Privacy notice

How posdost and the restaurant you ate at handle your personal data, under India’s Digital Personal Data Protection Act, 2023.

Who holds your data

The restaurant that served you decides what is collected and why — it is the Data Fiduciary. posdost supplies the software it runs on and processes the data on the restaurant’s instructions, as its Data Processor.

A request about your data can be made to either. If you make it to us we will pass it to the restaurant that holds it, because they are the ones who must decide.

What is collected

  • Your name, mobile number and email, if you give them at the counter
  • What you ordered, what it cost, and the tax on it
  • Table bookings made in your name
  • Loyalty points, and feedback you leave

None of it is required to eat. A bill can be raised with no details at all, and the till asks rather than assumes.

Why

To raise your bill and send you a receipt, to run the loyalty scheme if you are in it, to honour a booking, and — for the invoice figures only — because tax law requires the restaurant to keep them.

Marketing messages go only to people who agreed to them separately, and agreeing to get your bill on WhatsApp is not agreeing to offers.

How long it is kept

Tax invoices are the exception, and it is worth being plain about it: the CGST Act requires the restaurant to keep records for 72 months after the annual return. So a bill is never deleted — instead your name, number and email are removed from it, and what is left is the invoice number, the amounts and the tax.

Who else sees it

It is not sold, and it is not used to build a profile of you elsewhere.

Your rights

  • To be told what is held about you
  • To have it corrected
  • To have it erased, and to withdraw consent at any time
  • To complain, to us and to the Data Protection Board of India

Every bill sent to you through posdost links to a page about your data. There you can withdraw your consent at once, or ask for a copy of your data or for it to be erased — without asking anyone.

Open your privacy page — with your bill's link, or a code sent to your phone

Ask the restaurant. They log the request and run it — the software has a defined path for exactly this, so the answer does not depend on somebody being available to write a database query.

Withdrawing consent stops future use. It cannot remove a tax invoice, for the reason above, but it does remove you from it.

Grievance officer

Loading the current contact…

If you are not satisfied with the answer, you may complain to the Data Protection Board of India.