Privacy policy
Last updated 3 November 2026
Milaf Restaurant ("Milaf", "we") runs this website and the Milaf apps to take food orders and deliver them. This policy explains what personal data we collect, why, and the choices you have, in line with the Digital Personal Data Protection Act, 2023.
What we collect
- Contact details: your name and mobile number (and email, if you add one), to confirm and deliver your order and to contact you about it.
- Delivery addresses: the address you type and the map pin you drop, so our rider can find you. We read your phone's location only when you tap "use my current location" while adding an address.
- Orders: what you ordered, when, the amount, any offer used, and ratings you give.
- Payments: online payments are handled by Razorpay. We never see or store your card details or UPI PIN; we keep only the payment reference and status.
- Technical data: the device type and IP address of each sign-in, to keep your account secure and to stop abuse.
Why we use it
- To take, prepare, deliver and bill your order, and to handle refunds.
- To keep the service secure (sign-in codes, fraud prevention).
- To keep the accounts and tax records the law requires.
We do not sell your data, and we do not use it for advertising by others.
Who sees it
- Milaf's own staff and riders, only as needed for your order (for example, the rider sees your name, number and address for that delivery).
- Razorpay, to process online payments; MSG91, to send sign-in codes by SMS; our hosting provider, which stores the data on servers we control.
- Authorities, when the law requires it.
Rider location
Our riders share their location with Milaf only while they are on duty, so you can follow your order. Location history is deleted after 30 days.
How long we keep it
Your profile and addresses stay until you delete your account. Bills are kept as long as tax law requires, without your contact details once your account is deleted. Sign-in codes are deleted within a day.
Your rights and deleting your account
- See and correct your details in the app (Account).
- Delete your account in the app (Account → Delete my account), or by contacting us.
- Withdraw consent or raise a grievance with us using the details below. We reply within 30 days.
Children
The service is meant for people aged 18 or over. A child may order only with a parent's involvement.
Contact and grievances
Questions about an order, a refund or your data? We are happy to help.
- Business: Milaf Restaurant
- Address: see the app
- Phone: see the app
- Email: see the app
- WhatsApp: message us
For an order already placed, keep your order number (for example M261103-012) ready: it is on the order screen and on your bill.