Privacy Policy

1. Scope

This policy covers the RoyceFoods marketing website (roycefood.in) and the employee ordering platform (order.roycefood.in). RoyceFoods' internal Operations Control Tower is a staff-only system and is not covered here, as it is not accessed by the public.

2. Information we collect

We collect the following personal information, only where you provide it or it is required to deliver our services:

• Contact form (roycefood.in/contact): your name, email address, phone number, and message.
• Feedback form: your work email and employee ID (to route feedback to the right cafeteria site), plus your rating and comments.
• Employee ordering platform: your name, phone number, email, employer/department, dietary preference, and your order history and payment status. We do not collect or store your card number, UPI PIN, or net-banking credentials — see section 4.
• Automatically, for security: IP address and basic request logs, used only to protect the Platforms against abuse (e.g. rate-limiting) and to diagnose technical issues.

3. How we use your information

We use this information to respond to enquiries, process and fulfil orders, calculate employer-funded meal benefits, route and act on feedback, and to keep the Platforms secure and working correctly. We do not use your personal information for purposes unrelated to these.

4. Payment information

Online payments on the ordering platform are handled by our RBI-authorised payment gateway partner, which is PCI-DSS compliant. RoyceFoods' systems only ever see the outcome of a payment (success/failure and a reference id) — never your card, UPI, or net-banking credentials.

5. Sharing with third parties

We share personal information only with the service providers needed to run the Platforms, and never sell your data:

• Our payment gateway partner — to process online payments.
• Our database and hosting providers — to securely store and serve Platform data.
• Our contact-form delivery provider — to deliver enquiry emails to our team.

6. Data retention

We keep personal information only as long as needed for the purpose it was collected for (e.g. responding to an enquiry, or maintaining your order history for support and accounting purposes), or as required by applicable law.

7. Your rights

Under the Digital Personal Data Protection Act, 2023, you may request access to, correction of, or deletion of your personal information held by us, by writing to hello@roycefood.in. We will respond within a reasonable time.

8. Data security

We use industry-standard measures — encrypted connections (HTTPS), access controls, and role-based permissions — to protect personal information against unauthorised access.

9. Children’s privacy

The Platforms are intended for use by working adults and are not directed at children.

10. Changes to this policy

We may update this policy from time to time; the effective date above reflects the latest revision. Material changes will be reflected on this page.

11. Contact / grievance officer

For any privacy question, request, or concern, contact us at hello@roycefood.in or write to us at our office in Bangalore, Karnataka, India.