Privacy Policy -

Last Updated: July 20, 2025

Fikhy.com is committed to protecting your privacy. This Privacy Policy outlines how we collect, use, disclose, and protect your digital personal data when you visit and use Fikhy.com (the “Platform”), including when you browse restaurant listings, read or write reviews, create an account, or interact with our services (the “Services”).

By accessing or using our Platform or Services, you acknowledge that you have read, understood, and agree to the collection and processing of your information in accordance with this Privacy Policy and the provisions of the Digital Personal Data Protection Act, 2023. If you do not agree with the terms of this Privacy Policy, please do not access or use our Platform or Services.

1. Information We Collect and Purpose of Collection

We collect various types of information necessary for the operation and improvement of Fikhy.com as a restaurant and food review platform. We collect this data for specific, clear, and lawful purposes, as outlined below:

Personal Data You Provide Voluntarily:
- Account Registration: Name, email address, mobile number, username, and password (hashed).
  - Purpose: To create and manage your user account, enable you to post reviews, save favourites, and personalize your experience on the Platform. This is necessary for providing you access to interactive features.
- Profile Information: Profile picture (optional), city, dietary preferences, and other details you choose to add to your public profile.
  - Purpose: To enrich your user profile, allow other users to identify your reviews, and help us suggest relevant content and restaurants.
- Reviews and Ratings: Your written reviews, star ratings, photos, and any other content you submit related to restaurants and food.
  - Purpose: To facilitate the core service of Fikhy.com, which is providing a platform for user-generated restaurant and food reviews. This content is intended for public display on the Platform.
- Communications: Information you provide when you contact our customer support, send us feedback, or participate in surveys or contests.
  - Purpose: To respond to your inquiries, improve our services, and administer promotions.
- Location Information (Optional): If you grant permission, your precise or approximate location (via GPS, IP address, etc.).
  - Purpose: To help you discover nearby restaurants and show you relevant reviews based on your vicinity. You can manage this permission through your device settings.
Automatically Collected Information (Usage Data):
- Log Data: Your Internet Protocol (IP) address, browser type and version, operating system, device identifiers, pages of our Platform you visit, time and date of your visit, time spent on those pages, referring/exit pages.
  - Purpose: To analyze usage patterns, improve Platform functionality, diagnose technical issues, and ensure the security of our services.
- Cookies and Tracking Technologies: We use cookies, web beacons, and similar technologies. These are small files stored on your device that help us recognize your browser and remember certain information.
  - Purpose: To authenticate your login, remember your preferences, enhance security features, understand user behaviour, and deliver relevant content and advertisements. You can manage your cookie preferences through your browser settings.
- Transaction Data: If Fikhy.com integrates with booking or ordering features (e.g., through third-party partners), information related to reservations or orders made via the Platform (excluding sensitive payment details which are directly handled by payment gateways).
  - Purpose: To facilitate the booking/ordering process and provide you with related services.

2. Lawful Basis for Processing Your Information

We process your Personal Data based on the following lawful bases under the DPDP Act, 2023:

Consent: For specific purposes where you have given your free, specific, informed, unconditional, and unambiguous consent through clear affirmative action (e.g., ticking a box, clicking “Agree”). You have the right to withdraw your consent at any time, as described in Section 5.
Legitimate Uses: When processing is necessary for purposes for which you have voluntarily provided your Personal Data, and you have not indicated non-consent. This includes:
- Providing the Services you have requested (e.g., displaying your reviews, managing your account).
- Complying with legal obligations.
- Responding to medical emergencies.
- Fulfilling statutory functions of the State.
- For employment purposes (if applicable).
Other Lawful Purposes: As permitted by the DPDP Act, such as for the performance of a contract, compliance with a legal obligation, or to protect the vital interests of an individual.

3. How We Share Your Information

We may share your Personal Data with third parties only for the purposes outlined in this Privacy Policy and in compliance with the DPDP Act. We take reasonable steps to ensure that third parties adhere to similar data protection standards.

Publicly Displayed Information: Your username, reviews, ratings, profile picture, and any other content you choose to post on Fikhy.com are publicly visible to all users and may be shared with our business partners (e.g., restaurants) and distributed to a wider audience through third-party sites and services. You should be careful about revealing any sensitive details about yourself in such public postings.
Service Providers: We engage trusted third-party service providers to perform functions on our behalf, such as:
- Cloud hosting and infrastructure services
- Analytics and performance monitoring
- Customer support
- Marketing and advertising services
- Payment processing (Note: Sensitive payment details are processed directly by PCI-compliant payment gateways, and we do not store them on our servers.)
- These service providers are contractually obligated to process your data only as instructed by us and to maintain its confidentiality and security.
Business Partners: We may share information with business partners (e.g., restaurants, food delivery platforms) to facilitate specific services like reservations or order placements, or for collaborative marketing initiatives, only with your consent where required.
For Legal Reasons: We may disclose your Personal Data if required by law, regulation, or a valid legal process (e.g., court order, government request), or if we believe it’s necessary to protect our rights, property, or safety, or the rights, property, or safety of our users or the public.
Business Transfers: In the event of a merger, acquisition, or sale of all or a portion of our assets, your Personal Data may be transferred to the acquiring entity. We will notify you before your Personal Data becomes subject to a different Privacy Policy.
Aggregated or Anonymized Data: We may share aggregated or de-identified information that cannot reasonably be used to identify you individually. This data may be used for research, analytics, and industry reporting.

4. Data Retention

We will retain your Personal Data only for as long as is necessary to fulfill the purposes for which it was collected, as outlined in this Privacy Policy, or as required by applicable laws (e.g., for legal, tax, accounting, or audit purposes). When your Personal Data is no longer required, we will securely delete or anonymize it.

5. Your Data Protection Rights (Data Principal Rights)

Under the Digital Personal Data Protection Act, 2023, you, as the Data Principal, have the following rights regarding your Personal Data:

Right to Access and Information: You have the right to obtain confirmation as to whether or not Personal Data concerning you is being processed, and, where that is the case, access to the Personal Data and information regarding its processing.
Right to Correction and Completion: You have the right to request the correction of inaccurate or incomplete Personal Data concerning you.
Right to Erasure (Right to be Forgotten): You have the right to request the deletion of your Personal Data when it is no longer necessary for the purpose for which it was collected, or if you withdraw your consent, or if the processing is unlawful.
Right to Grievance Redressal: You have the right to an effective and convenient mechanism to resolve any grievances related to the processing of your Personal Data.

How to Exercise Your Rights: To exercise any of these rights, please contact our Grievance Officer using the contact details provided in Section 12. We may need to verify your identity before fulfilling your request to ensure the security of your Personal Data. We will respond to your request within a reasonable timeframe as stipulated by the DPDP Act.

6. Consent Withdrawal

You have the right to withdraw your consent at any time where we rely on your consent to process your Personal Data. The withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal. You can withdraw your consent for certain processing activities (e.g., marketing communications) through your account settings or by following unsubscribe links in emails. For other types of data processing, please contact our Grievance Officer.

7. Children’s Privacy

Fikhy.com is not intended for use by individuals under the age of eighteen (18) years. We do not knowingly collect Personal Data from children. If you are a parent or guardian and become aware that your child has provided us with Personal Data without your verifiable consent, please contact us immediately. If we become aware that we have collected Personal Data from a child without parental consent, we will take steps to remove that information from our servers. The DPDP Act prohibits tracking, behavioural monitoring, and targeted advertising of children without government permission, and we are committed to not processing children’s data if it is likely to cause any detrimental effects.

8. Data Security

We implement reasonable security measures, including technical and organizational safeguards, to protect your Personal Data from unauthorized access, alteration, disclosure, or destruction. These measures include encryption, access controls, secure server infrastructure, and regular security audits. However, please be aware that no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

9. Links to Other Websites

Our Platform may contain links to other websites or services that are not operated by us (e.g., restaurant websites, third-party booking platforms). This Privacy Policy applies only to Fikhy.com. We have no control over, and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services. We strongly advise you to review the Privacy Policy of every site you visit.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements, particularly in light of evolving regulations like the DPDP Act. We will notify you of any significant changes by posting the new Privacy Policy on this page and updating the “Last Updated” date at the top. Where required by applicable law, we will obtain your consent for any material changes. Your continued use of our Platform after any changes to this policy indicates your acceptance of the updated Privacy Policy.

11. Grievance Redressal Mechanism

We are committed to addressing your concerns promptly and effectively. If you have any questions, concerns, or complaints regarding this Privacy Policy or the processing of your Personal Data, please contact our Grievance Officer.

We will acknowledge your grievance and endeavor to resolve it in a timely and efficient manner.

Disclaimer: This Privacy Policy is intended for informational purposes only. It is crucial to consult with a legal professional specializing in Indian data privacy laws (specifically the DPDP Act, 2023) to ensure that your final Privacy Policy is fully compliant with all applicable regulations and accurately reflects the specific data processing activities of Fikhy.com.