Privacy policy

This policy describes how Punyakriya Industries Private Limited, trading as The Paan Legacy ("we", "us", "our"), collects, uses and discloses your personal information when you visit eatpaanlegacy.com, buy from us, or otherwise communicate with us.

Registered at Shop No. 4, Building No. 2, Tilak Nagar, Shramik CHS, Mumbai, MH, 400089, India. GSTIN 27AAOCP8841K1ZN · FSSAI 21524007000027.

By using this site you agree to the collection, use and disclosure of your information as described here. If you do not agree, please do not use the site.

Contact details — your phone number, and your name and email if you choose to give them. The phone number is how accounts work here: there is no customer password, and it is where your order updates go.

Order information — delivery address, billing address, what you ordered, and confirmation that payment succeeded.

Customer support information — whatever you choose to include when you write or call, including any unboxing video you send us for a damaged item.

Usage data — how you reach and move around the site, your device and browser, and your IP address, collected through cookies and similar technologies.

We do not collect or store your card number, UPI PIN, CVV or bank details. Those go directly to our payment gateway and never touch our servers — we receive only whether a payment succeeded and a reference number for it.

To take, make and deliver your order; to tell you what is happening with it; to run the loyalty programme; to issue a GST invoice; to detect and investigate fraud; to answer you when you contact us; and to keep the accounting records Indian tax law requires us to keep.

We also use it for marketing — to send you offers by email, SMS or WhatsApp, and to show you our advertisements — where you have not opted out. You can opt out at any time; see Your choices below.

Only the companies that make the order physically happen, and only the part they need:

— our payment gateway, to take payment and process refunds
— our delivery and courier partners, who receive the name, address and phone on the parcel
— WhatsApp and our messaging providers, to deliver your order updates
— our hosting and database providers, who store the data on our behalf
— our analytics and advertising partners, including Meta, where those tools are active on the site

Each is bound to use your information only to provide that service to us. We may also disclose data in connection with a business transaction such as a merger, or where the law actually requires it.

We do not sell your personal information for money. Where advertising cookies are active, sharing with advertising partners may count as "sharing" under some privacy laws, and you can switch it off as described below.

Some cookies the site cannot work without: one that remembers your cart, and one that keeps staff signed in. Others help us understand how the site is used, and support advertising.

Most browsers accept cookies by default, and you can set yours to remove or reject them. Blocking cookies can stop parts of the site working properly.

Order and invoice records are kept for eight years, because tax law requires it. An account with no orders and no activity for three years is deleted. Your phone number and email are removed from marketing lists the moment you ask.

Write to care@thepaanlegacy.com and you can ask us to give you a copy of everything we hold about you, correct anything wrong, stop sending you marketing, or delete your account.

We will act within 30 days. Deletion is subject to the records we are legally required to keep — we will remove you from everything else and tell you exactly what had to stay and why.

If we decline a request, you may appeal by replying to our response. You may also complain to us first, and then to your local data protection authority if you are not satisfied.

Order status messages are not marketing and will keep coming while an order is live. You cannot opt out of being told your food is on its way.

This site is not intended for children and we do not knowingly collect personal information about them. If you are the parent or guardian of a child who has given us their information, contact us and we will delete it.

Data is encrypted in transit, staff access is restricted by role, every staff account has its own password, and every change to a customer's order is logged against the person who made it.

No security measure is perfect or impenetrable, and anyone who tells you otherwise is selling something. Please do not send us sensitive information over insecure channels. If we ever have a breach affecting you, we will tell you.

We link to sites we do not operate — including our sister storefront at thepaanlegacy.com, which runs on a different platform with its own privacy policy. If you follow a link away from here, read the policy of wherever you land.

We may update this policy to reflect changes in our practices or for legal reasons. The revised version is posted here with the "last updated" date at the top changed.

care@thepaanlegacy.com · +91 80804 26039 · 10:00 – 19:00 IST, Monday to Saturday

Punyakriya Industries Private Limited
Shop No. 4, Building No. 2, Tilak Nagar, Shramik CHS, Mumbai, MH, 400089, India