Privacy policy

TO BE CONFIRMED — registered entity name, trading as The Paan Legacy, registered at TO BE CONFIRMED — registered office address, Gurugram, Haryana. In this policy "we" means that company and "you" means anyone using eatpaanlegacy.com.

Your phone number. It is how accounts work here — there is no password for customers, and it is where your order updates go.

Your delivery address, when you give us one, so we can bring the order to it.

Your name and email, if you choose to add them. Neither is required to order.

Your order history, which is also what your loyalty balance is calculated from.

We do not collect or store your card number, UPI PIN, or bank details. Those go directly to our payment gateway and never touch our servers — we only ever see whether a payment succeeded and a reference number for it.

To take, make and deliver your order; to tell you what is happening with it; to run the loyalty programme; to issue a GST invoice; and to keep the accounting records Indian tax law requires us to keep.

We do not sell your data. We do not share it with advertisers. We do not build a profile of you to rent to anyone.

Only the companies that make the order physically happen, and only the part they need:

— our payment gateway, to take the payment and process refunds
— our delivery partners, who get the name, address and phone on the parcel
— WhatsApp, to deliver your order messages
— our hosting and database providers, who store the data on our behalf

Each is bound to use it only to provide that service to us. We may also disclose data where the law actually requires it.

Order and invoice records are kept for eight years, because tax law requires it. An account with no orders and no activity for three years is deleted. Your phone number is removed from marketing lists the moment you ask.

Write to hello@eatpaanlegacy.com and you can ask us for a copy of everything we hold about you, to correct anything wrong, to stop sending you marketing messages, or to delete your account.

We will act within 30 days. Deletion is subject to the records we are legally required to keep — we can remove you from everything else and will tell you exactly what had to stay and why.

Order status messages are not marketing and will keep coming while an order is live. You cannot opt out of being told your food is on its way.

We set a small number of cookies that the site cannot work without: one that remembers your cart, and one that keeps you signed in. We do not run third-party advertising trackers.

Data is encrypted in transit, staff access is restricted by role, and every change to a customer's order is logged with the name of the person who made it. No system is perfectly secure, and anyone who tells you otherwise is selling something. If we ever have a breach affecting you, we will tell you.

hello@eatpaanlegacy.com · +91 TO BE CONFIRMED · 10:00 – 20:00 IST, Monday to Saturday