Privacy Policy

Effective Date: 17/06/2025

Last Updated: 17/06/2025

This Privacy Policy ("Policy") describes how Gaharwar Tech Solutions ("Company", "we", "us", or "our"), operating under the brand name BoxNBite, collects, uses, processes, shares, and protects the information provided by individuals ("Users", "you") who use our mobile application, website, and associated services (together referred to as the "Platform").

1. Introduction and Scope

At BoxNBite, we value your trust and are committed to protecting your personal information in compliance with the Personal Information Protection and Electronic Documents Act (PIPEDA) of Canada. We also align with international best practices such as the General Data Protection Regulation (GDPR) and California Consumer Privacy Act (CCPA) where applicable. This Policy applies to all users residing in Canada who access our services through the Platform.

2. Types of Information We Collect

2.1 Directly Provided Personal Information

Full legal name, email address, and mobile number used for account creation and contact purposes.
Delivery addresses including home, work, or other designated delivery locations.
Profile photos (if uploaded).

2.2 Automatically Collected Information

Device Information: Device model, OS version and language settings.
Log Data: Time and date of access, app features used, error messages, and session duration.
Location Data: Real-time GPS data for service personalization and delivery efficiency (only with user consent).

2.3 Information from Third Parties

Google Atuhentication data including name, email, and profile picture.
SMS gateway and email provider data related to communication success or delivery failures.

3. Purpose and Legal Basis for Data Processing

We collect and process your data only where we have a lawful basis to do so:

Consent: When you agree to location access, marketing emails, or optional profile fields.
Contractual Necessity: To perform services as outlined in our Terms of Service, such as fulfilling meal orders and sending notifications.
Legal Obligations: To comply with tax reporting, anti-fraud, or other legal requirements.
Legitimate Interests: For analytics, troubleshooting, and improving user experience without infringing on user rights.

4. How We Use Your Information

To register and manage your user account
To authenticate your identity via email or Google login
To allow you to browse, search, and place orders with tiffin providers
To facilitate secure payments (note: we do not store payment card data)
To deliver meals and updates regarding order status
To send administrative and promotional messages
To provide user support and handle feedback or complaints
To comply with applicable laws, such as food safety or financial audits

5. Information Sharing and Disclosure

Your data is never sold. It may be shared under the following conditions:

Delivery Personnel: Receives name, phone, and address for fulfilling orders.
Service Providers: Including hosting services, communication platforms (email/SMS), and analytics tools.
Legal Requirements: Government agencies or court orders requiring data submission.

6. Data Retention and Deletion

We retain your data while your account is active and for 3 months after deletion to allow for legal compliance and account recovery. You may request earlier deletion by contacting us directly. Backup copies may remain in our systems for administrative purposes for an additional limited period.

7. Data Protection and Security Measures

Encryption of personal data during transmission (HTTPS/TLS)
Access control policies for employee and contractor access
Regular vulnerability scanning and third-party security audits
Immediate breach notification procedures if applicable

8. Your Rights as a User

Subject to verification of identity, you have the right to:

Access and receive a copy of your data
Correct inaccurate or outdated information
Delete your data (“right to be forgotten”)
Withdraw previously given consent
Object to processing or restrict how we use your data

To exercise your rights, email support@boxnbite.com

9. Marketing and Communication Preferences

We may send you service notifications, order updates, and marketing messages via email, SMS, or push notifications. You can opt-out of non-essential communications at any time by clicking "unsubscribe" in our emails or updating your profile settings.

10. Children’s Privacy

Our services are not intended for individuals under the age of 18. We do not knowingly collect data from children. If such data is discovered, it will be deleted immediately.

11. International Transfers

All user data is stored and processed on servers provided by Firebase, which may be located in the United States. While your data may be transferred and stored outside Canada, including the U.S., we ensure that such transfers are conducted in accordance with applicable data protection laws and that appropriate safeguards are in place to protect your privacy.

12. Third-Party Integrations

BoxNBite integrates with third-party services such as Google for login and email/SMS tools for communication. These services may collect data independently under their respective privacy policies. We recommend reviewing their policies for additional detail.

13. Updates to This Policy

This Policy may be updated to reflect changes in our services, data processing practices, or legal obligations. We will notify you of significant updates via the Platform or by email.

14. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Gaharwar Tech Solutions
Operating as BoxNBite
Email: support@boxnbite.com
Address: London, Ontario, Canada