Privacy Policy, Cookies and Data Rights
Last updated 2026-11-05
Who we are
Restrologic is the trade name of a sole proprietorship. This policy applies to the website restrologic.com and to the services we provide.
- Legal name: Nidhi Arora (Proprietor)
- Trade name: RESTROLOGIC
- GST registration: 23BQTPA8215R1ZA
- Udyam registration: UDYAM-MP-23-0276918
- Registered office: B 704, Aaditya Gateway, MR 10 Square, Sukhliya, Indore, Madhya Pradesh 452010
- Contact: deepak@restrologic.com
1. Introduction
Restrologic (“we”, “us”, “our”) is committed to protecting the privacy of our customers and website visitors. This policy explains what personal information we collect, how we use it, how it is protected, and your rights under applicable Indian law. That includes the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection Act, 2023 (DPDP Act).
2. Information we collect
2.1 Information you provide
- Contact details: name, email address, phone number, business name.
- Account information: login credentials, role, and profile data.
- Business data: restaurant or hospitality business information you enter into the platform.
- Communications: messages sent through our contact form or by email.
2.2 Information collected automatically
- Usage data: pages visited, features used, session duration, clicks, and interactions with the platform.
- Device information: IP address, browser type, operating system.
- Cookies and similar technologies (see section 8).
2.3 Payment information
We do not collect or store any payment card details. All payment transactions are processed by Razorpay (Razorpay Software Private Limited). Razorpay’s collection and processing of your payment data is governed by its own privacy policy. We receive only a transaction confirmation and a masked payment reference from Razorpay.
3. How we use your information
- To provide, operate, and maintain the platform and your subscription.
- To process payments and issue GST-compliant invoices.
- To respond to your enquiries and provide customer support.
- To send transactional communications such as invoices, renewal reminders, and important service updates.
- To detect and prevent fraud, theft, and security incidents.
- To improve platform features and performance using aggregated, anonymised analytics.
- To comply with legal obligations under Indian law, including GST record-keeping requirements.
4. Legal basis for processing
We process your personal data on these bases: (a) performance of the subscription contract between us; (b) compliance with applicable legal obligations, including the GST Act and the Income Tax Act; (c) your consent where you have given it; and (d) our legitimate interests in improving and securing the platform.
5. Data sharing and disclosure
5.1 Third-party service providers
We share data only with processors who are bound by confidentiality obligations.
- Razorpay: payment processing.
- Web3Forms: contact form submission handling.
- Google Analytics 4: website analytics, as your cookie choice allows (see section 8).
- Cloud infrastructure providers: hosting and data storage.
5.2 Legal disclosure
We may disclose your information if required by Indian law, court order, or government authority, or to protect the rights and safety of Restrologic, its customers, or the public.
5.3 No sale of data
We do not sell, rent, or trade your personal information to any third party for marketing purposes.
6. Data retention
- Financial and GST-related records are retained for a minimum of 7 years as required under the GST Act, 2017.
- Account and platform usage data is retained for the duration of the subscription plus 30 days after cancellation.
- Contact enquiry data is retained for up to 2 years.
- After the applicable retention periods, data is securely deleted or anonymised.
7. Data security
We follow reasonable security practices and procedures as required under the IT (SPDI) Rules, 2011. These include encryption in transit (TLS), access controls, and regular security reviews. No internet transmission is 100% secure, so we cannot guarantee absolute security.
8. Cookies, the consent banner and Google Analytics 4
Our website uses essential cookies that the site needs to work. It also uses Google Analytics 4 (GA4) to count visits and understand which pages and actions are useful. We do not use advertising cookies, and we do not run ads, so the advertising signals in Google Consent Mode are always set to denied.
8.1 How the consent banner works
The cookie banner uses Google Consent Mode v2. It sets these defaults before any analytics runs:
- Visitors in the European Economic Area (EEA), the United Kingdom and Switzerland: analytics is off by default, so GA4 sets no analytics cookies until you press Accept.
- Visitors everywhere else: analytics is on by default. You can turn it off at any time by pressing Decline, and GA4 then sets no analytics cookies.
- Every visitor, everywhere: advertising storage, advertising user data and ad personalisation are denied. Pressing Accept turns on analytics only, never advertising.
We remember your choice in your browser, and on your next visit we apply it before GA4 sends anything.
8.2 Changing your choice
You can change your choice at any time with the “Cookie settings” button in the footer of every page. It opens the banner again, so you can press Accept or Decline. You can also block or delete cookies in your browser settings, though some parts of the site may then not work as intended.
8.3 Consent under the DPDP Act, 2023
Where we rely on your consent, it is given by a clear action, it is specific to the purpose stated here, and you can withdraw it as easily as you gave it. Withdrawing consent does not affect processing done before you withdrew it.
9. Your rights
You have the right to:
- Access the personal information we hold about you.
- Correct inaccurate or incomplete personal information.
- Request deletion of your personal data, subject to our legal retention obligations.
- Withdraw consent at any time where processing is based on consent.
- Raise a grievance about the use of your personal data.
- Nominate another person to exercise these rights on your behalf if you die or become unable to act, as the DPDP Act, 2023 provides.
To use any of these rights, write to deepak@restrologic.com. We will respond within 30 days.
10. Children’s privacy
The platform is not directed at individuals under the age of 18. We do not knowingly collect personal information from minors.
11. Changes to this policy
We may update this policy from time to time. The revised policy will be posted on this page with an updated date. Continued use of the service after changes means you accept them.
12. Grievance officer
In accordance with the IT Act, 2000, the IT (SPDI) Rules, 2011 and the DPDP Act, 2023, the following person is designated as Grievance Officer.
- Name: Nidhi Arora (Proprietor)
- Email: deepak@restrologic.com
- Registered office: B 704, Aaditya Gateway, MR 10 Square, Sukhliya, Indore, Madhya Pradesh 452010
- Response time: within 30 days of receiving the grievance.
Related policies
Read our terms and conditions, refund policy and cancellation policy.