Privacy
Policy

This Privacy Policy ("Policy") governs the collection, processing, storage, and disclosure of personal data by Aelvra ("Platform Operator", "we", "us", or "our") in connection with the operation of this mobile application ("Application"), developed and maintained for May Fair Restaurant, Rohru, Himachal Pradesh — 171207 ("Restaurant Partner").

Aelvra acts as the technology platform operator and data infrastructure provider. May Fair Restaurant acts as the independent business entity responsible for order fulfilment, food preparation, and customer-facing services. Both entities may hold certain categories of user data as described in this Policy.

We collect personal information strictly to the extent necessary for the lawful operation of the Application and fulfilment of orders. The following constitutes a complete and transparent disclosure of all data categories collected:

All personal data is processed exclusively for the following specified, explicit, and legitimate purposes. No data shall be processed in any manner incompatible with these purposes:

• Creation, maintenance, and administration of your user account on the Application.
• Processing, confirming, and fulfilling food orders placed through the Application.
• Delivery of real-time transactional push notifications — order confirmation, food ready status, delivery boy assignment, OTP for delivery, and delivery completion.
• Generation and delivery of computer-generated digital receipts and tax invoices for online payment orders.
• Communication of your name, phone number, and delivery address to assigned delivery personnel solely for order fulfilment.
• Processing of refund requests in accordance with the refund terms described in Section 10.
• Responding to customer support inquiries through in-app help, support contact, or direct communication during working hours.
• Retention of checkout preferences (saved address, landmark) to facilitate faster ordering on subsequent visits.
• Maintaining a permanent order record that serves as a digital transaction log and validation reference, retained by both Aelvra and May Fair Restaurant.
• Ensuring the security, integrity, and lawful operation of the Application and its underlying infrastructure.

We do not process your personal data for advertising, behavioural profiling, or any commercial purpose beyond fulfilment of your orders on this Application.

Aelvra does not sell, license, rent, or otherwise commercially transfer your personal data to any third party. Aelvra explicitly undertakes that it shall never share your personal data with any external party for commercial gain. Disclosure is limited strictly to the following circumstances:

• May Fair Restaurant: Your name, mobile number, order details, and delivery address are shared with the Restaurant Partner solely for preparing and dispatching your order. The Restaurant independently maintains its own record of this data as part of its operational and digital transaction logs.
• Delivery Personnel: Your name, mobile number, and delivery address are disclosed to the assigned delivery individual exclusively for completing delivery. Delivery staff are employed directly by May Fair Restaurant and are not agents of Aelvra.
• Razorpay (Payment Gateway): Online payments are processed through Razorpay. Aelvra receives only a transaction reference identifier; no financial credentials are transmitted to or stored by us. Users are advised to review Razorpay's Privacy Policy at razorpay.com/privacy prior to completing any online transaction.
• Google (Authentication): Where you authenticate via Google OAuth, identity verification is conducted through Google's infrastructure. We store only the profile data you have expressly authorised.
• Legal & Regulatory Obligation: We may disclose personal data where required by applicable law, court order, or lawful directive of a competent governmental or regulatory authority in India.

Your personal data and order records are held by two parties under this arrangement — Aelvra (as platform operator) and May Fair Restaurant (as the fulfilling business entity). Each party holds data for distinct and legitimate purposes:

• Aelvra's Custody: Aelvra holds your account data, authentication credentials, notification tokens, and order records on secure cloud infrastructure. Aelvra expressly undertakes that this data shall never be shared with any third party for commercial, marketing, or any other purpose beyond those enumerated in this Policy.
• May Fair Restaurant's Custody: The Restaurant independently maintains order records as a permanent digital transaction log. This serves as a validation and accountability mechanism for all orders processed through the Application.
• Responsibility Allocation: For matters concerning platform data and technology, contact Aelvra. For matters concerning order-specific data held by the Restaurant, contact May Fair Restaurant directly. Contact details for both parties are provided in Section 17.

All personal data handled by Aelvra is stored on secure, access-controlled cloud infrastructure (ISO 27001 certified, Mumbai, India) employing industry-standard encryption. All data is stored exclusively on servers located within India — no cross-border data transfer occurs. Appropriate technical and organisational measures are implemented to protect against unauthorised access, disclosure, alteration, or loss.

• All transmissions between the Application and our servers are conducted over encrypted TLS/HTTPS connections.
• Access to personal data is restricted to authorised personnel on a strict need-to-know basis.
• Session authentication tokens are cryptographically secured and immediately invalidated upon logout.
• Push notification device tokens are permanently deleted from our servers upon logout or account deletion.

No transmission method over the internet is absolutely secure. In the event of a breach posing risk to your rights, affected users will be notified in accordance with applicable law — and in any case within 72 hours of detection, in compliance with the DPDP Act 2023.

Push notifications delivered through this Application are exclusively transactional. The following notification events are sent throughout the lifecycle of your order:

• Order placed and confirmed
• Food preparation status
• Delivery boy assigned (viewable in-app on the orders screen)
• One-Time Password (OTP) for delivery verification
• Order delivered / completed

We do not send promotional, marketing, or unsolicited notifications. You may revoke notification permissions at any time through your device's operating system settings without affecting your ability to use the Application. Upon logout, your device notification token is immediately deleted from our servers.

The Application supports the following payment methods, subject to availability as configured by May Fair Restaurant:

• Online Payment via Razorpay: Processed entirely within Razorpay's secure environment. Upon successful payment, you will immediately receive a computer-generated receipt within the Application, which you are advised to save for your records. Aelvra receives only a transaction reference identifier. Razorpay operates under its own security certifications. Users must review Razorpay's Privacy Policy at razorpay.com/privacy.
• Cash on Delivery (COD): Where enabled by May Fair Restaurant, payment is collected in cash at the time of delivery. Upon successful delivery confirmation, a computer-generated digital invoice is issued to you within the Application. Refunds for COD orders are not processed through the Application; any such matters must be resolved manually by contacting May Fair Restaurant directly. Availability of COD is at the sole discretion of May Fair Restaurant and may be disabled at any time.

GST: As of the effective date of this Policy, no GST is charged on orders placed through this Application. In the event GST becomes applicable in future, it shall be included in the displayed price (inclusive) and disclosed clearly to users prior to checkout.

Delivery services are operated exclusively by May Fair Restaurant using its own delivery staff. Aelvra does not employ, manage, or supervise delivery personnel.

• Assignment Notification: Upon assignment of a delivery person to your order, you will receive a push notification and can view the assignment on the orders screen within the Application.
• Contact with Delivery Personnel: In-app features are provided to facilitate communication with your assigned delivery person where necessary.
• Delivery Timeframes: No guaranteed or fixed delivery timeframe is committed by either Aelvra or May Fair Restaurant. Users are requested to exercise patience. All food is freshly prepared upon order confirmation.
• Delivery Charges: Delivery charges are determined solely by May Fair Restaurant based on the delivery area or landmark selected at checkout. Orders within the immediate vicinity of the restaurant may qualify for free delivery. The applicable delivery charge is displayed clearly at checkout prior to order confirmation.
• Veg & Non-Veg Handling: May Fair Restaurant affirms that vegetarian and non-vegetarian items are handled, prepared, and packaged with strict separation. Users are advised to verify their selections carefully before placing an order.

Order Cancellation by User:

• A cancel button is available within the Application prior to admin approval of your order. Once May Fair Restaurant approves and begins processing your order, the cancel button is automatically removed and further cancellation must be requested manually by contacting the Restaurant directly.

Order Cancellation by Restaurant:

• May Fair Restaurant reserves the right to cancel any order — whether online or COD — at its sole discretion. A reason for cancellation may be communicated in-app at the Restaurant's discretion.
• For cancelled online payment orders, a refund will be initiated subject to the terms set out below.

Refund Policy:

• In-app refund processing is applicable to online payment orders only. For Cash on Delivery orders, refund-related matters are handled manually through direct contact with May Fair Restaurant. No in-app refund mechanism exists for COD transactions.
• Razorpay's payment gateway processing fees and applicable GST thereon are non-refundable. The allocation of these charges — i.e., whether the Restaurant or the user bears them — is determined by May Fair Restaurant on a case-by-case basis.
• Refunds may be processed as full, partial, or custom amounts, at the sole determination of May Fair Restaurant. In rare circumstances, custom refund amounts may be agreed upon via direct telephonic communication with the Restaurant.
• All refunds are initiated by Aelvra only upon written or confirmed approval from May Fair Restaurant. A computer-generated refund receipt will be available within the Application upon processing.

Wrong or Incorrect Items:

• In the event of receipt of an incorrect item, users must contact May Fair Restaurant directly and promptly. Resolution (exchange or otherwise) is managed exclusively by the Restaurant. No in-app feature currently exists for raising wrong-item complaints; manual contact is required.

The availability of this Application and its features is subject to the following conditions:

• Restaurant Operating Hours: Real-time restaurant open/closed status is displayed within the Application. Orders can only be placed during active operating hours. If the Restaurant is closed, order execution will not proceed and the reason will be displayed in-app.
• Temporary Service Suspension: May Fair Restaurant may temporarily suspend services under exceptional circumstances (e.g., maintenance, special closures). Where possible, advance notice will be communicated through the Application.
• Platform Maintenance & Updates: Aelvra may perform scheduled or emergency maintenance on the Application's infrastructure. During such periods, the Application may be temporarily unavailable. Users will be informed within the Application where feasible.
• Service Discontinuation: In the event May Fair Restaurant permanently ceases operations or terminates its engagement with Aelvra, users will be notified through the Application prior to service closure. Upon discontinuation, users may request deletion of their personal data in accordance with Section 13.
• Feature Updates: Aelvra may introduce, modify, or discontinue Application features at any time as part of ongoing development. Material changes affecting user experience will be communicated in advance where practical.

As a Data Principal under the Digital Personal Data Protection Act, 2023, you are entitled to exercise the following rights:

Where a concern pertains to data held by May Fair Restaurant, contact the Restaurant directly. See Section 17 for contact details.

You have the right to request deletion of your personal data at any time. The Application provides an in-built account deletion feature within your account settings, which you may use directly. Alternatively, you may submit a deletion request by email to Aelvra.

Upon receipt of a verified deletion request:

• Personal identifiers held by Aelvra will be permanently purged within 30 (thirty) days of the verified request, subject to mandatory legal retention obligations (see Section 14). Confirmation emailed to your registered address within 7 working days.
• Push notification tokens are deleted immediately upon account deletion.
• Deletion Status: Track your request at any time by visiting data-deletion.html or emailing support@aelvra.in.
• As May Fair Restaurant independently holds order records, users requiring complete removal from Restaurant systems must contact May Fair Restaurant directly.

• Active Accounts: Retained for the duration of your active account.
• Transaction & Order Records: Minimum 3 (three) years from transaction date, in compliance with applicable Indian accounting and taxation laws.
• In-App Order History: Orders older than 3 (three) weeks may be cleared from the Application's interface for performance optimization. Complete order records are maintained by May Fair Restaurant for all disputes and legal requirements.
• Notification Tokens: Deleted immediately upon logout or account deletion.
• Deleted Accounts: Personal identifiers purged within 30 days of confirmed deletion request, subject to legally mandated retention obligations.

This Application is not intended for use by individuals below the age of 18 (eighteen) years, consistent with the Indian Contract Act, 1872 (Sections 11–12). Aelvra does not knowingly collect personal information from minors under 18. Should we become aware that a minor has provided personal data, we will take immediate steps to delete such information. Please notify us at support@aelvra.in if you believe a minor has registered on the Application.

Aelvra reserves the right to revise or replace this Policy at any time. Material amendments will be communicated to users through the Application prior to their effective date. Continued use of the Application following the effective date of any revision constitutes your acceptance thereof.

For platform-related privacy concerns, technical matters, data deletion requests, or any issue pertaining to Aelvra's handling of your data, contact us below. We aim to respond within 7 (seven) business days.

For concerns pertaining to order-specific data, refunds, delivery, or data held by the Restaurant, contact May Fair Restaurant directly: