Privacy Policy

1. Information We Collect

When you interact with us — whether placing an order, contacting us, or visiting our website — we may collect the following information:

• Contact details: Name, phone number, email address
• Delivery information: Delivery address and location
• Order information: Items ordered, order history, preferences
• Technical data: IP address, browser type, pages visited (via standard server logs and analytics tools)
• Behavioural data: Pages viewed, buttons clicked, scroll depth, time on page, session recordings (where consent is given)
• Marketing attribution data: UTM campaign parameters, referral source, landing page (stored in session memory only, never persisted)
• Communication data: Messages sent to us via WhatsApp, email, or our contact form

We do not collect payment card details directly. Payments through Swiggy or Zomato are governed by those platforms' privacy policies.

2. How We Use Your Information

We use the information we collect to:

• Process and fulfil your food orders
• Contact you about your order status or queries
• Improve our menu, service, and operations
• Understand which parts of our website are most useful (aggregate analytics)
• Measure the effectiveness of our marketing campaigns
• Send offers or updates (only with your consent)
• Comply with applicable laws and regulations in India

3. Analytics and Tracking Technologies

We use the following third-party analytics tools on our website. All tools are loaded only after you give consent, except for essential functionality (see Section 4).

3.1 Google Analytics 4 (GA4)

Operated by Google LLC. GA4 collects anonymised event data about how visitors use our website — pages visited, items viewed, add-to-cart actions, and similar interactions. No personally identifiable information (PII) is included in events we send to GA4. Data is retained in GA4 for 14 months by default.

Google may transfer data internationally. See Google Privacy Policy.

3.2 Google Tag Manager (GTM)

GTM is a tag management container used to deploy and manage analytics and marketing scripts. GTM itself does not collect data — it controls when GA4 and other tags fire based on your consent settings. GTM fires no tags until analytics consent is granted.

3.3 Microsoft Clarity

Operated by Microsoft Corporation. Clarity records anonymised session replays and generates heatmaps to help us understand how visitors interact with our website. Clarity is configured to mask all sensitive form fields (name, phone number, and message inputs) so their content is never recorded.

Session recordings are retained for 30 days. See Microsoft Privacy Statement.

3.4 Events We Track

The following events may be tracked with your analytics consent. All events are anonymised — no name, phone number, or message content is ever included:

• Page view (page path only)
• Item viewed in featured section (item name, category, price)
• Item added to cart (item name, category, price — no customer data)
• Item removed from cart
• Cart cleared
• Category selected on menu or homepage
• Menu search initiated (search query is not collected)
• Offer viewed (offer identifier only)
• Welcome video played
• Contact form submitted (subject category only — no name, phone, or message)
• Partnership interest link clicked
• Scroll depth milestones (25%, 50%, 75%, 90%)

4. Cookies and Local Storage

Our website uses the following storage mechanisms:

4.1 Essential (no consent required)

• fm_consent_v1 (localStorage) — stores your cookie consent choice (accepted / rejected / no choice). Required to remember your consent decision across visits. Retained indefinitely until you clear browser storage or withdraw consent.
• fm_cart (localStorage) — stores your current cart items so they persist between page reloads. Contains item IDs and quantities only. No personal data.

4.2 Analytics (consent required)

• _ga, _ga_*, _gid (cookies, set by Google Analytics) — identify unique visitors and sessions for analytics purposes. Retained 1–2 years by Google.
• _clsk, _clck, CLID (cookies, set by Microsoft Clarity) — identify sessions for session recording. Retained up to 1 year.

4.3 Marketing (consent required)

• fm_utm_session (sessionStorage) — stores UTM campaign parameters from the URL (e.g., which ad or link brought you to the site). Cleared automatically when you close the browser tab. Never includes personal data.
• Google advertising cookies may be set if marketing consent is granted (e.g., for Google Ads remarketing via GTM). See Google's advertising technology policies.

5. Consent Management

When you first visit foodomatic.co.in, a consent banner will appear. You can:

• Accept All — enable analytics and marketing cookies
• Reject Non-Essential — only essential cookies are used; no analytics or marketing tools load
• Manage Preferences — choose individual categories (Analytics, Marketing)

All analytics and marketing tools default to denied until you make a choice. Your preference is stored in your browser's local storage and honoured on every subsequent visit.

To change your consent at any time, click Cookie Preferences in the footer of any page.

6. Sharing of Information

We do not sell, rent, or trade your personal information to third parties. We may share your information only in the following circumstances:

• With delivery partners or third-party platforms (Swiggy, Zomato) to process your order
• With analytics service providers (Google, Microsoft) under the consent framework described above
• With law enforcement or regulatory authorities when legally required
• With service providers who assist us in operating our business (e.g., website hosting), under strict confidentiality agreements

7. WhatsApp & Phone Communications

When you contact us via WhatsApp or phone, your conversation may be used to process your order and improve our service. We do not share your phone number or WhatsApp messages with any third party for marketing purposes.

8. Data Retention

• Order and contact data: Retained for as long as necessary to fulfil the order or respond to your query, and as required by Indian tax and legal obligations (typically 7 years for financial records).
• GA4 analytics data: 14 months (Google's default retention period).
• Microsoft Clarity session recordings: 30 days.
• Consent record (fm_consent_v1): Stored in your browser until you clear it or withdraw consent. We do not store your consent choice on our servers.
• UTM session data: Deleted when you close your browser tab.

9. International Data Transfers

Google (Google Analytics, GTM) and Microsoft (Clarity) are US-based companies. When analytics consent is granted, anonymised event data is transferred to their servers. Both companies participate in recognised data protection frameworks. No personally identifiable information is included in these transfers.

10. Your Rights

You have the right to:

• Request access to personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data (subject to legal obligations)
• Withdraw consent to analytics and marketing tracking at any time via Cookie Preferences
• Withdraw consent to marketing communications at any time

To exercise these rights, contact us at [email protected] or call +91 95281 19494.

11. Security

We implement reasonable technical and organisational measures to protect your information from unauthorised access, disclosure, or misuse. Our website uses HTTPS, security headers, and hotlink deterrence. Sensitive form fields are masked in session recordings. However, no internet transmission is 100% secure, and we cannot guarantee absolute security.

12. Changes to This Policy

We may update this Privacy Policy from time to time. The updated version will be posted on this page with the revised effective date. Continued use of our services after changes constitutes acceptance of the updated policy.

13. Contact Us

Foodomatic (Food 4U)
Near Kambal Ka Tazia, Faiz Ganj, Moradabad, Uttar Pradesh 244001
Phone: +91 95281 19494
Email: [email protected]