Who we are
Canefrost (operated by Think Spot), 2, Pananchaalai Street, Chinna Nolambur, Chennai, Tamil Nadu 600095, is the Data Fiduciary for the personal data described here.
What we collect, and why
| Data | Why we use it |
|---|---|
| Mobile number | To sign you in with a one-time code, and to identify your account and member code. |
| Name | To address you and label your orders at the counter. |
| Email (optional) | To send receipts. We do not send marketing email. |
| Delivery addresses and map pin | Only to deliver your orders. Your location is read only when you tap "Use my location". |
| Orders, payments status, points | To make and deliver your orders, keep tax records, and run Canefrost Rewards. |
Card and UPI details are entered with our payment partner (Razorpay) and are never stored by Canefrost. The app has no advertising or analytics trackers. We do not sell your data.
Consent
We process your data on the basis of the consent you give when you sign up (you tick the box yourself; it is never pre-ticked), and where the law allows, to keep records we are required to keep. If you're under 18, your parent or guardian must agree before you sign up, and you confirm that they do when you tick the box.
Who we share it with
- Delivery partner (Porter): your name, phone and address, only for deliveries.
- Payment partner (Razorpay): the order amount and reference, to take payment.
- Our hosting provider (Cloudflare), which stores the data on our behalf.
- Authorities, only when the law requires it.
How long we keep it
We keep your account while it is active. If you delete your account, we erase your profile, points, addresses and member code. Order and invoice records are kept for the period tax law requires, without your name or number attached.
Your rights
- Access a summary of your data and how it is used.
- Correct or update your details (in the app: Profile, Your details).
- Erase your data by deleting your account (in the app: Profile, Delete my account, or see Delete your account).
- Withdraw consent at any time; this is as easy as giving it, by deleting your account.
- Nominate another person to exercise your rights if you die or become unable to.
- Raise a grievance with us, and if unresolved, with the Data Protection Board of India.
Security
Data is encrypted in transit (HTTPS). Your sign-in session on your phone is stored encrypted. Access is limited to staff who need it. If a breach affects your data, we will inform you and the Data Protection Board as the law requires.
Children
The app is for anyone aged 13 or over. Under-18s may sign up with a parent's or guardian's agreement. We don't track children, show them ads or use their data for profiling. A parent or guardian can ask us to delete a child's account at any time.
Grievance officer
Email contact@canefrost.com or call +91 770 808 2099. We respond within 7 days.
Changes
If we change this notice in a way that matters, we will tell you in the app before it applies.