Privacy notice

Annara Café is a contemporary South Indian café preparing to open in Vidyaranyapura, Bengaluru, and a brand under Byalal Group Private Limited, Bengaluru, Karnataka, India. For this website and the messages you send us, we decide why and how your personal data is used. Under India’s Digital Personal Data Protection Act, 2023, that makes us the Data Fiduciary.

This notice explains, in plain language, what we collect, why we collect it, how long we keep it and the choices you have. It applies to this website, our enquiry form and the WhatsApp conversations you start with us.

When you send an enquiry

Your name; the email address or phone number you give us so we can reply; the type of enquiry you choose (General or Collaboration); your message; and whether you ticked the box asking us to tell you when Annara opens. We also note which page you wrote from and when your message arrived, so we can follow the conversation.

When you message us on WhatsApp

If you start a conversation with us on WhatsApp, we see your phone number, your WhatsApp name and picture as you have set them, and the messages you send. The WhatsApp links on our pages only open a chat with a friendly greeting ready to go; nothing is sent until you press send.

When you browse

Like almost every website, the servers that deliver our pages receive basic technical data: your IP address, your browser and device type, the pages you request and the time of each request. This is used to deliver the site, keep it secure and fix problems. We do not use it to identify you or to build a profile of you.

What we do not ask for

We never ask for payment details, passwords, government identifiers or sensitive information such as health details through this website or on WhatsApp. Please do not send them to us.

We use your personal data only for the purpose you gave it to us:

• to reply to your enquiry or message, and to continue the conversation you started;
• to tell you when Annara opens, only if you ticked that box;
• to consider the collaborations and gatherings you propose;
• to keep the website working and secure, and to prevent spam and misuse;
• to meet our obligations under the law.

We do not use your details for advertising, we do not add you to anyone else’s mailing list, and we do not make automated decisions about you.

We handle personal data in the spirit of India’s Digital Personal Data Protection Act, 2023. When you send us an enquiry or a WhatsApp message, you give us your details voluntarily for a clear purpose, a reply, and we use them for that purpose alone.

Opening updates are different. We send them only because you chose to receive them, by ticking a box that is never ticked for you. You can change your mind at any time.

Withdrawing consent is as easy as giving it: send us a message or reply on WhatsApp to say so. It does not affect anything we did with your details before you withdrew it.

We keep enquiries and WhatsApp conversations only for as long as we need them to reply and follow up, and no longer than twelve months, unless we are working together on an ongoing collaboration. In that case, we keep what the collaboration needs for as long as it continues.

If you asked for opening updates, we keep your contact details for that purpose until we have told you we are open or you ask us to stop, and in any case for no longer than twelve months.

Technical server logs are kept by our hosting provider for a limited period for security, and then deleted or overwritten. When we no longer need your details, we delete them, unless the law requires us to keep them longer.

We do not sell, rent or trade your personal data, and we do not share it with advertisers. We share it only with:

• the company that hosts this website, which stores enquiries and server logs on our behalf;
• an email delivery service that carries messages from the enquiry form to our inbox;
• authorities or courts, where the law requires us to.

Our service providers act on our instructions and may use your data only to provide their service to us. Some of them may process data outside India; where they do, we rely on the safeguards the law requires.

WhatsApp is run by Meta under its own terms and privacy policy. When you message us there, Meta handles that conversation as its policy describes, not ours, so please read it if you would like to know more.

This website does not use advertising or tracking cookies, and it does not run any analytics at present.

It stores one small preference in your own browser: whether you chose Reduce motion at the foot of the page. That choice lives in your browser’s local storage, is never sent to us, and can be cleared at any time through your browser settings.

If we ever add visitor statistics, we will choose a privacy-friendly service that does not follow you across other websites, and we will update this notice before we do.

We limit access to your messages to the people at Annara who need them to reply, and we use reasonable security safeguards to protect them. No system is perfectly secure, so if a breach affecting your personal data ever happens, we will tell you and the Data Protection Board of India, as the law requires.

Your personal data belongs to you. You can ask us to:

• tell you what personal data we hold about you and how we have used it;
• correct, complete or update it;
• erase it, once it is no longer needed or when you withdraw your consent;
• stop sending you opening updates, at any time;
• accept a person you nominate to exercise these rights for you, in the event of death or incapacity;
• look into a grievance, if you are unhappy with how we have handled your data.

To use any of these rights, send us a message through the enquiry form or on WhatsApp. We may ask you to confirm it is you before we act, and we will respond as soon as we can and within the time the law allows. If you are not satisfied with how we resolve a grievance, you may approach the Data Protection Board of India.

This website is meant for adults. If you are under 18, please ask a parent or guardian to get in touch with us for you. If we learn that we hold a child’s personal data without a parent’s or guardian’s consent, we will delete it.

We will update this notice when our practices change, for example when the café opens, when we add online ordering or when we start using a new service. The date at the top of this page shows when it last changed, and we will point out important changes on the site. Our terms and conditions explain the rest of the rules for using the website.