Privacy Policy
Last updated: 28 October 2026. This is a template.
Have a lawyer review before publishing. This page is a working template, not legal advice. It must be checked against India’s Digital Personal Data Protection Act, 2023 and any state requirements before this website goes live.
1. Who we are
This website is operated by [COMPANY LEGAL NAME] (“we”, “us”), based in [CITY], Kerala, India. For privacy questions, contact [GRIEVANCE OFFICER NAME + EMAIL].
2. What this website collects
- Demo request details: the name, phone number, type of restaurant and city you type into a form, the time of day you prefer for a call, plus the plan, the problem and the staff and station counts you set on the site, if any. We use them to contact you about ThreeStone. We do not sell them.
- Technical data: if analytics is enabled, aggregate page views and events (for example, a demo button click). The site ships with analytics switched off until a domain or measurement ID is configured.
- No account data: this website has no login and sets no advertising cookies.
3. Why we process it
To respond to your enquiry, to prepare a quote, and to understand which pages are useful. Where the DPDP Act applies, we rely on your consent, given by submitting the form, and on our legitimate need to respond to a business enquiry.
4. Who else sees it
Form submissions are delivered through a form-handling provider (for example Formspree or Web3Forms) and the site is hosted by a static hosting provider (for example Vercel, Netlify or Cloudflare Pages). Those providers process data on our behalf. Their names and locations are listed here once configured: [FORM PROVIDER], [HOSTING PROVIDER].
If you contact us on WhatsApp, WhatsApp’s own privacy terms apply to that conversation. We do not control them.
5. How long we keep it
Enquiry records are kept for as long as needed to respond and for a reasonable follow-up period, then deleted or anonymised. Proposed retention: [24 MONTHS]. Confirm this with your lawyer.
6. Your rights
You can ask for a copy of the personal data we hold about you, ask us to correct or delete it, or withdraw consent for future contact. Write to [GRIEVANCE OFFICER NAME + EMAIL]. We will respond within the period the applicable law requires.
7. Cookies and analytics
This site does not set advertising cookies. If a privacy-friendly analytics tool (for example Plausible) is configured, it collects aggregate data without cross-site tracking. If Google Analytics is configured instead, it sets cookies; in that case this section must be expanded and a consent banner added before launch.
8. Children
This is business software. The website is not directed at children and we do not knowingly collect their data.
9. Changes
We will update this page when our practices change and change the date at the top. Material changes will be flagged on the site.
10. Product data (for customers)
This policy covers the marketing website. Data inside the ThreeStone product — your menu, orders, bills, staff and guest sessions — is governed by your customer agreement, not by this page.