Effective Date: 13 October 2026
INDDOT is operated by CTRLAB Private Limited.
We respect your privacy and explain in this Privacy Policy how personal information may be collected, used, shared, stored and protected when you access INDDOT or use an INDDOT-powered restaurant website.
This policy covers personal information processed by CTRLAB Private Limited for INDDOT's own website, subscriptions, accounts, billing, support and administration.
For restaurant customers ordering through a tenant's website, the restaurant may independently determine how customer information is used for fulfilling orders and managing customer relationships.
Where INDDOT processes customer information on a restaurant's instructions, the restaurant and INDDOT may have different responsibilities under applicable data protection laws.
Depending on the services used, information may include:
Name, email address and mobile number
Business name and restaurant information
Account login and authentication details
Subscription and transaction records
Customer order details and delivery addresses
Menu, staff and reservation information
Device details, browser information and IP address
Support messages and account-related communications
Cookie preferences and website usage information
We collect only information relevant to the services and purposes described in this policy.
Personal information may be processed to:
Register and authenticate users
Create and manage restaurant accounts
Provide website, POS, ordering and reservation functionality
Process subscriptions and payments
Send order, payment and service notifications
Respond to support requests
Detect fraud and maintain platform security
Meet legal, tax and accounting obligations
Improve platform performance and reliability
We use consent or another lawful basis permitted by applicable law, as appropriate to the processing purpose.
Restaurants using INDDOT may collect customer names, phone numbers, addresses, order details and reservation information.
The restaurant is responsible for ensuring it has an appropriate legal basis for its own collection and use of customer information.
INDDOT uses such information to provide the contracted technology services and for other purposes permitted by applicable law and relevant agreements.
Payments may be processed through integrated third-party payment gateways.
INDDOT may receive transaction references, payment status and limited payment-related information required for billing and reconciliation.
The payment provider's own privacy policy may also apply.
We do not represent that INDDOT stores full card numbers or security codes.
We may use cookies and similar technologies for authentication, security, user preferences and other enabled functions.
Any optional analytics or marketing tracking must follow applicable consent and disclosure requirements.
See our Cookie Policy for further information.
We may share relevant information with authorised service providers such as hosting companies, payment processors, communication providers, technical support providers and other vendors needed to operate INDDOT.
Restaurant owners and their authorised staff may access customer information relevant to their own operations.
Information may also be disclosed when legally required or necessary to protect lawful rights and safety.
We do not sell personal information to advertisers.
We use reasonable technical and organisational safeguards designed to protect information from unauthorised access, alteration, loss or disclosure.
No online system can be guaranteed completely secure.
Users should protect their passwords and immediately report suspicious account activity.
We retain personal information only for as long as needed for legitimate service purposes, applicable contractual arrangements and legal requirements.
Account and order data may be retained for different periods depending on business operations, legal obligations and the applicable restaurant's instructions.
Our Data Deletion Policy provides additional information.
Subject to applicable law, individuals may have rights to access information about processing, request correction or erasure, withdraw consent where applicable, and seek grievance redressal.
Requests may be submitted through our designated privacy contact.
We may need to verify your identity before fulfilling a request.
INDDOT business accounts are intended for adults who can enter into binding contracts.
Restaurant websites may be accessible to a wider audience. Any processing involving children must comply with applicable legal requirements.
Some service providers may process information outside India.
Where cross-border processing occurs, we will comply with applicable legal restrictions and required safeguards.
We may update this Privacy Policy to reflect legal, security or operational changes.
The effective date will be updated, and material changes will be communicated where required.
Company: CTRLAB Private Limited
Website: https://inddot.com
Privacy Email: info@inddot.com
Address: Sector 62 , Noida , U.P. 201309
You may contact us regarding privacy questions, complaints and requests relating to your personal information.