1. Introduction & Overview
Welcome to MJ's Corner ("we", "our", or "us"). We operate the restaurant food ordering service available via our website (https://mjscorner.in), our Dine-In digital menu ordering platform, and our mobile applications distributed via the PhonePe Appstore (Indus Appstore), Google Play, and direct web installation.
We are committed to respecting and protecting the privacy of our customers, dining guests, and application users. This Privacy Policy outlines our transparent policies and practices regarding the collection, use, processing, and protection of your personal information when you use our services.
2. Scope of Application
This Privacy Policy applies to all users of:
- MJ's Corner Mobile Application: Downloaded or accessed via the PhonePe Appstore (Indus Appstore) or Android APK distribution.
- Web Ordering Platform: Accessed at https://mjscorner.in and related sub-routes (/menu, /dinein, /login).
- In-Store Dine-In Table Ordering: Accessed directly via in-store QR codes for contactless dining order placement.
3. Information We Collect
We collect only the minimum necessary information required to process and deliver your food orders efficiently:
A. Information You Provide to Us Directly
- Contact & Identification Details: Your name, mobile telephone number, and email address (optional) provided during login or checkout.
- Delivery Addresses: Street address, flat/house number, apartment/colony name, landmark, city, and postal PIN code saved in your account for doorstep food delivery.
- Dine-In Information: Table number and dining notes when placing orders inside our restaurant.
- Customer Feedback & Reviews: Dish ratings, 1-to-5 star reviews, and comments submitted for delivered orders to evaluate kitchen quality.
- Customer Support Inquiries: Communications and notes exchanged when you contact our helpline or support email regarding order status or refunds.
B. Automatically Collected Technical Information
- Device & Connection Information: Device model, operating system version, browser type, IP address, and network connection status used to maintain application session stability.
- Local Storage & Session State: We utilize modern browser LocalStorage and SessionStorage to preserve your active shopping cart items, selected dietary preferences (Pure Veg / Non-Veg filter), and visual display preferences (Light / Dark mode).
4. Mobile Application Permissions (Indus / PhonePe Appstore)
When running our Android application, we strictly request only standard permissions essential to core restaurant ordering functionalities:
- INTERNET & ACCESS_NETWORK_STATE: Required to fetch live menu items, prices, promotional offers, check store opening hours, and submit orders to our kitchen server.
- POST_NOTIFICATIONS (Optional): Used to notify you of real-time updates regarding order status (Order Received, Preparing in Kitchen, Out for Delivery, or Ready for Table Pickup).
- VIBRATE (Optional): Provides haptic feedback when adding items to your cart or confirming an order.
5. How We Use Collected Information
We process your data exclusively for legitimate operational purposes:
- Order Fulfillment: To prepare your selected food items, dispatch delivery personnel, and verify order handoff.
- Authentication & Account Security: To verify your mobile number through instant One-Time Password (OTP) verification without requiring complex passwords.
- Real-Time Tracking & Digital Invoices: To generate printable, sequential order receipts, calculate applicable taxes and delivery charges, and display order countdowns.
- Quality Improvement: To calculate aggregate rating scores for menu items so guests can see genuine popular community choices.
- Customer Care & Grievance Resolution: To address queries, facilitate order cancellations within the authorized 2-minute grace window, and resolve delivery delays.
- Legal & Financial Compliance: To maintain standard business records, billing books, and tax compliance as mandated under Indian law.
6. Payment Processing & Financial Security
We take financial security with extreme seriousness. MJ's Corner supports multiple secure payment methods including PhonePe, UPI (Google Pay, Paytm, BHIM), Razorpay, and Cash on Counter / Cash on Delivery.
All electronic payment transactions are encrypted and processed through RBI-authorized, PCI-DSS compliant payment gateways (such as PhonePe and Razorpay). MJ's Corner NEVER collects, sees, or stores your credit card numbers, debit card numbers, CVV codes, bank passwords, or UPI MPINs.
7. Data Sharing & Third-Party Service Providers
We strictly limit data sharing to reputable, vetted technology partners who assist us in operating our business under strict confidentiality agreements:
- Payment Gateways (PhonePe, Razorpay, UPI): Receives order amount and transaction tokens to process payment authorization securely.
- OTP Authentication (Phone.Email): Facilitates instant mobile number verification via secure SMS or WhatsApp OTP protocols.
- Cloud Infrastructure (MongoDB Atlas): Secure cloud database storage hosted with enterprise-grade firewalls and access controls.
- Food Media CDN (Cloudinary): Delivers optimized, fast-loading images of our food items.
- Delivery Riders: Assigned restaurant delivery staff receive your name, contact phone number, and delivery address solely for the purpose of completing your food delivery.
We do not share your personal information with third parties for their independent marketing or advertising campaigns. We may disclose personal data only when required by applicable law, warrant, court order, or governmental authority.
8. Data Retention & User Deletion Rights
We retain your customer profile and order history only for as long as necessary to provide ongoing service and fulfill statutory accounting and tax obligations.
Your Rights Under Indian Digital Personal Data Protection Act (DPDPA):
- Right to Access & Review: You can view your saved profile, delivery addresses, and past order history anytime by signing into your account.
- Right to Rectification: You can update or edit your name, contact email, and saved addresses directly within your account settings.
- Right to Erasure (Account & Data Deletion): You have the unconditional right to request the permanent deletion of your personal account, saved delivery addresses, and customer profile from our databases.
To request the complete deletion of your data, send an email to mjscornerinfo@gmail.com or support@mjscorner.in with the subject "Data Deletion Request" along with your registered 10-digit mobile number. Your account and associated customer records will be purged within 7 business days, and confirmation will be sent to you.
9. Data Security Safeguards
We implement comprehensive technical, physical, and administrative safeguards to protect your personal information against unauthorized access, loss, misuse, or alteration:
- Enforced HTTPS/TLS protocol across all web and application traffic.
- Encrypted MongoDB Atlas database with role-based access restrictions.
- Strict rate-limiting and anti-abuse safeguards on OTP and checkout APIs.
- Continuous security monitoring and software dependency audits.
10. Children's Privacy
Our services are intended for general audiences and are not directed to children under 13 years of age. We do not knowingly collect personal data from minors. If a parent or guardian discovers that a child has provided us with personal information without consent, please notify us immediately, and we will promptly delete the data from our servers.
11. Modifications to this Privacy Policy
We may occasionally update this Privacy Policy to reflect enhancements in our restaurant operations, technology infrastructure, or legal requirements. When changes are made, the "Last Updated" date at the top of this page will be revised. Significant changes will be announced through an in-app notice or website banner.
12. Contact Information & Grievance Redressal
In accordance with the Information Technology Act, 2000, and rules made thereunder, as well as the Consumer Protection (E-Commerce) Rules, 2020, the contact details of our Grievance Officer and restaurant headquarters are provided below: