OTP or verification messages. | While active, then up to 90 days unless law, fraud prevention or an open request requires longer. |
| Delivery address, area, pincode and optional location coordinates | Find serviceable restaurants, calculate delivery and fulfil the requested order. | Precise browser location for the current search; saved addresses follow the related order record. |
| Cart, order, invoice, tax, discount, payment-status and refund records | Process orders, support, reconciliation, fraud control and legal or tax records. | Up to 8 years where financial-record retention applies. |
| Restaurant, owner, employee, attendance, role and operational records | Run authorised administration, staffing, billing and security controls. | During the relationship, then up to 3 years, subject to statutory records. |
| Reviews, feedback, support messages and communications | Resolve concerns and improve the platform and restaurant experience. | Up to 3 years after closure, or earlier following valid erasure. |
| IP address, device/browser data, security logs, sessions and audit events | Secure the service, prevent abuse and investigate incidents. | Normally up to 180 days; confirmed incidents may be retained up to 3 years. |
| Consent choices, referral and optional marketing preferences | Remember choices, apply referrals and send consented communications. | Consent evidence up to 3 years after withdrawal; referrals follow transactions. |
| Data-rights and grievance submissions | Verify, investigate, respond and demonstrate compliance. | Up to 3 years after closure. |
Retention may be shortened when data is no longer necessary or extended for a legal hold, dispute, fraud investigation, tax obligation or other lawful requirement. At the end of retention, data is deleted, anonymised or securely isolated.
All six Data Principal rights and intake
- Access: your right to access a summary of personal data, processing and recipients.
- Correction: your right to correction of inaccurate or misleading data and completion of incomplete data.
- Erasure: your right to erasure of unnecessary data, subject to lawful retention.
- Withdraw consent: your right to withdraw consent as easily as it was given.
- Nominate: your right to nominate a nominee (right to nomination) for death or incapacity.
- Grievance: your right to grievance redressal through our Grievance Officer and then the Data Protection Board of India where applicable.
Submit below or email kumar@nearchoice.com. We may request proportionate identity verification and will respond within 30 days.
Grievance Officer
Use the contact below for complaints, consent withdrawal and Data Principal requests. The response SLA is 30 days.
You can also submit a data-rights request or grievance online. We will respond within 30 days.
Cookie policy and consent withdrawal
Necessary cookies support security, sign-in, sessions, restaurant selection, cart and privacy choices. Optional analytics and marketing categories default to off.
- Necessary: authentication, session, security, cart, selection and consent storage; session duration or up to 12 months.
- Analytics: optional measurement; not loaded until accepted.
- Marketing: optional campaign measurement; not loaded until accepted.
Accept All and Reject All have equal prominence. Withdraw or change consent from any page using .
Children's data policy
Near Choice is not directed to children under 18 and does not knowingly permit an independent child account or order. We do not knowingly track, behaviourally monitor or target advertising to children. If a service must process a child's data, we first obtain verifiable parental or lawful-guardian consent and apply age-appropriate safeguards unless a lawful exception applies.
A parent or guardian may contact the Grievance Officer for access, correction or erasure. We will verify the request and remove the data unless retention is legally required or necessary to protect the child.