Compliance with Digital Personal Data Protection (DPDP) Act, 2023 & Rules, 2025
Welcome to Chicken99. We value your privacy and are committed to protecting your personal data. This Privacy Policy serves as a formal notice under the Digital Personal Data Protection (DPDP) Act, 2023 and the DPDP Rules, 2025.
By continuing to use our food delivery platform, you acknowledge that you have read and understood this notice, and you explicitly consent to the collection and processing of your personal data as itemized below.
We collect specific categories of personal data strictly for the purposes mentioned below. We do not process your data for any undisclosed purposes.
We may collect device information, browser type, app version, IP address, and cookie identifiers to improve security, prevent fraud, analyze platform performance, and enhance user experience.
We may share your personal data with:
All such recipients are contractually obligated to process personal data only for authorized purposes.
Your personal data may be processed on servers located outside India only where such transfer is permitted under applicable Indian law and the DPDP framework. We ensure that appropriate safeguards are implemented for such transfers.
We process your personal data only on the basis of your free, specific, informed, unconditional, and unambiguous consent. You have the right to manage your consent through your account settings or via a registered Consent Manager platform integrated with our service.
Note: Withdrawing consent for core functions (like location access or identity verification) may result in the termination of our food delivery services to you, as these are essential for fulfillment.
We do not knowingly collect personal data from individuals under the age of 18 without verifiable parental consent. If you are a minor, you must use Chicken99 under the supervision and consent of a parent or legal guardian.
In accordance with the DPDP Act, we strictly prohibit the tracking, behavioral monitoring, or targeted advertising directed at children.
As a Data Principal under the DPDP Act, you are entitled to the following rights, which you can exercise through your profile settings or by contacting our DPO:
| Data Type | Retention Period |
|---|---|
| Account information | Until account deletion |
| Order history | Up to 8 years for tax/accounting compliance |
| Delivery location records | 12 months |
| Payment transaction records | As required by RBI and applicable financial laws |
We implement robust technical and organizational measures to prevent personal data breaches, including:
In the unlikely event of a data breach affecting your personal data, we are obligated under the DPDP Rules to immediately notify the Data Protection Board of India (DPBI) and inform you directly.
In accordance with the DPDP Act, 2023, we have designated a Grievance Officer / Data Protection Officer for addressing privacy-related queries and complaints.
Promptly upon receipt
Ordinarily within 15 days
If your grievance remains unresolved, you have the right to file a complaint directly with the Data Protection Board of India.
We may update this Privacy Policy from time to time. Material changes will be notified through the app, website, email, or other appropriate communication channels. Continued use of the service after such notification constitutes acknowledgment of the updated policy.