How We Collect, Use
& Protect Your Data

1Data Controller Information

Data Fiduciary: Zae Food Private Limited

App Name: Margo Deliveries

CIN: U10790MH2026PTC464599  ·  GSTIN: 27AACCZ8554H1ZU

Registered Office: Shop No. 9, MV Bhakti Mandir Road, Near Hariniwas Circle, Naupada, Thane (West) – 400602, Maharashtra, India

Privacy Contact: margodeliveries@gmail.com

2Data We Collect

We collect the following categories of personal data:

3Location Data & GPS (Google Coordinates)

Margo Deliveries requests access to your device's precise GPS location for the following purposes:

• Order Delivery: To accurately identify your delivery location and assign the nearest delivery partner.
• Restaurant Discovery: To show available restaurants within Thane West, Maharashtra.
• Live Tracking: To provide real-time map-based tracking via Google Maps Platform APIs.
• Fraud Prevention: To verify orders are placed within our serviceable zones.
• Delivery ETA: To compute accurate estimated arrival times based on current GPS coordinates.

Location data processed through Google Maps Platform APIs is subject to Google's Privacy Policy. We fully comply with Google Maps Platform Terms of Service for all coordinate and mapping-related data usage.

4SMS & Communications — DLT Compliance

Margo Deliveries sends transactional and promotional SMS messages in compliance with TRAI's Telecom Commercial Communications Customer Preference Regulations (TCCCPR), 2018, and the Distributed Ledger Technology (DLT) platform requirements.

• Transactional SMS: Order confirmation, OTP for login/payment, delivery updates, account notifications. These are service-critical and cannot be opted out of while using the App.
• Promotional SMS: Offers, discounts, new restaurant launches, and seasonal campaigns. Sent only with explicit user opt-in. Opt out at any time by replying STOP or via App Settings → Notifications.
• All SMS templates are registered on the TRAI DLT platform under the sender ID assigned to Zae Food Private Limited.
• Your mobile number is used exclusively for App communications. It is not sold or rented to third-party advertisers.

5How We Use Your Data

• To create and manage your account and authenticate your identity.
• To process and fulfil your food orders and coordinate delivery.
• To send OTPs and service notifications via SMS, push notification, and email.
• To provide real-time GPS-based delivery tracking via Google Maps.
• To personalise your in-app experience, including restaurant and dish recommendations.
• To process payments and prevent fraud.
• To resolve customer complaints and disputes.
• To comply with legal obligations under Indian law, including GST reporting.
• To conduct App analytics and improve platform performance.
• To send promotional communications where consent has been provided.

6Data Sharing & Third Parties

We do not sell your personal data. We share data only as necessary:

7Data Retention

• Account data is retained for the duration of your account plus 3 years post-closure for legal and audit purposes.
• Order and transaction records are retained for 7 years as required under GST and tax regulations.
• Location logs are retained for 90 days and then permanently deleted.
• Support communications are retained for 2 years.
• You may request deletion of your account and personal data at any time (subject to legal retention obligations).

8Your Rights (DPDPA 2023)

Under India's Digital Personal Data Protection Act, 2023, you have the following rights:

• Right to Access: Request a summary of personal data we hold about you.
• Right to Correction: Request correction of inaccurate or incomplete personal data.
• Right to Erasure: Request deletion of your personal data (subject to legal retention obligations).
• Right to Withdraw Consent: Withdraw consent for non-essential processing at any time without affecting the legality of prior processing.
• Right to Grievance Redressal: Lodge a complaint with our Grievance Officer.
• Right to Nominate: Nominate a trusted person to exercise your rights in the event of incapacity or death.

9Data Security

• All data is encrypted in transit using TLS 1.2 or higher.
• Sensitive data at rest is encrypted using AES-256.
• Payment data is handled exclusively by PCI-DSS compliant payment gateway partners.
• We employ access controls, firewalls, and regular security audits.
• In the event of a data breach, we will notify affected users within 72 hours as required by applicable law.

10Children's Privacy

Margo Deliveries is not directed at persons under 18 years of age. We do not knowingly collect personal data from minors. If we become aware that a minor's data has been collected without parental consent, we will delete it promptly. Parents or guardians may contact us at margodeliveries@gmail.com.

11Cookies & Tracking Technologies

Our mobile App does not use browser cookies. We use the following technologies:

• Device Identifiers: For analytics and fraud prevention.
• Firebase / Analytics SDKs: For crash reporting and performance monitoring. Data is aggregated and anonymised.
• Push Notification Tokens: To send order and delivery notifications via FCM (Android) and APNs (iOS).

12Grievance Officer