MESME Online Private Limited ("the Company," "We," "Us," or "Platform") is committed to protecting the privacy and security of your personal data. This Privacy Policy explains how we collect, use, store, process, and protect your information when you use our mobile application and website (collectively, the "Services").
By creating an account, placing an order, or accessing our platform, you explicitly consent to the collection and processing of your data as outlined in this policy.
1. Data We Collect (The "What")
To seamlessly connect you with Restaurant Partners and Delivery Partners, we collect two categories of information:
A. Information You Provide Directly
-
Account Registration Data: Your full name, mobile phone number, email address, and account login credentials.
-
Delivery Details: Saved delivery addresses, landmark specifications, and delivery instructions.
-
Payment & Financial Data: While we do not store your raw credit card numbers or UPI PINs on our servers, we collect transaction tokens, payment methods used, and billing details via RBI-authorized, secure payment gateways.
B. Information Collected Automatically
-
Precise Location Data: We collect real-time GPS location data from your mobile device when the app runs in the foreground or background. This is mandatory to calculate delivery fees, show nearby restaurants, and track your Delivery Partner.
-
Device & Log Information: Your IP address, device type, operating system version, browser type, unique device identifiers, and mobile carrier.
-
Usage & Transaction History: Details of the orders you place, item preferences, browse history, session durations, and communication logs with our customer support teams.
2. How We Use Your Data (The "Why")
We process your personal data under the lawful basis of Consent and Contractual Necessity for the following specific purposes:
-
Service Fulfillment: Processing your orders, sharing your address and phone number with the assigned Delivery Partner, and providing your order checklist to the Restaurant Partner.
-
Safety & Security: Verifying user accounts, preventing fraudulent payment transactions, detecting spam, and ensuring the safety of our ecosystem.
-
Customer Support: Resolving order disputes, handling refund requests, and addressing grievances.
-
Marketing & Engagement: Sending you order confirmations, OTPs (One-Time Passwords), system updates, and tailored promotional offers or discounts (which you can opt out of at any time).
3. Data Sharing & Third-Party Disclosures
We do not sell your personal data to third-party marketing companies. We share your information strictly on a need-to-know basis with:
-
Merchant (Restaurant) Partners: To prepare your food items accurately according to your preferences.
-
Delivery Partners: To navigate to your exact location and contact you regarding delivery handovers.
-
Service Providers: Fully compliant third-party vendors who assist us with cloud hosting (e.g., AWS), payment processing gateways, automated SMS text/OTP delivery, and analytics tools.
-
Legal Authorities: When required by law, court orders, or government mandates under the DPDP Act and IT Act to investigate fraud or security breaches.
4. Your Rights as a Data Principal
In strict compliance with the DPDP Act, 2023, you hold the following statutory rights regarding your personal data:
-
Right to Access & Summaries: You can request a summary of the personal data we hold about you and the processing activities associated with it.
-
Right to Correction & Erasure: You can update inaccurate data or request the permanent deletion of your account and personal data, provided it is no longer required for active legal or transactional purposes.
-
Right to Withdraw Consent: You can revoke your consent for data processing (such as turning off background location access). Note that withdrawing certain permissions may restrict your ability to use the core food delivery features.
-
Right to Nominate: You have the right to nominate another individual to exercise your data rights in the event of death or incapacity.
5. Data Retention & Security Measures
-
Retention Period: We retain your data only for as long as your account remains active or as required to fulfill the commercial purposes outlined in this policy, unless a longer retention period is mandated by Indian tax, accounting, or anti-money laundering laws.
-
Security Standards: We implement robust administrative, technical, and physical security frameworks, including SSL/TLS encryption for data in transit and AES encryption for sensitive data at rest, to prevent unauthorized access or accidental data leaks.
6. Notice of Data Breach
In the unlikely event of a personal data breach affecting your information, MESME Online Private Limited will fulfill its legal obligations under the DPDP Act by immediately notifying the Data Protection Board of India (DPBI) and providing you with an explicit notice details the nature of the breach and mitigation steps taken.
7. Grievance Redressal Officer
If you have any questions, wish to exercise your data principal rights, or have a complaint regarding how your data is handled, please contact our designated Data Protection Officer / Grievance Officer:
-
Name of Officer: Ranganatha G
-
Designation: Data Protection Officer & Grievance Officer
-
Company Address: MESME Online Private Limited, #120, Kethohalli, Chunchanakuppe(post), Chunchanakuppe, Bangalore, Bgsouth, Karnataka, India, 562130
-
Email Address: mesmehelpline@gmail.com.com