Back to Bill Tadka

Privacy and data protection

Privacy, served clearly.

A plain-language policy describing how Bill Tadka handles personal data and supports DPDP-aligned restaurant operations.

Our privacy commitment

Bill Tadka is designed to help restaurants operate while respecting the privacy of restaurant staff and customers. This policy explains the personal data we process, why we process it, how long we retain it and the choices available to you.

DPDP commitment: Our privacy program is structured around the Digital Personal Data Protection Act, 2023 and applicable rules. Compliance also depends on each restaurant using Bill Tadka lawfully and configuring its operations appropriately.

Personal data we process

Depending on how you use the service, data may include:

  • Restaurant owner and staff names, email addresses, roles and authentication records.
  • Customer name and mobile number when voluntarily entered for billing or WhatsApp delivery.
  • Order, table, invoice, payment method and transaction-reference information.
  • Restaurant profile, tax, menu, stock and operational information.
  • Security, device, synchronization and audit records needed to protect the service.

We do not require sensitive personal data for ordinary restaurant billing.

Purpose and lawful use

We process data to provide billing, KOT, customer service, reporting, synchronization, security, support and legally required accounting records. Restaurants act as the primary data fiduciary for customer information they enter. They must provide appropriate notice and use that information only for legitimate restaurant purposes.

Sharing and processors

Data may be processed by hosting, backup, messaging and technical service providers strictly to operate Bill Tadka. WhatsApp delivery uses Meta’s WhatsApp Cloud API when enabled. We do not sell personal data or use restaurant customer lists for unrelated advertising.

Security safeguards

Safeguards include encrypted network transport, password hashing, role-based access, restaurant and branch isolation, audit records, controlled administrative access, backups and security monitoring. No system is risk-free, so suspected incidents are investigated and handled through documented response procedures.

Retention and deletion

Billing and tax records may be retained for periods required by applicable law. Other personal data is retained only while needed for the stated purpose, active service, dispute handling, fraud prevention or legal obligations. Data is deleted or anonymised when retention is no longer necessary.

Your DPDP rights

Subject to applicable law, a data principal may request access to information about processing, correction, completion, updating or erasure of personal data, withdraw consent, nominate another person, or raise a grievance. Identity and authority may be verified before a request is completed.

Children’s data

Bill Tadka is a business service and is not directed to children. Restaurants should not intentionally collect children’s personal data through the service unless lawful requirements, including verifiable parental consent where applicable, have been satisfied.

Grievance and contact

Privacy questions and data-principal requests can be sent to privacy@billtadka.com. Include the restaurant name, relevant mobile or account identifier, your request and a way to contact you. We will acknowledge and address valid requests within the period required by applicable law.

Grievance contact: Bill Tadka Privacy Office, India
Email: privacy@billtadka.com

Policy changes

We may update this policy as the product, providers or law changes. Material revisions will be communicated through the service or other appropriate channels. The effective date below identifies the latest version.

Effective date: 11 September 2026