Zoomo Eats is a food-ordering and delivery service operating in Jourian, Jammu & Kashmir, India, run from Toronto, Canada. This policy explains what personal information we collect when you use zoomoeats.com, the Zoomo Eats app, and our restaurant, driver and staff apps, why, who we share it with, and the choices you have. It is written with India’s Digital Personal Data Protection Act, 2023 in mind.

Account details: your name and email address when you sign in with an email code, or your mobile number if you sign in with a text-message code. Accounts created for you by our team have an email address and a password (stored only as a one-way hash).

Delivery details: the addresses and map pins you save (up to five), delivery notes, and the phone number we need to reach you.

Location: only with your permission — to find your delivery spot, and to show nearby landmarks. Drivers’ apps share the driver’s location while they are signed in so we can dispatch orders and show the customer where their order is; customers see a driver’s location only while that driver is bringing their order.

Orders and support: what you order, from where, prices, offers used, cancellations and their reasons, ratings and reviews you write, messages and live chats with us, and any photos you add to a help request.

Technical information: your IP address and browser type in our server logs, and anonymous, cookie-free visit counts (Cloudflare Web Analytics). If you turn on notifications in the Zoomo Eats app, we keep a notification code for your phone so order updates reach it. If something breaks, an error report may be sent to our monitoring service — without your name, email, address or what you typed.

To take and deliver your orders: passing your order to the restaurant, your name, phone number, address and pin to the driver, and keeping you updated on its progress.

To run your account and offers: signing you in, keeping your bag and saved places, applying welcome and other offers (some offers take turns by the first letter of your name, so everyone gets a fair share).

To help you and keep the service safe: answering support requests, preventing fraud and misuse of offers, and fixing problems.

To meet legal duties such as tax and accounting records. We do not sell your personal information, and we do not use it for advertising.

The restaurant preparing your order (your name, the order and your notes) and the driver delivering it (your name, phone number, address, pin and delivery notes).

Service providers who run parts of the service for us, only for that purpose: our hosting and database provider (Railway) and network provider (Cloudflare); Google, for turning a map pin into nearby landmarks, and Google Firebase Cloud Messaging, which carries order notifications to the Zoomo Eats app (it receives your phone’s notification code and the notification’s text); map providers MapTiler, OpenStreetMap and Mapbox (maps, turning a pin into an address, driver routes — they receive the map position involved, not your name); the email provider that sends your sign-in code; a text-message provider when phone sign-in is switched on; and a payment provider if you pay online once that is available.

Authorities, when the law requires it.

Some of these providers process data outside India. We choose providers that protect it, and we share only what each one needs.

One essential cookie keeps you signed in. It can’t be read by the page’s scripts and is only sent to Zoomo Eats. Our network provider (Cloudflare) may set a short-lived security cookie that helps block automated attacks. We don’t use advertising or tracking cookies.

Your browser also stores your bag (so it survives before you sign in), your delivery area and similar preferences. Clearing your browser’s site data removes them.

In the Zoomo Eats app, your sign-in is kept in your phone’s secure storage, and your bag, delivery area and preferences in the app’s own storage. Logging out removes the sign-in; uninstalling the app or clearing its data removes the rest.

Your account details and saved places: while your account is open. Orders and payment records: as long as tax and accounting law requires. Support chats: while needed to resolve the matter and for our records. Our database backups are kept for 14 days and then deleted.

When you ask us to delete your account, we delete or anonymise your personal information, except records we must keep by law.

You can ask us for a summary of the personal information we hold about you and who we have shared it with; ask us to correct, complete or update it; ask us to delete it; withdraw your consent (for example, turning off location in your browser or your phone’s settings); and nominate someone to exercise these rights for you if you are unable to.

Write to [email protected]. We may need to confirm it’s you. If you’re not satisfied with our answer, you can complain to the Data Protection Board of India.

Zoomo Eats is for people aged 18 and over. Someone younger may use it only with a parent or guardian, who is responsible for their use. We don’t knowingly collect children’s information for any other purpose.

Connections are encrypted (HTTPS), sign-in sessions are held in a protected cookie (in the app, in your phone’s secure storage), passwords are stored only as one-way hashes, staff tools are separate and access-controlled, and our pages refuse code from anywhere we haven’t approved. No system is perfect — if we ever learn of a breach affecting you, we will tell you and the authorities as the law requires.

Shiv Mehra, Grievance Officer — [email protected]. We acknowledge complaints within 48 hours and aim to resolve them within 30 days. For order problems, the quickest route is the chat on any page or the Contact page.

If we change how we use your information, we will update this page and its date; for significant changes we will tell you in the app. Last updated 4 October 2026.