Privacy Policy

1. Overview

GRAND LINE CAFÉ & RESTAURANT ("GRAND LINE", "we", "our", or "us") is dedicated to respecting and protecting the privacy of our dining guests, website visitors, and patrons. This Privacy Policy details the types of personal data we collect, how it is safeguarded, and your statutory rights under applicable privacy legislation (including India's Digital Personal Data Protection Act).

2. Information We Collect

We adhere strictly to data minimization and collect only what is essential to provide restaurant services:

• Table Inquiries & Contact Requests: Name, phone number, email address, and dining preferences when submitted voluntarily through our reservation/contact form.
• Transaction & Invoicing Data: Items ordered, payment method (Cash, UPI, Card), and billing timestamp. We do not store complete credit/debit card numbers or UPI PINs.
• Technical & Essential Session Data: Basic HTTP request headers, IP address, and essential session identifiers necessary to ensure secure operation and prevent automated abuse.

3. Purpose and Legal Basis for Processing

Your data is processed strictly for:

• Facilitating dining table inquiries and responding to customer questions.
• Fulfilling legal and tax obligations, including GST and invoice generation where applicable.
• Protecting website integrity, preventing unauthorized administrative access, and mitigating brute-force risks.

We do not sell, rent, or monetize your personal information to third-party advertisers or data brokers.

4. Third-Party Service Providers

We utilize trusted cloud service providers to maintain operations:

• Hosting: Vercel Inc. (Secure web application hosting and Content Delivery Network).
• Database & Authentication: Google Cloud Firebase (Cloud Firestore and Firebase Authentication).

All service providers process data under strict data processing agreements and enterprise security standards.

5. Data Retention & Security

We retain billing and invoice records in accordance with statutory accounting and commercial tax record requirements. Contact form inquiries are purged after fulfillment. Technical measures include TLS 1.3 in-transit encryption, strict Content Security Policy, and rate-limiting.

6. Your Rights & Privacy Requests

You have the right to request access to, correction of, or deletion of your personal contact records (subject to statutory accounting retention exemptions). To exercise these rights, please contact our administration at: