Privacy Policy

Koconut Tree Restaurant operates the website koconuttree.com and the online food ordering and table reservation services offered on it. Our registered address is Office Unit B-28, Shivam Complex, Hadapsar, Pune, Maharashtra, 411013, India. For any privacy-related question you can write to us at contact@fibonce.com.

This policy is published in accordance with the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 and the Digital Personal Data Protection Act, 2023.

We collect only the information needed to serve you. Depending on how you use the site this includes:

• Account details: name, mobile number, email address and password (stored in hashed form) when you sign up or log in.
• Order details: the dishes you order, customisations, delivery or takeaway preference, delivery address, city, state, pincode, and any special instructions.
• Reservation details: name, contact number, party size, date, time and occasion when you book a table or an event.
• Business details: your GSTIN, only if you choose to provide it for a GST invoice.
• Communications: messages you send through the contact form, WhatsApp, email or phone, and reviews you submit.
• Technical data: IP address, browser type, device type, pages visited and approximate location, collected automatically through cookies and server logs.

We do not collect or store your card number, CVV, UPI PIN, net-banking credentials or any other payment instrument details. These are entered directly on our payment partner's secure page (see section 4).

• To accept, prepare, deliver and track your food orders and table reservations.
• To send order confirmations, status updates, invoices and reservation reminders by SMS, email or WhatsApp.
• To process payments and refunds and to prevent fraud.
• To respond to your enquiries, complaints and feedback.
• To personalise your experience, remember your saved addresses and show relevant offers.
• To send promotional offers and newsletters, only where you have opted in. You can unsubscribe at any time.
• To analyse site usage and improve our menu, website and services.
• To comply with legal obligations such as tax, accounting and law-enforcement requests.

Online payments on koconuttree.com are processed by Razorpay Software Private Limited ("Razorpay"), a payment gateway authorised by the Reserve Bank of India and certified under the PCI DSS standard. When you choose to pay online you are redirected to, or presented with, Razorpay's secure checkout.

• Your card, UPI, wallet or net-banking details are collected and processed by Razorpay and are never stored on our servers.
• We receive from Razorpay only a payment reference, the payment status, the amount paid and the payment method type (for example "UPI" or "card"), which we keep with your order record.
• Razorpay's handling of your data is governed by its own privacy policy, available at razorpay.com/privacy.
• Cash on delivery orders involve no online payment data.

We use cookies and browser storage to keep you signed in, remember the items in your cart and your saved addresses, and understand how visitors use the site. Specifically:

• Essential cookies and local storage are required for login sessions, the shopping cart and checkout to work. The site cannot function without them.
• Analytics cookies, where enabled, help us measure traffic and improve the site. They collect aggregated, non-identifying data.
• Third-party cookies may be set by embedded services such as Google Maps or our payment partner when you interact with them.

You can control or delete cookies through your browser settings. Blocking essential cookies may prevent you from ordering online.

We never sell your personal information. We share it only with:

• Payment partners (Razorpay) to process payments and refunds.
• Delivery staff and partners who need your name, address and phone number to deliver your order.
• Communication providers (SMS, email and WhatsApp gateways) to send you order and reservation updates.
• Hosting and IT providers that securely store our data and run the website.
• Government authorities where required by law, court order or to protect our legal rights.

All service providers are bound to use your data only for the service they perform for us.

• Order, invoice and payment records are retained for 8 years as required by Indian tax and accounting laws.
• Account information is kept for as long as your account is active. You may ask us to delete your account at any time.
• Reservation and enquiry records are kept for up to 24 months after the date of the booking or message.
• Technical logs are kept for up to 90 days for security and troubleshooting.

Data that is no longer needed is securely deleted or anonymised.

All traffic between your browser and our website is encrypted using HTTPS (TLS). Passwords are stored only as salted hashes, access to customer data is restricted to authorised staff, and our servers are protected by firewalls and regular updates. Payment data is handled exclusively by our PCI DSS certified payment partner. No method of transmission over the internet is completely secure, but we take reasonable, industry-standard measures to protect your information.

You have the right to:

• Access the personal information we hold about you.
• Correct inaccurate or incomplete information through your account page or by contacting us.
• Request deletion of your account and personal data, subject to records we must keep by law.
• Withdraw consent to marketing communications at any time.
• Raise a grievance about how your data has been handled.

To exercise any of these rights, email contact@fibonce.com from your registered email address. We respond to all requests within 24 hours and resolve them within 30 days.

Our services are intended for persons aged 18 and above. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page shows when it was last revised. Material changes will be highlighted on the website or communicated to registered users by email.

In accordance with the Information Technology Act, 2000 and rules made under it, the contact details of our Grievance Officer are:

• Business: Koconut Tree Restaurant
• Email: contact@fibonce.com
• Phone: +91 88886 89061
• Address: Office Unit B-28, Shivam Complex, Hadapsar, Pune, Maharashtra, 411013, India
• Working hours: Monday – Sunday, 11:00 AM – 11:00 PM (IST)