LazyCook Privacy Policy

Effective date: 9 October 2026. This policy covers the LazyCook customer app, LazyCook Franchise app, LazyCook Rider app, and LazyCook websites. LazyCook is a unit of All and More Hospitality. Privacy contact: contactus@lazycook.in; +91 92668 99667. Address: Plot no. 207, Indira Colony, Sector 52, Gurgaon - 122003, Haryana.

Account information: We process your name, phone number, email address where supplied, account role, sign-in verification and session information. Customers sign in using phone verification. Franchise operators and riders use business-issued credentials. Passwords are stored as hashes; session tokens keep you signed in. Do not send passwords or OTPs to support.

Customer app: We process saved addresses, recipient names and phone numbers, delivery instructions, location coordinates you select or permit, cart and order details, payment status and references, and support messages. These support ordering, delivery availability, pricing, receipts, refunds and customer service. Manual address selection is available; deny optional location access if you prefer. The customer app requests device location for address selection and serviceability, not continuous background tracking.

Franchise app: We process the operator's identity, assigned kitchen and staff permissions, inventory and operational changes, order handling, business reports, support communications and notification settings. Authorized kitchen staff receive the customer and delivery details needed to fulfil orders. Franchise users must use that information only for authorized LazyCook work.

Rider app: We process rider identity, assigned kitchen and job information, delivery status updates and notification settings. Riders see the delivery addresses and order details needed for assigned deliveries. Directions may open an external maps app. Third-party delivery partners may provide courier location and delivery tracking information for customer order tracking.

Device and technical data: We process push-notification registration tokens, IP addresses, request and error logs, and operational event records for notifications, troubleshooting, service reliability and fraud prevention. Website storage and cookies may maintain sign-in, cart and preferences. Optional notifications and device permissions can be controlled in device settings.

Payment processing: PayU processes online payments and may collect payment credentials directly in its checkout. LazyCook stores transaction references, status, amounts and refund records. LazyCook does not store complete payment-card numbers, CVV codes or banking passwords. Payment processors apply their own privacy terms.

Who receives data: We share the minimum necessary information with authorized LazyCook kitchens and riders; payment processors such as PayU; delivery providers such as Pidge; authentication and notification services such as Google Firebase; WhatsApp services operated by Meta when used for verification or separately opted-in order updates; mapping providers when location search or directions are used; and hosting and storage providers needed to operate the service. We may disclose required records to authorities or professional advisers for legal obligations, security or disputes. These services may process information outside your region under their applicable terms.

Purpose and choices: We use data for account management, order fulfilment, payment and refund processing, delivery tracking, support, notifications and service security. WhatsApp order updates require a separate opt-in; using a WhatsApp verification code alone does not opt you into order updates. You can adjust device permissions and request access, correction or deletion through contactus@lazycook.in. We do not sell personal information.

Security: Our public websites and APIs use HTTPS. We use password hashing, authenticated sessions, role and kitchen access controls and restricted server and database access. Only authorized staff should access personal information for their work. No system can guarantee absolute security.

Retention: We keep account information while needed to operate the account and keep operational records for the relevant business purpose. After a verified deletion request, account identifiers, saved addresses, sign-in access and associated personal data are deleted or anonymized when no longer required. Certain order, invoice, payment, refund, tax, security or dispute records may be retained where required by law or necessary for an unresolved transaction, fraud investigation or legal claim. Retained records are restricted to those purposes. Backups can contain earlier copies until their normal retention cycle expires; separately necessary transaction records may remain longer. Support can explain the records retained and the applicable reason for your request.

Account deletion: In the customer app use Profile > Privacy & account deletion > Request account deletion. Franchise users use More tools > Privacy & account deletion. Riders use the privacy icon on Home. These controls are in updated app releases; if absent in your installed version, request deletion externally at https://sub.lazycook.in/account-deletion.html or email contactus@lazycook.in with your app name and registered phone/email. You do not need to reinstall the app or make a purchase. We verify ownership, address outstanding orders or refunds, and confirm completion. Submitting a request is not itself account deletion or merely account deactivation.

The service is intended for customers able to place orders and authorized business staff, not for children to supply personal information independently. A parent or guardian can contact us about a child's data. We may update this policy to reflect service changes; the effective date identifies the current published version. Contact contactus@lazycook.in for privacy questions or complaints.