Privacy Policy

1. Who this policy covers

Kamil Cafe ("we", "us", "Kamil") is the Data Fiduciary for the personal data collected through this website — meaning we determine why and how your data is processed. This policy explains what we collect, why, and the rights you have over it under the DPDP Act, 2023.

2. What we collect

We only collect what's needed to act on your request:

• Table bookings: name, phone number, email (optional), date, time, number of guests, occasion, and any notes you add.
• Contact form: name, phone or email, and your message.

We do not collect payment details, government ID numbers, or any data beyond what you enter into these two forms.

3. Why we collect it

Your data is processed solely to:

• Process and confirm your table booking, including sending a confirmation or cancellation email if you provide one;
• Respond to questions or messages you send through the Contact page;
• Keep an internal record of bookings and enquiries for day-to-day cafe operations.

We do not sell, rent, or use your data for advertising, and we do not share it with any third party except service providers strictly necessary to deliver the above (for example, our email provider, solely to send booking confirmations).

4. Your consent

We only process your data after you give clear, affirmative consent — the checkbox on our booking and contact forms, which is unticked by default. You may withdraw consent at any time by contacting us using the details in Section 8; this won't affect the legality of processing already carried out before withdrawal, and may mean we're unable to act on a booking or message already submitted.

5. How long we keep it

We retain booking and enquiry data only as long as reasonably needed for the purpose it was collected for, or until you ask us to erase it — whichever comes first — unless a longer period is required by law.

6. Your rights

As a Data Principal under the DPDP Act, you have the right to:

• Access a summary of the personal data we hold about you and how it's being processed;
• Correct, complete, or update inaccurate or outdated data;
• Erase your data, once it's no longer needed for the purpose you provided it for;
• Withdraw consent at any time, as easily as you gave it;
• Nominate another individual to exercise these rights on your behalf in the event of your death or incapacity;
• Grievance redressal — raise a concern with us directly (see Section 8), and escalate to the Data Protection Board of India if it isn't resolved.

7. Children's data

This website is not directed at children, and we do not knowingly collect personal data from anyone under 18 without a parent or lawful guardian's verifiable consent.

8. Contact us about your data

For any question, correction, or erasure request regarding your personal data, contact:

• Kamil Cafe — Add your business email/phone here

We aim to respond to all privacy-related requests within a reasonable time.

9. Security

We apply reasonable technical safeguards — including encrypted connections, access-controlled admin systems, and rate-limited forms — to protect your data against unauthorised access or loss. No online system is 100% secure, but we take this seriously and review these measures regularly.

10. Changes to this policy

We may update this policy from time to time to reflect changes in our practices or the law. The current version always applies to data collected from this website.