Loading
Privacy
What we collect when you order or book, why we need it, who else touches it, and how to have it corrected or deleted. We are a restaurant — we collect what it takes to feed you and nothing more.
Last updated 27/08/2026
This is our own plain-English policy. If you need something clarified, call us.
We are a restaurant, not an advertising business. We collect what we need to cook your food, get it to your door and hold your table — and nothing else.
We follow India’s Digital Personal Data Protection Act, 2023 as our framework, and the language below uses its ideas: you are the Data Principal, we are the Data Fiduciary, and the companies we use to send an SMS or take a payment are Data Processors acting on our instructions.
On the checkout page you can press a button to use your device’s location so we can work out the delivery distance accurately. Your browser will ask you first. If you say no — or never press it — we estimate the distance from the pincode in your typed address instead, and everything still works. If you do grant it, we store the coordinates on that order so the rider can find you.
Our server keeps ordinary technical logs — the IP address a request came from, the time, and which page or endpoint was asked for. We use them to keep the site up and to stop somebody hammering the one-time-password endpoint. We do not build a profile from them.
We do not send marketing messages unless you have clearly asked for them. If we ever start a mailing list it will be opt-in, with an unsubscribe link that works.
Ordering and booking both verify your mobile number with a six-digit code sent by SMS through an Indian SMS provider acting for us.
Standard SMS charges from your operator may apply to messages we send you. We never ask for an OTP over the phone — if somebody calls claiming to be from Altitude and asks you to read out a code, it is not us. Hang up and call us on the number on this site.
A handful of service providers process data on our instructions. They may use it only to provide their service to us, and not for their own purposes.
Beyond those, we share personal data only where the law requires it — a court order, a tax authority, a police request that is properly made — or where it is necessary to establish or defend a legal claim. We will tell you if that happens, unless we are forbidden from doing so.
Our delivery riders are our own staff. Your address and phone number are shown to the rider carrying your order and to no one else.
If you ask us to delete your data, we delete what we are free to delete and keep only what the law requires us to keep — the financial record of a bill you actually paid. We will tell you exactly what remains.
The site is served over HTTPS. Passwords for staff accounts and one-time passwords for customers are stored hashed, never in readable form. Access to the admin portal is limited by role, so a kitchen login cannot read customer records and a delivery login sees only the orders assigned to it. Payment credentials never reach our servers at all.
No system is perfect. If we ever discover a breach that is likely to affect you, we will tell you and the Data Protection Board of India, as the DPDP Act requires, and we will tell you what we are doing about it.
Under the DPDP Act 2023 you can ask us to:
Call or write to us with the mobile number you order from. We answer within 30 days, usually far sooner, and we do not charge for it. We may ask you to verify the number by one-time password first, so that nobody else can ask for your data.
This site is not intended for children under 18, and we do not knowingly collect personal data from them. Orders and bookings should be placed by an adult. Children are very welcome at the restaurant — it is the website that expects a grown-up’s mobile number and payment method.
If you believe a child has given us personal data, tell us and we will delete it promptly.
We update this page whenever what we collect or who processes it changes. The date at the top shows when it last changed. If a change is significant — a new category of data, a new purpose — we will make it obvious rather than quietly editing a line.
For anything about your data — a copy, a correction, a deletion, or a complaint — reach the restaurant directly and say it is a privacy request:
If we have not resolved your complaint to your satisfaction, you may take it to the Data Protection Board of India.
Our terms of service and refunds policy sit alongside this page.
Also worth reading