Ootato

Applicability and Scope

EFS Tech India Pvt Ltd and its affiliates ("EFS Tech India Pvt Ltd," the "Company," "we," "us," and "our") are committed to protecting and respecting your privacy. This policy outlines the types of information EFS Tech India Pvt Ltd may collect when you use our websites, applications, and online services (collectively, "Services"), alongside our practices for collecting, maintaining, protecting, and disclosing that data.

This policy applies specifically to information collected through our Services and related electronic communications (email, text, etc.). It does not apply to information you provide to third parties, such as social networks or restaurants where you book or pay through our Services; we encourage you to consult those parties directly regarding their privacy practices.

By using our Services or registering an account, you agree to this policy and provide informed consent for the processing of your personal data as described herein. If required information is not provided, EFS Tech India Pvt Ltd may decline to provide Services. We may update this policy periodically; continued use of our Services constitutes acceptance of those updates.

Permissible Age: You must be at least 18 years old or have express permission from a parent or guardian to use our Services. Parents or guardians are fully responsible for a minor's use of the Services and any resulting legal liability.

Scope: This policy applies comprehensively to customers, merchant partners, delivery partners/agents, digital platform users, event participants, and personnel (employees, contractors, and third parties).

Information We Collect and How We Use It

We collect several types of information from and about our users:

• Personal Information: Data that identifies you directly or in combination with other accessed info, provided by you, generated through use, or obtained from third parties.
• Other Information: Data regarding your use of Services that may not directly identify you, such as device details, internet connection, and usage patterns.

Information You Provide to Us

• Account Data: Name, address, email, phone number, password, gender, date of birth, and profile picture. You may optionally provide this via third-party sign-ins like Google or Facebook.
• User Content: Reviews, photos, comments, order history, and reservation details. If you provide info for a third party (e.g., ordering for someone else), you confirm you have their consent.
• Bookings and Preferences: Details on events attended, seat preferences, dietary restrictions, and loyalty program participation.
• Activities & Communications: Search queries, ad clicks, and messages exchanged with other users, delivery partners/agents, or merchants. We may record these for quality, internal processing, or investigating policy violations.
• Transactional Information: Phone number, billing address, and payment card details required to process requests. This may be shared with PCI-compliant payment gateways.
• Public Contributions: Ratings, tips, and bookmarks posted to public areas are at your own risk and may be shared with a wider audience.
• Security Data: CCTV footage and vehicle info at our premises, or photos/videos taken during events for documentation.
• Contact Information: If you choose to upload your contact book, we process names and phone numbers. You warrant that you have obtained explicit consent from these contacts.

Data of Minors

Our Services are generally not for individuals under 18. However, if an adult provides limited info about a minor (e.g., for a family-friendly event ticket), they represent they are the legal guardian and consent to processing for that specific, limited purpose. Such data will not be used for marketing or user profiling.

Information Collected Automatically

We may automatically collect data even if you are not logged in:

• Usage Data: Search queries, pages viewed, clicks, and referral URLs.
• Device Info: IP address, operating system, browser type, and unique device identifiers (IDFA, etc.). Mobile device IDs may be used instead of cookies to store preferences.
• App Status: We may collect details about other applications on your phone to enable features like UPI links.
• Location: Precise GPS data (latitude/longitude) to provide location-based features and promotions.
• Cookies and Tracking: We use cookies, pixel tags, and web beacons to enhance your experience, track usage, and assist with security. Third parties linked through our Services may also use these tools; we do not control their practices.

Information from Third Parties

We may obtain info from social media services if you link your account, as well as from business partners (merchants, payment providers), data brokers, and public sources. We reserve the right to combine this with info collected directly to improve our Services.

How We Use the Information We Collect

We use your data for various purposes, including:

• Service Delivery: Processing transactions, responding to support queries, and sharing data with relevant partners (merchants, delivery partners/agents, vendors).
• Maintenance and Security: Diagnosing technical issues, preventing fraud/abuse, and enforcing our legal rights and contracts.
• Personalization and Research: Understanding user behaviour to improve features and offering customized content and deals.
• Marketing: Sending promotional communications (email, SMS, WhatsApp) and displaying relevant advertisements. We may use third-party analytics like Google Analytics to evaluate usage.
• Integration: Sharing info across the EFS Tech India Pvt Ltd ecosystem (including for unified identity management and coordinated support).
• Advanced Processing: Using AI tools to analyse patterns and provide recommendations, or anonymizing data for unrestricted use.
• Recruitment: When applying for a role, we process your resume and assessment results to manage the hiring process.

How We Share the Information We Collect

We may disclose your information in the following ways:

• Affiliates: To our subsidiaries under common ownership.
• Service Providers: To contractors and suppliers helping with communications, payment processing, or voice recognition.
• Legal & Audit: To comply with legal processes (subpoenas, court orders), protect the safety of any person, or address violations of our terms.
• Business Transfers: To a buyer in the event of a merger, restructuring, or asset sale.
• Merchants: Necessary info is shared with restaurant partners to fulfill orders or reservations; they are responsible for their own privacy practices once they receive this data.
• Payment Processors: Card info is shared with third-party processors to fulfill transactions and may be stored for future use.

Data Storage and Your Rights

EFS Tech India Pvt Ltd may retain your information on servers in India or other international locations via contracted third parties.

Your Rights:

• Management: You can manage notification preferences and unsubscribe from commercial emails, though administrative notices cannot be opted out of.
• Deletion: You may request to permanently delete your account. Once deleted, account data cannot be restored, though backups may remain for legal and risk mitigation purposes.
• Limitations: Rights may be limited if requests are excessive, encroach on others' safety, or relate to legal proceedings.

Information Pertaining to Service Partners

This section applies to independent contractors or restaurant staffs, such as delivery partners/agents, logistics providers, or procurement support.

Data Collected:

• Verification Info: Government IDs (Aadhaar, PAN, driving license), background check results, and criminal record history (where permitted).
• Operational Data: Vehicle registration, real-time geolocation while logged in, task completion metrics, and earnings history.
• Financial Info: Bank account details and tax IDs (GSTIN) for payment processing.

Use and Sharing: This data is used to verify eligibility, assign tasks, process earnings, and monitor service quality. We may share your name, photo, and real-time location with customers to facilitate service delivery.

Security and Miscellaneous

We follow industry standards to safeguard your data, including physical and electronic procedures. Payment providers are PCI-compliant. However, we assume no liability for errors in transmission or unauthorized third-party access beyond our control. You are responsible for keeping your login credentials confidential.

Policy Amendments: We reserve the right to change this policy at any time. Material changes will be posted here, and continued use of Services after such changes constitutes acceptance.

Contact Us

For queries regarding this policy or data processing, contact our Data Protection Officer (DPO):