Privacy Policy

This Privacy Policy explains how Say Boba, a brand owned and operated by Zaho Foods And Beverages Private Limited (CIN: U56102DL2024PTC437588, FSSAI License No.: 13326002000180), having its place of business at 211, Site Ecotech 1 Extension, Greater Noida, Uttar Pradesh – 201310, India (“Say Boba”, “we”, “us”, or “our”), collects, uses, stores, shares, and protects your personal information when you visit or make a purchase through https://sayboba.com (the “Website”).

We are committed to protecting your privacy in accordance with the Information Technology Act, 2000 and the rules thereunder (including the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011), and the Digital Personal Data Protection Act, 2023 (“DPDP Act”) and rules made thereunder, as applicable.

By using the Website, you consent to the practices described in this Privacy Policy. If you do not agree, please do not use the Website.

1. Information We Collect

1.1. Information you provide directly

• Identity & contact data: name, email address, phone number, and delivery/billing address.
• Account data: login credentials (passwords are stored in encrypted/hashed form) and account preferences.
• Order data: products ordered, order history, and transaction details.
• Payment data: payment method details processed through third-party payment gateways. We do not store your complete card number, CVV, or full banking credentials on our servers.
• Communications: information you share when you contact us, submit the “Partner with us” form, leave reviews, or respond to surveys.

1.2. Information collected automatically

• Device & usage data: IP address, browser type, device identifiers, operating system, referring URLs, pages visited, time spent, and clickstream data.
• Cookies & similar technologies: as described in Section 7.

1.3. Information from third parties

Information from payment gateways, logistics/delivery partners, analytics providers, and social-media platforms (for example, when you interact with our pages or log in via a third-party service). We collect only the information reasonably necessary for the purposes described below.

2. How We Use Your Information

• create and manage your Account;
• process, fulfil, and deliver your Orders, and send order confirmations and updates;
• process payments and prevent fraudulent transactions;
• provide customer support and respond to your queries, complaints, and grievances;
• send transactional communications (order, delivery, and service-related);
• send marketing and promotional communications, where you have opted in (you can opt out at any time);
• personalize your experience and improve our Website, Products, and Services;
• conduct analytics, research, and internal record-keeping;
• comply with Applicable Law, respond to legal requests, and enforce our Terms & Conditions; and
• protect the rights, property, and safety of Say Boba, our Users, and others.

3. Legal Basis & Consent

We process your personal data on the basis of your consent, the performance of a contract (fulfilling your Order), our legitimate business interests, and to comply with legal obligations. Where processing relies on consent, you may withdraw that consent at any time by contacting us (see Section 12), subject to legal or contractual restrictions.

4. Sharing & Disclosure of Information

We do not sell your personal information. We may share your information with:

• Service providers & partners: logistics and delivery partners, payment gateways, IT and cloud-hosting providers, analytics providers, and marketing/communication service providers — strictly to the extent necessary to provide our Services.
• Professional advisors: legal, accounting, and audit advisors, where required.
• Legal & regulatory authorities: where required by Applicable Law, court order, or governmental request, or to protect our legal rights.
• Business transfers: in connection with any merger, acquisition, restructuring, or sale of assets, subject to appropriate confidentiality safeguards.

We require third parties who handle your data to maintain adequate security and to use it only for the purposes for which it was shared.

5. Data Retention

We retain your personal information only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, tax, accounting, or reporting requirements, and to resolve disputes or enforce our agreements. When data is no longer required, we securely delete, anonymise, or destroy it in accordance with Applicable Law.

6. Data Security

We implement reasonable security practices and procedures, including technical and organizational measures such as encryption, access controls, and secure servers, to protect your personal information against unauthorized access, disclosure, alteration, or destruction.

However, no method of transmission over the internet or electronic storage is completely secure. While we strive to protect your information, we cannot guarantee absolute security. You are responsible for keeping your Account credentials confidential.

7. Cookies & Tracking Technologies

We use cookies and similar technologies to operate the Website, remember your preferences, maintain your cart and session, analyse traffic, and improve your experience. Types of cookies we may use include essential cookies (required for core functionality such as login, cart, and checkout), analytics cookies (to understand how visitors use the Website), functional cookies (to remember your preferences), and marketing cookies (to deliver relevant offers, where applicable). You can manage or disable cookies through your browser settings; disabling certain cookies may affect the functionality of the Website.

8. Third-Party Links & Services

The Website may contain links to third-party websites, payment gateways, or social-media platforms. This Privacy Policy does not apply to those third parties. We are not responsible for their privacy practices, and we encourage you to review their policies before providing any information.

9. Children’s Privacy

The Website and Services are intended for users aged 18 years and above. We do not knowingly collect personal information from children. If we become aware that we have collected such data without appropriate consent, we will take reasonable steps to delete it. Where processing of a minor’s data is permitted, it will be done only with verifiable consent of a parent or lawful guardian as required by the DPDP Act.

10. Your Rights

Subject to Applicable Law, you have the right to:

• access the personal data we hold about you;
• request correction of inaccurate or incomplete data;
• request erasure of your data, subject to legal and contractual limits;
• withdraw consent to processing (this will not affect processing already carried out);
• opt out of marketing communications; and
• file a grievance regarding the processing of your data (see Section 12).

To exercise any of these rights, contact us using the details in Section 12. We may need to verify your identity before acting on your request.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or Applicable Law. The “Last updated” date indicates the latest revision. Changes are effective upon posting on the Website. Your continued use of the Website constitutes acceptance of the revised Policy.

12. Grievance Officer and Contact

For any questions, requests, or complaints regarding this Privacy Policy or the handling of your personal data, please contact our Grievance Officer:

Grievance Officer: Murari Chaudhary
Say Boba – Zaho Foods And Beverages Private Limited
211, Site Ecotech 1 Extension, Greater Noida, Uttar Pradesh – 201310, India
Email: care@sayboba.com · Phone: +91 89290 81010

We will acknowledge your request or complaint within forty-eight (48) hours and endeavour to resolve it within the timelines prescribed under Applicable Law.