Privacy Policy

Under India’s Digital Personal Data Protection Act, 2023, the business that decides why and how personal data is used is the Data Fiduciary, and a business that processes it on their behalf is a Data Processor.

Payments for your order go directly to the restaurant. Sprint Serve does not take payments from restaurant customers, does not sell personal data, and does not use customer order data for advertising.

When you order from a restaurant, the restaurant collects, through Sprint Serve:

We never collect card numbers, CVVs or bank passwords. Card payments are taken on the restaurant’s own terminal, outside Sprint Serve.

When you use the directory at order.sprintserve.in, Sprint Serve keeps the restaurants and dishes you save as favourites. Personalised suggestions are off unless you turn them on; if you do, we keep the cuisines you prefer and, only if you add them, a birthday or anniversary. You can turn this off at any time from your account.

When you contact us through this website, we keep your name, email, phone number and message so we can reply. This website runs no advertising or analytics trackers. It remembers your light or dark theme choice in your own browser, and it reports technical errors to our error-monitoring provider so we can fix them.

For restaurant teams, the restaurant enters staff names, contact details, roles and, if it uses our workforce features, attendance and pay. Sign-in uses one-time codes, Google sign-in or a staff PIN; there are no passwords, and PINs are stored only in hashed form.

These providers help us run the service. Each receives only what it needs for its job.

Your data is therefore stored in Singapore and some of it is processed in the EU and the USA. We do not transfer data to any country the Government of India has restricted.

• One-time sign-in codes expire after 10 minutes.
• The location captured for a dine-in session is cleared 30 days after the session closes.
• Records of the messages we send on a restaurant’s behalf are cleared of personal details after 90 days.
• Anonymous walk-in guest accounts are deleted once they are no longer in use.
• Bills, payments and refunds are kept for as long as Indian tax law requires the restaurant to keep them, even if other data is deleted.
• Everything else is kept while the restaurant uses Sprint Serve, unless the restaurant or you ask us to delete it.

You can ask for a copy of your data, ask for it to be corrected, ask for it to be deleted where the law does not require it to be kept, withdraw consent you have given, and nominate someone to act for you. For your orders at a restaurant, the restaurant decides on the request, and we help it carry it out. For directory favourites and anything you sent us through this website, write to us directly.

To make a request about a restaurant order, contact the restaurant, or write to us and we will pass it on and help. If you are not satisfied with the answer, you can complain to the Data Protection Board of India.

Connections are encrypted, each restaurant’s data is kept separate from every other restaurant’s, and staff see only what their role allows. One-time codes and staff PINs are stored only in hashed form.

Sprint Serve is meant for adults ordering for themselves and for restaurant businesses. We do not knowingly collect data from children. If you think a child’s data has reached us, write to us and we will remove it.

For any privacy question, request or complaint, email contact@sprintserve.in with “Privacy request” in the subject, or use our contact form. We acknowledge requests within 7 working days and aim to resolve them within 30 days.

Sprint Serve, Surat, Gujarat, India.

We update this page when we add a provider or change what is collected. The date at the top shows when it last changed. See also our Terms of Service.