1. Introduction & Data Controller

Plames Indian Grill (“we,” “our,” or “us”) is dedicated to protecting your privacy and ensuring transparency in how we collect, use, and safeguard personal information. This Privacy Policy applies to our website (https://plamesgrill.com/) and all services, including dine-in, takeout, and event catering inquiries.

Under the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA/CPRA), the Data Controller responsible for your personal information is:

2. Information We Collect

We believe in strict data minimization. We collect only the minimum necessary information to provide our authentic pure vegetarian dining and catering services:

• Voluntarily Provided Contact Data: When you submit an inquiry for live dosa catering, party trays, or dining questions via our contact channels or phone/WhatsApp, we may collect your name, phone number, email address, event date, venue location, and estimated guest count.
• Order & Payment Processing Data (Zero Card Storage): Online food orders placed via our website are processed through our third-party online ordering partner, Nento / MenuOnline (menuonline.com). Payment transactions occur exclusively within Nento’s PCI-DSS Level 1 certified gateway. Plames Indian Grill never receives, processes, or stores your credit card numbers, CVVs, or bank credentials.
• Technical Server Logs: When you access our website, our cloud hosting infrastructure (Hostinger / LiteSpeed) automatically logs standard technical metadata, including your IP address, browser type, operating system, referring URL, and timestamp. These logs are used strictly for network security, DDoS prevention, and server performance diagnostics.

3. Legal Bases for Processing (GDPR Compliance)

In accordance with GDPR Article 6, we process personal data under the following lawful bases:

• Performance of a Contract (Art. 6(1)(b)): Processing catering orders, customer requests, and providing food preparation and delivery services.
• Legitimate Interests (Art. 6(1)(f)): Protecting website integrity, preventing fraudulent abuse, defending against cyber attacks, and maintaining web server performance.
• Consent (Art. 6(1)(a)): Direct customer communications initiated voluntarily by you via email, contact forms, or WhatsApp.

4. We Never Sell Your Personal Information

We share information only with trusted service providers who assist us in operating our business under strict confidentiality agreements:

• Hostinger: Cloud web hosting, content delivery network (CDN), and infrastructure security.
• Nento / MenuOnline: Online ordering software and PCI-compliant payment gateway.

5. Cookies & Tracking Technologies

Our website utilizes a minimalist, privacy-first technical architecture:

• Essential Session Cookies: We only set strictly necessary technical cookies (e.g., server load balancing and administrative login validation).
• Zero Cross-Site Ad Tracking: We do not deploy third-party advertising tracking pixels (such as Facebook Pixel or ad retargeting cookies) that follow you across the internet.

6. Your Privacy Rights (GDPR & CCPA/CPRA)

Depending on your jurisdiction, you have statutory rights regarding your personal data:

• Right of Access & Portability: You may request a copy of the personal data we hold about you.
• Right to Rectification: You may request correction of inaccurate or incomplete information.
• Right to Erasure (“Right to be Forgotten”): You may request permanent deletion of your personal data from our operational records.
• Right to Restrict or Object to Processing: You may limit how we process your personal data.
• Right to Non-Discrimination: We will never discriminate against you, deny service, or alter prices because you exercised your privacy rights.

To exercise any of these rights, please contact us at info@plamesgrill.com. We will respond to verified requests within 30 calendar days without charge.

7. Data Retention & Security Controls

We maintain appropriate technical and organizational measures to safeguard your personal data against unauthorized access, loss, or alteration. All web communications are encrypted in transit using modern Transport Layer Security (TLS 1.3). Catering inquiry records are retained only for the duration needed to coordinate the event and satisfy tax/accounting requirements. Technical server access logs are automatically rotated and deleted after 90 days.

Questions & Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our compliance practices, please reach out to us at:
Plames Indian Grill
Attn: Privacy & Data Protection
401 E Main St, Suite#C, Middletown, DE 19709
Email: info@plamesgrill.com | Telephone: +1 (302) 220-4022