Guest Privacy Policy

1. Identity of the Data Fiduciary

The Data Fiduciary responsible for personal data collected across the Sip N Shine complex is:

2. Categories of Personal Data Collected

• Table Reservation Data: Full guest name, telephone number, email address, date, time slot, guest headcount, and special dietary/celebration notes.
• Contactless QR Dine-In Ordering Data: Table identifier, selected culinary items, dish customizations, kitchen preparation instructions, and timestamps. (We do not process or store sensitive payment card details on our local servers).
• Event & Banquet Inquiries: Contact name, corporate organization, event type, guest estimates, budget indications, and audio-visual requirements.
• Physical Security & CCTV Surveillance: Video footage captured by security cameras throughout public entrances, dining spaces, corridors, and exterior perimeters.

3. Purpose of Processing & Lawful Grounds

Under the DPDP Act 2023, data is processed under the following lawful grounds:

• Consent: Expressly provided by you when submitting reservation requests or enquiry forms.
• Contractual Performance: Processing required to prepare your table, transmit your orders to the kitchen display, and complete your dining service.
• Legitimate Physical Safety: Operating closed-circuit surveillance to prevent security incidents and safeguard guests.
• Statutory Compliance: Maintaining accounting, billing, and tax records under the Goods and Services Tax (GST) Act and applicable state laws.

4. Data Principal Rights under the DPDP Act, 2023

5. Right to Withdraw Consent

You may withdraw consent at any time by emailing privacy@sipnshine.com. Upon receiving your withdrawal request, we will stop processing your data unless continuing processing is required for ongoing legal, taxation, or audit obligations.

6. Data Retention Guidelines

Table reservation contact details are retained for operational history up to 90 days. Accounting and invoice transaction records generated at our Point of Sale are preserved for the statutory minimum of 7 years as required by Indian GST and commercial taxation statutes. CCTV recordings are automatically overwritten every 30 days unless required for active police or security investigations.

7. Protection of Minors

We do not knowingly process personal data of children under 18 years of age without parental or guardian consent. In dining spaces, table reservations submitted by minors will be confirmed only in coordination with accompanying adults.

8. Grievance Redressal Mechanism & Officer Contact

In compliance with the DPDP Act 2023, the designated Grievance Officer for Sip N Shine is:

If your grievance is not resolved to your satisfaction, you retain the statutory right to escalate the matter to the Data Protection Board of India.