1. Introduction

This Privacy Policy explains how Aargam Foods LLP ("we", "us", "our"), the owner and operator of The Hyderabadi Biryani House (THBH) and the website thehyderabadibiryanihouse.com, collects, uses, stores, and protects your personal information when you use our platform.

By using our website, placing an order, making a table booking, or registering as a THBH Insider, you agree to the practices described in this Privacy Policy.

2. Who We Are

3. What Personal Data We Collect

3.1 Data You Provide Directly

When you use our website, we may collect the following information:

• Full name
• Phone number
• Email address
• Delivery address (flat/house number, street, area, city, pincode)
• Date of birth (optional — provided by THBH Insider members for birthday offers)
• Account password (stored in encrypted form — never readable by owner(s) of THBH)
• Special requests submitted with table bookings
• Messages submitted via the contact enquiry form

3.2 Data Collected Automatically

When you browse our website, we automatically collect certain usage data:

• Pages visited and time spent on each page
• Device type, browser, and operating system
• Approximate location (city-level, derived from IP address)
• Actions taken on the website (e.g. items added to cart, checkout started)

This data is collected via Google Analytics 4 and is only activated after you provide cookie consent.

3.3 Data Collected Through Cookies

We use cookies and similar technologies for the following purposes:

• Analytics cookies (Google Analytics 4) — to understand how visitors use our website
• Functional cookies — to remember your selected outlet across your session
• Session cookies — to keep you logged in to your THBH Insider account

You can accept or decline non-essential cookies through the cookie consent banner shown on your first visit. If you decline, analytics cookies will not be activated.

4. How We Use Your Personal Data

We use your personal data only for the purposes listed below:

• To process your food orders and send order confirmation emails and SMS updates
• To manage your table bookings and send booking confirmations and reminders
• To manage your position on our dining waitlist
• To create and manage your THBH Insider account
• To send transactional emails such as order confirmations, booking confirmations, and password reset links
• To apply discount coupons and validate Insider-exclusive offers
• To send birthday or other special offers to Insider members who have provided their date of birth
• To respond to enquiries submitted through our contact form
• To improve our website and services using anonymised analytics data
• To comply with applicable Indian tax and legal obligations, including GST record-keeping

5. Legal Basis for Processing

We process your personal data on the following legal bases:

• Contract performance — to fulfil your orders and bookings
• Legitimate interests — to improve our services and prevent fraud
• Consent — for analytics cookies and optional birthday data
• Legal obligation — for GST and financial record-keeping as required under Indian law

6. Who We Share Your Data With

We do not sell your personal data to any third party. We share your data only with the following service providers, strictly to operate our platform:

• Firebase (Google LLC) — our database, authentication, and file storage provider. Your data is stored on Firebase servers.
• Resend — our transactional email delivery provider. Your email address and order/booking details are passed to Resend to send confirmation emails.
• Google Analytics — anonymised usage data is shared with Google Analytics to help us understand website traffic.

All third-party providers are bound by data processing agreements and are required to protect your data in accordance with applicable law.

7. Data Retention

We retain your personal data for the following periods:

• Order records — retained for a minimum of 7 years as required for GST compliance under Indian tax law
• Booking and waitlist records — retained for 12 months after the booking date
• THBH Insider account data — retained for as long as your account is active. If you request deletion, your account and associated personal data will be deleted within 30 days, except where retention is required by law
• Contact enquiry data — retained for 6 months
• Analytics data — retained by Google Analytics per their standard data retention settings (default: 14 months)

8. Data Security

We take reasonable technical and organisational measures to protect your personal data, including:

• All data is transmitted over HTTPS (encrypted in transit)
• Passwords are stored using Firebase Authentication's secure hashing — we never store or access your raw password
• Session authentication uses HTTP-only, secure cookies that cannot be accessed by browser scripts
• Direct client-side writes to our database are blocked — all data changes go through our secure server-side API

No method of transmission over the internet is 100% secure. While we work to protect your data, we cannot guarantee absolute security.

9. Your Rights

As a user of our platform, you have the following rights regarding your personal data:

• Right to access — you can request a copy of the personal data we hold about you
• Right to correction — you can update your profile details directly from your THBH Insider dashboard, or contact us to correct inaccurate data
• Right to deletion — you can request that we delete your account and personal data. We will do so within 30 days, subject to legal retention obligations
• Right to withdraw consent — you can withdraw your cookie consent at any time by clearing your browser cookies

To exercise any of these rights, please contact us at: contact@thehyderabadibiryanihouse.com

10. Children's Privacy

Our website and services are not directed at children under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, please contact us and we will delete it promptly.

11. Links to Third-Party Websites

Our website may contain links to third-party websites (such as Google Maps). This Privacy Policy does not apply to those websites. We encourage you to read the privacy policies of any third-party sites you visit.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will update the Effective Date at the top of this document. Continued use of our website after any changes constitutes your acceptance of the updated policy.

13. Contact Us

Aargam Foods LLP
The Hyderabadi Biryani House

• Outlet 1: Shop No. G-26-27, Sapphire 90 Mall, Sector 90, Gurugram — Ph: 98110-97726
• Outlet 2: Shop No. T-2, Sector-1 Manesar, Gurugram — Ph: 99111-04408 / 09
• Email: contact@thehyderabadibiryanihouse.com
• Website: thehyderabadibiryanihouse.com