Preamble
At EasyCater, we take your right to privacy seriously — not just because the law requires us to, but because we believe that trust is the very foundation of the relationship we share with every user who chooses to order food through our platform.
This Data Deletion Policy is a plain-language, legally robust document that tells you — in clear and honest terms — exactly how you can request deletion of your account and personal data, what we will delete, what we may lawfully retain, and why.
It has been drafted to comply with applicable Indian laws including the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection Act, 2023 (DPDPA), to the extent applicable and notified.
We want this policy to be something you can actually read and understand — not a wall of legal jargon designed to confuse.
If you have any question that is not answered here, please write to us at support@easycater.co.in and we will respond within a reasonable time.
1. Who We Are and What This Policy Covers
Company: Easy Cater Services Pvt. Ltd.
Service / Platform: EasyCater — food ordering app and related web services
Operating Jurisdiction: India
Email Contact: support@easycater.co.in
Grievance Contact: support@easycater.co.in (Grievance Officer details will be updated as required by law)
This policy applies to:
- All registered and guest users of the EasyCater mobile application, website, and related services.
- Users who have placed food orders, used coupons or referral codes, participated in campaigns, or contacted our customer support.
- Users who interact with us through WhatsApp, email, social media, phone, or any other official EasyCater channel.
Exclusion: This policy does not cover restaurant partners, delivery executives, employees, vendors, or other business partners, whose data rights are governed by separate agreements or applicable employment/contractual frameworks.
2. What Personal Data We Hold About You
Depending on how you use EasyCater, we may hold some or all of the following categories of personal data. We collect only what is reasonably necessary for the purposes explained in this policy.
2.1 Account and Identity Data
Your name, mobile number, email address, login credentials, authentication info (OTP-based, where applicable), User ID, and internal system account status.
2.2 Order and Delivery Data
Delivery addresses, saved landmark details, complete order history (restaurants selected, items ordered, amounts, instructions), records of cancellations, refunds, and complaints.
2.3 Payment and Transaction Data
EasyCater does not store full card numbers, CVV codes, UPI PINs, banking passwords, or other sensitive payment credentials.
Payment data received through gateway partners is strictly limited to: Transaction ID, payment status, Refund ID, mode of payment, and masked or tokenised payment references where applicable.
2.4 Device and Technical Data
Device type, operating system, app version, IP address, crash logs, security logs, internal usage logs, and approximate location or location-permission status (where access is explicitly granted).
2.5 Support and Communication Data
Support tickets, email communications, chat/WhatsApp support messages, complaint details, feedback, ratings, platform reviews, and call-related support notes.
2.6 Marketing and Promotional Data
Coupon usage records, referral details, campaign/offer participation logs, marketing communication choices, and system push notification preferences.
3. Your Right to Request Deletion
You have the right to request deletion of your EasyCater account and the personal data associated with it. This right is subject to applicable laws, pending obligations, and the lawful retention grounds described in Section 6 of this policy. We respect this right and will act on verified deletion requests without any unnecessary delay. No fee will ever be charged for submitting a deletion request.
⚑
Note: EasyCater will never deny a genuine deletion request simply for commercial reasons. If we retain any data after your request, we will tell you the explicit reason.
3.1 How to Submit Your Deletion Request
You may choose any one of the following methods:
Option A
In-App Deletion
Navigate inside the app to:
Profile / Account → Settings → Delete Account.
If this option is not visible in your current version, please employ Option B or C.
Option B
Email Request
Send an email to support@easycater.co.in containing your registered mobile layout, email, and full name.
Use the specific pre-formatted structure template available below in Section 19.
Option C
Web Portal
EasyCater may provide a dedicated self-service web dashboard page at:
https://easycater.co.in/delete-account
This self-service utility page will be fully launched as our production platform matures.
4. Identity Verification Before Deletion
To protect you and all users from unauthorized, fraudulent, or mistaken deletion requests — where someone else might attempt to delete your account without your knowledge — we will verify your identity before processing any deletion request.
Verification actions may involve:
- OTP authentication codes dispatched directly to your registered mobile number.
- Confirmation links/prompts dispatched to your registered email address.
- Rigorous system matching of user account records against our production database.
- Requesting limited additional information, strictly where it is determined necessary.
🚨 SECURITY IMPERATIVE CRITICAL NOTE:
We will NEVER ask you for your password, UPI PIN, CVV, full card number, or net banking credentials as part of any verification process.
If anyone claiming to be from EasyCater asks for such information, please treat it as a fraud attempt and report it immediately to support@easycater.co.in.
If we are unable to verify that you are the rightful account holder, your deletion request may be placed on hold until verification is successfully complete.
Minor Accounts Note: If a parent or lawful guardian is making a deletion request on behalf of a minor, they must clearly identify themselves and their relationship to the account holder. We may request supporting information in such cases.
5. What Happens After We Accept Your Deletion Request
Once your deletion request has been verified and accepted, EasyCater will take all reasonable steps to delete, anonymise, deactivate, or restrict access to your personal data from our active operational systems.
• Delete or deactivate your profile and personal system identifiers.
• Remove your saved delivery addresses from our active database.
• Disable your credentials and system login access immediately.
• Unsubscribe you from all marketing and promotional communications.
• Wipe your device tokens and notification identifiers securely.
• Detach identity links from in-app metrics activity records where feasible.
• Anonymise or delete personal details not explicitly required for statutory legal, tax, accounting, refund, active dispute, safety, or regulatory purposes.
Once the processing phase executes:
- You will no longer be able to log in to the same account framework.
- Your previous historical orders will no longer be visible to you inside the platform interface.
- Saved addresses, system offers, active coupons, referral benefits, reward tokens, or promotional credits associated with your account will be permanently cancelled.
- Some structural technical logs continue to reside on encrypted backups for a limited window (Review Section 8).
6. Data We May Retain — And Why
We are legally and operationally required to retain certain categories of data even after a deletion request has been processed. We do this transparently and only to the extent necessary. We will not use any retained data for marketing or unrelated commercial purposes.
6.1 Legal and Regulatory Obligations Under Indian Law
As an Indian company, we are required to maintain various records under statutes including the Income Tax Act, 1961, the Goods and Services Tax (GST) laws, the Companies Act, 2013, and applicable accounting standards. We may therefore retain transaction records, invoices, GST-related data, payment records, refund records, and similar documents for the periods mandated by law — which may typically range from 6 to 8 years depending on the applicable statute.
⚑ Note: Retention under this clause is governed by law, not by our commercial preferences. We do not use such records to track or profile you after deletion.
6.2 Pending Orders, Refunds, and Payment Disputes
If you have an active or very recently placed order at the time of your deletion request, we will retain your relevant data until the order is successfully delivered or properly cancelled, any applicable refund is processed, and any pending complaint, chargeback, payment dispute, or bank query is completely resolved. We will then proceed with deletion without further delay.
6.3 Fraud Prevention and Platform Safety
EasyCater may retain limited data — such as device identifiers, account activity markers, or transaction patterns — where there is a documented suspicion or evidence of fraudulent activity, coupon misuse, referral abuse, fake orders, platform manipulation, or payment fraud. This retention helps protect the platform and all honest users from bad actors. The retained data will be used exclusively for fraud prevention and will not be used for any other purpose.
⚑ Note: This clause cannot and will not be used to suppress genuine deletion requests from honest users. Any such retention will be limited in scope and duration.
6.4 Legal Claims, Disputes, and Government/Regulatory Requests
We may retain relevant data where it is necessary to:
- Establish, exercise, or defend a legal claim in a court, tribunal, arbitration, or consumer forum.
- Respond to a valid law-enforcement request, court order, government notice, or regulatory direction under applicable Indian law.
- Cooperate with any investigation by statutory authorities, including TRAI, SEBI, RBI, or other relevant bodies.
6.5 Security and Audit Logs
Security logs and audit logs may be retained for a limited period as required by our internal security framework and applicable law, to ensure platform integrity, investigate security incidents, and support forensic analysis where required.
6.6 Anonymised and Aggregated Data
Data that has been irreversibly anonymised or aggregated — such that it cannot be used to identify you or any specific individual — may be retained indefinitely. EasyCater may use such anonymised data for business analytics, restaurant performance analysis, fraud monitoring, service improvement, and operational planning.
7. Timeline for Processing Your Deletion Request
We are committed to processing your data deletion request as quickly as practically and legally possible. Our standard structural pipeline timelines are mapped transparently below:
| Processing Pipeline Phase |
Standard Delivery Timeline |
| Acknowledgement of your request |
Within 7 working days of receipt |
| Identity verification (subject to your response) |
Within 7 working days of your cooperation |
| Deletion / deactivation from active systems |
Within 30 working days of successful verification |
| Removal from backup systems |
According to our backup cycle expiry schedule |
| Retained data (legal / tax / compliance) |
Only for the period required by applicable law |
If a deletion request takes longer due to pending legal, technical, fraud-related, payment, tax, or dispute reasons, we will inform you wherever it is appropriate and legally permissible to do so.
8. Backup Systems and Residual Data
Your personal data may continue to exist for a limited period within encrypted or otherwise protected backup systems maintained by EasyCater for disaster recovery and business continuity purposes. We wish to be transparent with you about this:
- Backup data is not accessed for active operational, marketing, or commercial purposes after your deletion request is accepted.
- When a backup cycle expires in the ordinary course, deleted account data will be systematically removed or overwritten according to our internal backup retention process.
- Backup systems are maintained in accordance with reasonable security standards and are completely inaccessible to general EasyCater operational personnel.
9. Third Parties Who May Hold Your Data
To deliver food ordering services to you, EasyCater shares limited personal data with trusted third-party service providers, including:
Restaurant partners
Delivery partners
Payment gateways
SMS & OTP vendors
Cloud hosting infrastructure
Customer support software
Analytics & crash reporting
Fraud prevention networks
Legal/Compliance advisors
When EasyCater deletes your account and associated personal data from its own active systems, we will also take reasonable steps to notify and request relevant service providers to delete or restrict your personal data — unless they are independently required by law to retain such data or have their own lawful basis for retention.
Note: Restaurant partners and delivery partners may maintain their own operational records of completed orders. Such retention is governed by their own policies and applicable law, not by EasyCater alone.
10. Marketing Communications After Deletion
Once your deletion request is processed, EasyCater will immediately stop sending you any promotional, marketing, or advertising communication. The only exceptions are:
- If you choose to register again with EasyCater and provide fresh explicit consent.
- Communication that is strictly necessary for pending orders, refunds, safety-related matters, or legally required notices.
To ensure that we do not inadvertently contact a deleted account for marketing purposes in future, EasyCater may retain a minimal suppression record — such as a cryptographic hash (not the raw value) of your mobile number or email address — solely to prevent such re-contact. This suppression record will not be used for any other purpose.
11. Ratings, Reviews, and User-Generated Content
If you have submitted ratings, reviews, feedback, or other content on the EasyCater platform:
- EasyCater will delete or anonymise such content following your account deletion, detaching it from your personal identity.
- Anonymised ratings and aggregated feedback may be retained for restaurant quality assessment, platform improvement, and service analytics.
- If a review or piece of feedback is connected to a legal dispute, fraud investigation, restaurant complaint, or regulatory inquiry, EasyCater may retain it for the period required by applicable law.
12. Special Situations and Emerging Challenges
As a practicing advocate would advise, there are several real-world, challenging scenarios that users and platforms like ours encounter. We address them directly here:
12.1 What If I Request Deletion During a Dispute?
If you have an active complaint, legal notice, consumer forum complaint, chargeback request, or payment dispute at the time of your deletion request, EasyCater will temporarily retain the minimum data necessary to resolve that dispute. We will restrict all non-essential processing and proceed with full deletion as soon as the matter is concluded.
12.2 What If I Am Suspected of Fraud or Policy Abuse?
If EasyCater has reasonable, documented grounds to believe that your account was involved in fraudulent activity — such as fake orders, coupon or referral abuse, payment manipulation, or impersonation — we may retain relevant data for investigation and legal purposes, even if a deletion request is submitted. This retention will be proportionate, purposeful, and time-limited. EasyCater will not use this ground to unfairly withhold deletion from genuine users.
12.3 What If a Court Order or Government Notice Requires Retention?
If EasyCater receives a lawful court order, a direction from a regulatory authority, or a valid law-enforcement request that requires us to preserve or produce certain data — including data about your account — we are legally obligated to comply. In such cases, your deletion request may be paused for the data subject to such direction, and we will inform you to the extent permitted by law.
12.4 What If I Have Multiple Accounts or Phone Numbers?
A deletion request applies only to the specific account identified in your request. If you have used EasyCater through multiple mobile numbers, email addresses, or accounts, each account must be separately identified in your deletion request. EasyCater is not obligated to proactively search for other accounts associated with you unless you provide specific identifying details.
12.5 What If I Am a Minor or Someone Is Requesting on My Behalf?
EasyCater is designed for individuals who are legally capable of entering into a contract for services. If a minor has accessed EasyCater services with the knowledge and consent of a parent or guardian, the parent or guardian may submit a deletion request on their behalf. Such requests must clearly state the relationship to the account holder and may require additional verification. Contact us at
support@easycater.co.in for guidance.
12.6 What If EasyCater Undergoes a Merger, Acquisition, or Corporate Restructuring?
If Easy Cater Services Pvt. Ltd. is acquired, merges with another entity, or undergoes any corporate restructuring, the successor entity will be bound by this Data Deletion Policy with respect to your personal data — to the fullest extent permitted by applicable law. You will be notified of any material change to your data rights as a result of such an event.
12.7 What About Cross-Border Data Flows?
EasyCater primarily operates within India. However, certain third-party service providers — including cloud hosting, analytics, and payment gateway partners — may store or process your data in servers located outside India. In all such cases, EasyCater will ensure that your data is handled with standards at least equivalent to those required under Indian law, and that deletion requests are honoured across borders wherever technically and legally feasible.
12.8 What If the App Is Discontinued?
If EasyCater discontinues its services, we will provide reasonable advance notice to users and offer a clear mechanism for requesting data deletion or export before the platform ceases operations. We will not retain your personal data beyond what is legally required post-discontinuation.
13. Re-Registration After Deletion
You are free to register with EasyCater again after your account has been deleted, using the same or a different mobile number or email address, subject to our then-current registration policies.
• Your previous order history, saved addresses, earned coupons, referral benefits, wallet credits, rewards, or promotional offers will not be restored under any circumstance.
• EasyCater reserves the right to restrict or decline re-registration where there is documented evidence of prior fraud, abuse, fake orders, payment misuse, or serious policy violations.
14. Consent and Its Withdrawal
Where EasyCater processes your personal data on the basis of your consent, you may withdraw that consent at any time by:
• Changing the relevant app permissions on your device hardware settings.
• Unsubscribing from marketing emails or outbound transactional SMS messages.
• Disabling system push notifications completely through device OS controls.
• Requesting systematic account deletion as described throughout this policy.
Please be aware that withdrawing consent may affect your ability to use some or all features of EasyCater. For example, if you withdraw permission for us to access your location or delivery address, we may not be able to arrange food delivery to you effectively. Withdrawal of consent does not affect the lawfulness of any processing that was carried out before the withdrawal, nor does it prevent EasyCater from retaining data where another lawful basis exists.
15. Your Responsibilities as a User
When submitting a deletion request, you agree to:
- Provide accurate and complete account details to help us identify and process your request.
- Not impersonate another person or submit a deletion request on behalf of someone else without authorization.
- Not submit false, misleading, or fraudulent deletion requests.
- Cooperate fully with our reasonable identity verification steps.
- Understand clearly that deletion may permanently affect your historical access to order logs, tax invoices, support records, user rewards, and pending refund data.
16. Children's Data
EasyCater is a food ordering platform intended for adults who are legally capable of entering into a contract for services, or for users who have the appropriate parental or guardian consent where required by law.
If EasyCater becomes aware — through any means — that it has inadvertently collected personal data from a child under the age of 18 without proper parental/guardian consent, we will take prompt steps to delete such data, unless retention is mandated by law or is necessary for safety or legal reasons. Parents or guardians who believe their child has used EasyCater without proper consent should immediately reach out to us at support@easycater.co.in.
17. Grievance Redressal
If you are unsatisfied with EasyCater's response to your deletion request, or if you believe your data rights have not been adequately respected, you may take the following diagnostic escalation courses:
- Write to us directly at support@easycater.co.in with the explicit subject line:
"Grievance — Data Deletion".
- Escalate explicitly to the appointed Grievance Officer of EasyCater (contact details will be published transparently on our website and app assets as required by applicable law).
- File a formal statutory complaint with the relevant authority under the Digital Personal Data Protection Act, 2023, once the relevant statutory provisions are notified and the Data Protection Board of India is formally constituted.
- Approach an appropriate consumer forum, competent civil court, or other legal judicial authority if your corporate or legal constitutional rights have been violated.
We take every grievance seriously. EasyCater will acknowledge your grievance within 7 working days and aim to completely resolve it within 30 working days of receipt.
18. Changes to This Policy
EasyCater may revise this Data Deletion Policy from time to time to reflect changes in applicable law, regulatory requirements, business operations, app features, or technological developments. The updated policy will be published on the EasyCater app and website with a revised 'Last Updated' date.
We encourage you to review this policy periodically. Where any change materially affects your rights, we will make reasonable efforts to notify you directly through the active interface app or by registered email.
19. Quick Deletion Request Template
You may copy and use the following structural template to submit your deletion request by email:
EMAIL DRAFT:
To: support@easycater.co.in
Subject: Request to Delete My EasyCater Account and Personal Data
Dear EasyCater Team,
I request deletion of my EasyCater account and all associated personal data.
Name: ___________________________
Registered Mobile Number: ___________________________
Registered Email ID (if any): ___________________________
I understand that some data may be retained as required by law.
Please confirm once my request has been processed. Thank you.
20. Internal Processing Steps (For EasyCater Operations Team)
Internal Compliance Blueprint Protocol
- Log the deletion request with the exact date, channel of receipt, and user details.
- Acknowledge receipt to the user within 7 working days.
- Verify user identity through OTP / email confirmation / account detail verification matching.
- Check active orders, pending refunds, complaints, disputes, fraud flags, wallet balances, coupon misuse, or pending legal matters.
- Disable login access and deactivate the account in active systems upon successful verification.
- Delete or anonymise: user profile, saved addresses, device tokens, marketing identifiers, and personal app activity data.
- Cease all promotional communication to the deleted account.
- Add a suppression record (hashed identifier only) to the marketing exclusion list.
- Retain legally required records (transaction data, GST/tax records, dispute-related data, security/audit logs) in restricted-access storage only.
- Notify relevant third-party service providers to delete or restrict the user's personal data as applicable.
- Send a structural deletion confirmation to the user via email or SMS.
- Record the completion date in the internal deletion log for audit and compliance purposes.
- For requests involving suspected fraud or legal holds, escalate to the Legal/Compliance team before proceeding.
⚑ Note: The internal deletion log must be maintained securely and must itself comply with applicable data retention policies.
21. Governing Law and Jurisdiction
This Data Deletion Policy shall be governed by and construed in accordance with the laws of India. Any dispute arising out of or in connection with this policy shall be subject to the exclusive jurisdiction of the competent courts located in Vadodara, Gujarat, India, unless otherwise required by applicable law.
This policy reflects EasyCater's genuine commitment to user privacy and data rights.
If you have any questions, please write to us — we are here to help.
Easy Cater Services Pvt. Ltd.
Last Updated: 16 June 2026