Privacy Policy

We may collect the following types of information:

• Personal Identification Information: Name, email address, phone number (WhatsApp number), delivery / billing address, and any other information you voluntarily provide when placing an order, filling out the reservation form, or contacting us.
• Order Details: Items ordered, quantities, special instructions, payment method (but not full payment card details, which are processed by third‑party gateways), and order history.
• Technical Data: IP address, browser type, operating system, device information, referring URLs, pages visited, and time spent on our site. This data is collected automatically through cookies and similar technologies.
• Communication Data: Records of correspondence when you contact us via email, WhatsApp, or phone, including call metadata and chat logs.

We use the collected information for the following purposes:

• To process and fulfil your orders (including delivery and pickup).
• To communicate with you about your order status, confirmations, and updates.
• To manage reservations and respond to your enquiries.
• To send you promotional messages or special offers (only if you have opted in; you can opt out at any time).
• To improve our website, menu, and customer experience through analytics and usage patterns.
• To detect and prevent fraud, unauthorised transactions, and abuse of our Services.
• To comply with legal obligations and enforce our Terms of Service.

We do not sell, rent, or trade your personal information to third parties for their marketing purposes. We may share your data in the following limited circumstances:

• Service Providers: We may share information with trusted third‑party vendors who help us operate our website, process payments, deliver orders, and send communications. These providers are contractually bound to protect your data and use it only for the services we request.
• Legal Compliance: We may disclose your information if required by law, court order, or governmental regulation, or to protect the rights, property, or safety of Cafia, our customers, or the public.
• Business Transfers: In the event of a merger, acquisition, or sale of all or a portion of our business, customer information may be transferred as part of that transaction.
• With Your Consent: We may share your information for other purposes with your explicit consent.

We implement a variety of security measures to protect your personal information. These include encryption (SSL/TLS) for data transmitted between your browser and our server, secure storage of order data, and restricted access to personal information by our staff.

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal data, we cannot guarantee its absolute security. You are responsible for keeping your device and any passwords used to access our site confidential.

Our website uses cookies – small text files placed on your device – to enhance your browsing experience. We also use similar technologies such as pixel tags and local storage.

Types of cookies we may use:

• Essential Cookies: Necessary for the website to function (e.g., session management).
• Analytical/Performance Cookies: Help us understand how visitors interact with our site (e.g., Google Analytics, if enabled). These collect anonymous data.
• Functionality Cookies: Remember your preferences (e.g., language).

You can control cookies through your browser settings. Disabling certain cookies may affect the functionality of the website. By continuing to use our site without changing your settings, you consent to our use of cookies as described.

We utilise several third‑party services that may collect, process, or store your information:

• FormSubmit: Our reservation and contact forms are processed through FormSubmit. The data you enter (name, email, message) is emailed directly to us and may be stored temporarily by FormSubmit as per their privacy policy.
• Google Maps: Our location page embeds Google Maps, which may set its own cookies or collect usage data. Please refer to Google's Privacy Policy for details.
• Google Reviews Widget (SociableKIT): The Google Reviews feed on our site is provided by SociableKIT. The widget may load external resources and collect data according to SociableKIT’s privacy practices.
• Supabase (if used for menu backend): Your order data may be stored in a Supabase database. We have configured appropriate security rules to protect your information.

We encourage you to review the privacy policies of these third‑party services to understand their data handling.

We will retain your personal information only for as long as necessary to fulfil the purposes for which it was collected, including for legal, accounting, or reporting requirements. Order records are typically kept for a period of 1 year, after which they may be anonymised or deleted. Reservation data is deleted periodically.

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access and Portability: You can request a copy of the personal data we hold about you.
• Correction: You can ask us to correct inaccurate or incomplete information.
• Deletion: You can request that we delete your personal data, subject to legal retention requirements.
• Opt‑Out of Marketing: You can unsubscribe from promotional communications at any time by following the link in the email or contacting us directly.

To exercise these rights, please contact us using the details below. We will respond to your request within a reasonable timeframe.

Our Services are not directed to individuals under the age of 13. We do not knowingly collect personal information from children. If we become aware that a child under 13 has provided us with personal data, we will take steps to delete such information. If you are a parent or guardian and believe your child has provided us with personal data, please contact us immediately.

Your information may be transferred to and stored on servers located outside your country of residence, including countries that may not have data protection laws equivalent to those in your jurisdiction. By using our Services, you consent to such transfers. We will take appropriate safeguards to ensure that your data remains protected in accordance with this Privacy Policy.

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last updated" date. We encourage you to review this policy periodically. Your continued use of the Services after any changes indicates your acceptance of the revised policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact our Data Protection Officer at:

Cafia — The Food Farmer
Bharatpur, Chitwan, Nepal
📞 +977 984-2640645
✉️ cafiabharatpur@gmail.com