Every order, call, and feedback form takes your customer's information.
A customer orders biryani on Swiggy. Your system now has their name, phone number, home address, and payment details. Then they call to complain. Then they fill your feedback form. That is three places their information is now sitting. Most restaurant and cloud kitchen owners never think about this. But the new data law says you must.
Think about how your restaurant works. A customer calls and gives their phone number. Your staff writes it in a register. Another customer orders on Zomato — their address is saved in your POS system. Someone fills your Google feedback form — their name and email go to your inbox. All of this is collecting people's information. Under the new law, you must show a simple notice at each of these points. The notice must say what you collect and why.
List every place you collect customer information — calls, apps, forms, billing.
Add a one-line notice on your feedback form saying why you collect details.
Check if your business is ready. Takes 3 minutes. Visit saralprivacy.com/assessment
“An order ticket can carry more personal data than the kitchen realises.”
Free — takes 3 minutes
Answer a few simple questions. Get your free Readiness Score — sent to your email or WhatsApp.
Check My Readiness →Take our free 3–5 minute industry assessment to find out your compliance risk level.
Take Free Assessment →Free Download
The Complete DPDPA Compliance Guide
Plain English. Everything your business needs to understand the DPDP Rules 2025 — written for founders, not lawyers. Now in 7 Indian languages.
Download the Guide →5 Ready-to-Use Templates
Start complying — not just reading
Privacy Notice, Consent Language, Data Inventory, DSR SOP, Vendor Register. Delivered free to your email.
2-min reads, plain English, every morning. Free forever.