Privacy Policy
We respect your privacy. This policy explains what personal data Boba Bhai collects, why we collect it, who we share it with and the choices you have. It is written in line with the Digital Personal Data Protection Act, 2023 and the rules made under it, and the Information Technology Act, 2000.
Last updated: 6 November 2026
In short
- We collect only what we need to serve you: your name, contact details, orders and feedback.
- We never sell your personal data.
- You can ask us to access, correct or delete your data, or withdraw your consent, at any time.
01Who is responsible for your data
Boba Bhai Ventures Pvt Ltd (“Boba Bhai”, “we”, “us”) is the data fiduciary for personal data collected through our website, our app, our stores and our communications. This includes our brands Boba Bhai, Seung Toko and Aureco Mexican Kitchen.
02What we collect
- Contact details: name, phone number and email address when you order through our app, contact us, sign up for offers or apply for a job.
- Order details: items ordered, store, pickup time, order history and preferences.
- Payment information: payments are processed by our payment partners. We receive confirmation of payment and limited details (such as the payment method and the last digits of a card), not your full card number or UPI PIN.
- Job applications: CV, work history, education and any other details you choose to share.
- Feedback and support: messages, reviews, photos and call recordings when you contact us.
- Device and usage data: IP address, browser, device type, pages visited and app activity, collected through cookies and similar technologies.
- In-store CCTV: stores may use CCTV for safety and security.
We do not knowingly collect sensitive data, such as health information, unless you share it with us (for example, an allergy), and then only to serve you safely.
03Why we use it
- To take, prepare and fulfil your orders and pickups, and send order updates.
- To respond to queries, feedback, complaints and refund requests.
- To run offers and loyalty programmes, and to send marketing messages if you have opted in.
- To process job applications.
- To improve our menu, stores, website and app.
- To prevent fraud, keep our stores safe and keep our systems secure.
- To comply with legal, tax and regulatory requirements.
04Consent and your choices
Where we rely on your consent, we will ask for it clearly before collecting your data. You can withdraw consent at any time by writing to care@bobabhai.com or using the unsubscribe option in our messages. Withdrawing consent does not affect processing done before you withdrew it, but we may then be unable to provide some services.
Some processing is necessary to fulfil an order you have placed or to meet a legal obligation, and does not depend on marketing consent.
05Who we share it with
We do not sell your personal data. We share it only as needed with:
- payment gateways and banks, to process payments and refunds;
- technology providers who host our website and app, send SMS, email or WhatsApp messages, and provide analytics, all under contracts requiring them to protect your data;
- delivery and quick-commerce platforms, for orders you place through them (they also hold your data under their own privacy policies);
- professional advisers, auditors and insurers;
- government or law-enforcement authorities where required by law;
- a successor entity in the event of a merger, acquisition or restructuring.
06How long we keep it
We keep personal data only as long as needed for the purposes above or as required by law (for example, tax records). Job applications are usually kept for up to 12 months unless you ask us to delete them sooner. When data is no longer needed, we delete or anonymise it.
07How we protect it
We use reasonable security safeguards, including encryption in transit, access controls and limited staff access, to protect your data against loss, misuse and unauthorised access. If a personal data breach occurs, we will notify you and the authorities as required by law.
08Your rights
Subject to applicable law, you have the right to:
- get a summary of the personal data we hold about you and how we use it;
- correct, complete or update inaccurate data;
- have your data erased when it is no longer needed;
- withdraw consent;
- nominate another person to exercise your rights in case of death or incapacity;
- raise a grievance with us, and, if you are not satisfied, complain to the Data Protection Board of India.
To exercise these rights, write to care@bobabhai.com. We may need to verify your identity before acting on your request.
09Children
Our website and app are not meant for children under 18 to use without a parent or guardian. We do not knowingly process a child’s personal data without verifiable consent from a parent or lawful guardian, and we do not track children or target advertising at them.
10Cookies
We use essential cookies to make our website work, and analytics cookies to understand how it is used. You can block or delete cookies in your browser settings. Some features may not work properly without them.
11Data stored outside India
Some of our technology providers may store or process data outside India. Where this happens, we take steps to ensure your data is protected and transferred only as permitted under Indian law.
12Links to other sites
Our website links to third-party sites and apps, such as delivery platforms, maps and social networks. Their privacy practices are governed by their own policies.
13Changes to this policy
We may update this policy from time to time. The latest version will always be on this page with the “last updated” date. If changes are significant, we will tell you through our website or app.
14Grievance Officer and contact
Grievance Officer, Boba Bhai Ventures Pvt Ltd
3rd Floor, 7, 19th Main Rd, Sector 4, HSR Layout, Bengaluru, Karnataka 560102
Email: care@bobabhai.com (subject line: “Grievance”) · Phone: +91 79756 73970
We acknowledge complaints within 48 hours and aim to resolve them within one month of receipt.