Legal
Privacy policy
Short version: no accounts, no cookies, no analytics, no ad trackers. The only personal information we hold is what you typed into a form and sent us yourself.
1. Who this covers
This policy covers mallufood.in, the site published by Ente Mallu Foods. For the purposes of India's Digital Personal Data Protection Act, 2023, we are the data fiduciary for the information described below.
2. What we collect
Only what you send through a form. The forms on the contribute page ask for:
- Your name — required, so we can credit you;
- Your email — required, so we can follow up or check a detail;
- Your mobile number — optional, only if you would rather we called;
- Your message — the recommendation, correction, closure report or business details you wanted to send.
We also record which form you used and when you sent it. That is the whole list. There is no sign-up, no login and no profile.
3. What we don't collect
No cookies. No analytics or measurement scripts. No advertising, retargeting or social-media pixels. We do not track which pages you read, and we cannot build a profile of you.
4. What happens automatically
Two things involve other companies purely as a side effect of the site being on the internet:
- Hosting. The site is served by Vercel, which keeps standard server logs — including your IP address, your browser and the page requested — for security and operational reasons. We do not use those logs to identify readers.
- Fonts. The site's typefaces load from Google Fonts, so your browser makes a request to Google's servers, which sees your IP address. We send Google nothing else about you.
5. Why we use what you send
- To read, verify and act on your recommendation, correction or closure report;
- To reply to you, or ask a follow-up question;
- To credit you by name if we publish what you told us;
- To create or update a listing, if you asked us to list your kitchen or catering business.
We do not send newsletters or marketing, and we will not add you to a mailing list.
6. What becomes public
Your name may appear on the site as a credit next to something you contributed. Your email and mobile number are never published. The exception is a business listing: if you asked to be listed as a cook or caterer, the business contact details you gave us are published on purpose — that is the point of the listing.
Tell us you would rather not be credited by name, and you won't be.
7. Where it's stored
Form submissions go into a Postgres database hosted by Supabase. The database is configured so that the public site can only add submissions — it cannot read, edit or delete them. Only we can read submissions, through the Supabase dashboard. Supabase and Vercel are infrastructure providers with servers outside India, so your data may be stored or processed abroad.
8. Who else sees it
Nobody. We do not sell, rent or share your personal information. The only third parties involved are the service providers named above — Supabase for storage, Vercel for hosting, Google for fonts — acting on our behalf. We would disclose information only if required by law.
9. How long we keep it
We keep submissions for as long as they are useful for maintaining the directory — a closure report matters for as long as the listing does. Ask us to delete yours and we will, unless we are legally required to keep it.
10. Your rights
Under the Digital Personal Data Protection Act, 2023, you can ask us to:
- tell you what personal data of yours we hold and what we have done with it;
- correct or complete anything inaccurate;
- erase it;
- stop relying on your consent — after which we stop using it for anything the law does not require;
- remove your name as a credit from anything published.
Email mallufoods34@gmail.com and we will act on it. If you are unhappy with how we handled a request, you may complain to the Data Protection Board of India.
11. Children
This site is not directed at children, and the forms should not be used by anyone under 18 without a parent or guardian's consent. If you believe a child has sent us personal information, email us and we will delete it.
12. Security
Submissions travel over HTTPS and are stored in a database the public site can only write to, never read. No system is perfectly secure, but we hold as little as possible, which is the best protection we can offer you.
13. Changes
If this policy changes, the date at the top changes with it.
14. Contact
Privacy questions, or a request about your own data: mallufoods34@gmail.com.