GRABTO PRIVACY POLICY

Effective Date: 01-May-2025
Last Updated: 01-May-2025

1. Purpose

This Privacy Policy explains how Grabto collects, uses, stores, and shares your personal data, in compliance with the Digital Personal Data Protection Act, 2023.

2. What We Collect

• Personal Identifiers: Name, Phone Number, Email Address
• Dates: Date of Birth, Anniversary
• Location: Real-time GPS (only during active sessions)
• Transaction Data: Booking details, Payment confirmations

3. Why We Collect Data

We process your data to:

1. Provide personalised offers and recommendations
2. Confirm and manage bookings
3. Process secure payments
4. Send special occasion offers
5. Improve service quality and security

4. Legal Basis for Processing

We process data with your explicit consent, which you provide during sign-up. You can withdraw this consent at any time.

5. Sharing Your Data

We share data only with:

• Restaurants (to confirm bookings and deliver offers)
• Payment Gateways (for secure transactions)
• IT Service Providers (hosting, analytics, customer support)

We do not sell or rent your personal data.

6. Data Retention

• Personal data is retained only as long as necessary for service provision or as required by law (e.g., financial records)
• Location data is not stored permanently; it is used only in real-time for recommendations.

7. Security Measures

We use encryption, access controls, and secure servers to protect your data from unauthorized access, disclosure, or misuse.

8. Your Rights

You have the rights outlined in Section 3 of our Terms of Service.

9. User Consent Text

Sign-Up Screen Text:

By creating an account, you agree to Grabto’s Terms of Service and Privacy Policy, and you consent to the collection and processing of your personal data (including your name, phone number, email, birthday, anniversary, and real-time location) for personalised recommendations, secure payments, and booking services, in compliance with the Digital Personal Data Protection Act, 2023. You can withdraw consent anytime in Settings or by contacting business@grabto.in.

Location Permission Pop-up:

Grabto uses your real-time location to provide nearby restaurant recommendations and location-based offers. Location data is processed only while the app is in use and is not stored permanently. You can disable this in your device settings at any time.

10. Data Retention

• Step 1: User sends request/complaint to business@grabto.in with subject “Data Rights Request” or “Grievance”.
• Step 2: DPO acknowledges within 24 hours.
• Step 3: DPO verifies identity of requester.
• Step 4: DPO processes request within 15 days (correction, deletion, portability, etc.).
• Step 5: If unresolved, user may escalate to the Data Protection Board of India.

11. Contact

For privacy-related queries or to exercise your rights:
Data Protection Officer
business@grabto.in