We cook food; we don't trade in your data. This policy explains, in plain language, what personal data Kenzo Kissan India Private Limited (operating as Chef Kenzo® — "we", "us", "our") collects when you use chefkenzo.com, order from us, subscribe to a meal plan, or book catering — why we collect it, who we share it with, and the rights you have under the Digital Personal Data Protection Act, 2023 ("DPDP Act") and other applicable Indian law.
On this page
01Who we are
Chef Kenzo is a food services brand owned and operated by Kenzo Kissan India Private Limited, a company incorporated in India with its registered office at A1/46, Sushant Lok-2, Sector 55, Golf Course Road, Gurugram, Haryana, India. We operate FSSAI-licensed kitchens in Sector 66 and Sushant Lok 1, Gurugram, and provide à la carte food delivery, meal plan subscriptions, and social and corporate catering. For the purposes of the DPDP Act, we are the Data Fiduciary for the personal data described in this policy.
02What this policy covers
This policy applies to personal data we collect through:
- this website (chefkenzo.com) and its enquiry and lead forms;
- orders placed on our ordering platform (order.chefkenzo.com);
- WhatsApp, phone, and email conversations with our team;
- meal plan subscriptions and catering proposals, bookings, and events.
It does not cover third-party platforms you may also find us on (for example Zomato or Instagram) — those are governed by their own privacy policies.
03The data we collect
Data you give us
- Identity & contact: name, phone number, email address, delivery address(es), company name (for corporate enquiries).
- Order details: what you order, plan type and duration, event date, guest count, budget range, venue.
- Food preferences: dietary preferences, allergies, and dislikes you share so we can cook safely for you. We use this information only to prepare and recommend food, never for anything else.
- Messages: the content of enquiries and feedback you send us.
Data collected automatically
- Usage data: pages visited, buttons clicked, approximate location (city level), device and browser type — via the analytics tools listed in section 6.
- Technical data: IP address and security signals processed by Cloudflare (which serves this website) and Cloudflare Turnstile (which protects our forms from bots).
Payment data
Payments are processed by RBI-authorised payment gateways and banks. We never see or store your card numbers, UPI PINs, or banking credentials. We receive only a confirmation of payment and a transaction reference.
04How and why we use it
We process personal data for the following purposes, with your consent or as permitted for legitimate uses under the DPDP Act:
- to respond to enquiries and prepare quotes and proposals you've asked for;
- to prepare, deliver, and service your orders, meal plans, and events;
- to cook safely around the allergies and preferences you tell us about;
- to collect payment, issue invoices (including GST invoices), and process refunds and credits;
- to send order and delivery updates via WhatsApp, SMS, phone, or email;
- to improve the website, menus, and service using aggregated analytics;
- to send occasional marketing you can opt out of at any time (section 5);
- to comply with law — tax, food safety (FSSAI), accounting, and lawful requests from authorities.
We do not sell personal data. We do not use it for automated decisions that produce legal effects about you.
05WhatsApp, calls & email
When you submit an enquiry, we follow up about that enquiry via WhatsApp, phone, or email — that's the point of the form, and our forms say so before you submit. Service messages about an active order or plan (confirmations, delivery updates) are sent as part of fulfilling it.
Opting out is one word: reply STOP to any WhatsApp or SMS message, use the unsubscribe link in any marketing email, or write to contact@kenzok.com. We honour opt-outs promptly; you may still receive messages strictly necessary to complete an order already in progress.
08Storage & security
We use reasonable security safeguards appropriate to the nature of the data: encrypted connections (HTTPS) across the website, access controls on our systems, bot protection on public forms, and payment processing left entirely to authorised gateways. Some of our technology providers store data on servers located outside India; where that happens, it is done in accordance with the DPDP Act and its rules on cross-border transfer. No system is perfectly secure — if we learn of a breach affecting your personal data, we will notify you and the Data Protection Board of India as the law requires.
09How long we keep data
- Enquiries that don't become orders: up to 24 months, so we can serve you when you come back.
- Order, subscription, and event records: as long as needed for service, then as required by tax and accounting law (typically 8 years for financial records).
- Marketing preferences and opt-outs: kept for as long as needed to honour them.
When data is no longer needed, we delete it or irreversibly anonymise it.
10Your rights
Under the DPDP Act, you have the right to:
- Access — a summary of the personal data we hold about you and how it's used;
- Correction and erasure — have inaccurate data corrected, and data that's no longer needed erased;
- Withdraw consent — at any time, as easily as you gave it, without affecting processing already done;
- Grievance redressal — a readily available way to complain, described in section 14;
- Nominate — appoint another person to exercise these rights for you if you are unable to.
To exercise any of these, write to contact@kenzok.com from the contact details we hold for you. We may verify your identity before acting. If you're not satisfied with our response, you may complain to the Data Protection Board of India.
11Children
Our services are intended for adults. We do not knowingly collect personal data from children under 18 without verifiable parental consent. Parents ordering meals for their children share only what's needed to prepare and deliver the food. If you believe a child has given us personal data directly, tell us at contact@kenzok.com and we will delete it.
12Third-party links
The website links to third-party services — WhatsApp, Instagram, Zomato, and our ordering platform. Once you leave chefkenzo.com, the privacy policy of the site you land on applies. We encourage you to read it.
13Changes to this policy
We'll update this policy as our services or the law change. The "last updated" date at the top always tells you the current version. For material changes, we'll give notice on this website or, where appropriate, contact you directly.
14Grievance Officer & contact
In accordance with the Information Technology Act, 2000, the Consumer Protection (E-Commerce) Rules, 2020, and the DPDP Act, 2023, our grievance contact is:
Grievance Officer: Kritika Premi, Managing Director
Email: contact@kenzok.com (subject line: "Grievance")
Phone: +91 90969 07042 (10:00–19:00 IST, Mon–Sat)
Registered office: Kenzo Kissan India Private Limited, A1/46, Sushant Lok-2, Sector 55, Golf Course Road, Gurugram, Haryana, India
Service levels: we acknowledge grievances within 48 hours and resolve them within 30 days of receipt.
For anything else about this policy — questions, requests, or feedback — the same address reaches us: contact@kenzok.com. See our escalation matrix on the Trust & Compliance page.