Privacy Policy

Last Updated: March 2026

1. Introduction

Welcome to BellyBox ("we," "our," or "us"). We respect your privacy and are committed to protecting your personal data. This Privacy Policy will inform you about how we look after your personal data when you visit our website (bellybox.in) and use our application, regardless of where you visit it from, and tell you about your privacy rights and how the law protects you.

2. The Data We Collect

We may collect, use, store, and transfer different kinds of personal data about you which we have grouped together follows:

  • Identity Data: includes first name, last name, username or similar identifier, and profile pictures.
  • Contact Data: includes delivery address, email address, and telephone numbers.
  • Financial Data: involves payment details processed securely by our third-party payment gateways (e.g., Razorpay). We do not store full credit card details on our servers.
  • Transaction Data: includes details about payments to and from you and other details of subscriptions and meals you have purchased from us.
  • Technical Data: includes internet protocol (IP) address, your login data, browser type and version, time zone setting and location.

3. How We Use Your Data

We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:

  • To register you as a new customer or vendor.
  • To process and deliver your daily meal subscriptions.
  • To manage our relationship with you (e.g., notifying you of changes to terms, asking for reviews).
  • To administer and protect our business and this website/app.
  • To use data analytics to improve our website, products/services, marketing, customer relationships, and experiences.

4. Data Sharing

We may share your personal data with internal third parties (such as our home chefs and tiffin vendors to ensure successful delivery of your meals) and external third parties (such as payment processors, cloud service providers, and SMS/Email notification partners). All third parties are strictly required to respect the security of your personal data and to treat it in accordance with the law.

5. Data Security

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorized way. In addition, we limit access to your personal data to those employees, agents, contractors, and other third parties who have a business need to know.

6. Your Legal Rights

Under certain circumstances, you have rights under data protection laws in relation to your personal data, including the right to request access, correction, erasure, or restriction of processing of your personal data.