Privacy Policy
Effective Date: June 1, 2024
Last Updated: July 15, 2025
INTRODUCTION
Welcome to Bombay Flavors LLC. This Privacy Policy explains how Bombay Flavors LLC ("we," "us," "our") collects, uses, and protects your personal information when you visit our website at www.bombayflavors.com, use our catering services, or interact with us through other channels.
Our Contact Information:
-
- Business Name: Bombay Flavors LLC
- Address: 145 Grau Dr, Fremont, CA 94536
- Phone: +1 510 714 4642
- Email: legal@bombayflavors.com
This Privacy Policy complies with the California Consumer Privacy Act (CCPA), California Civil Code Section 1798.83 (Shine the Light Law), and other applicable privacy laws including federal laws such as CAN-SPAM Act and relevant health department regulations. Our website and services are not intended for children under 13, and we do not knowingly collect personal information from children.
INFORMATION WE COLLECT
Personal Information We Collect:
| Category |
Examples |
Business Purpose |
| Contact Information |
Name, email address, phone number, delivery address |
Order processing, communication, delivery coordination |
| Financial Information |
Payment method details, billing address |
Payment processing through Square, PayPal, Venmo, Zelle |
| Order Information |
Food preferences, dietary restrictions, allergies, event details, order history |
Catering service delivery, food safety, customer service |
| Communication Records |
Email correspondence, phone call recordings, feedback, complaints |
Customer support, service improvement |
| Category |
Examples |
Business Purpose |
| Event Information |
Event date, location, guest count, special requests |
Catering service planning and execution |
| Marketing Information |
Email preferences, promotional responses |
Marketing communications (with consent) |
| Website Data |
IP address, browser type, pages visited, cookies |
Website functionality, analytics, user experience |
| SocialMedia Information |
Profile information from Facebook, Instagram, TikTok, LinkedIn, Snapchat |
Social media engagement, marketing |
Sensitive Personal Information:
We may collect sensitive information including:
- Food allergies and dietary restrictions (for food safety and service customization)
- Health information related to dietary needs (with your explicit consent)
HOW WE USE YOUR INFORMATION
We use your personal information for the following purposes:
Primary Business Operations:
- Order Processing: Fulfill catering orders, coordinate delivery, process payments
- Customer Service: Respond to inquiries, handle complaints, provide support
- Food Safety: Accommodate dietary restrictions and allergies
- Communication: Send order confirmations, delivery updates, service notifications
- Legal Compliance: Meet health department requirements, tax obligations, legal duties
Secondary Uses (with appropriate consent):
- Marketing: Send promotional offers, newsletters, event announcements
- Social Media: Engage with customers on social platforms
- Analytics: Improve services, analyze customer preferences, website optimization
- Event Documentation: Photograph events for marketing (with explicit consent)
INFORMATION SHARING
Third-Party Service Providers:
We share information with trusted partners who help us operate our business:
- Payment Processors: Square, PayPal, Venmo, Zelle (for payment processing)
- Cloud Storage: HostingRaja (for data storage and backup)
- Social Media Platforms: Facebook, Instagram, TikTok, LinkedIn, Snapchat (for marketing)
- Delivery Services: Third-party delivery partners (when applicable)
- Legal/Professional Services: Attorneys, accountants, consultants (as needed)
Legal Disclosures:
We may disclose your information when required by law or to:
- Comply with legal obligations or court orders
- Protect our rights, property, or safety
- Investigate fraud or security issues
- Respond to government requests
Business Transfers:
If we sell or transfer our business, customer information may be transferred to the new owner with appropriate protections.
DATA SECURITY & STORAGE
Security Measures:
- Data Encryption: All sensitive data is encrypted during transmission and storage
- Access Controls: Limited access to personal information on a need-to-know basis
- Cloud Security: Data stored with HostingRaja using industry-standard security protocols
- Payment Security: All payment processing complies with PCI DSS standards
- Regular Audits: Periodic security assessments and updates
Data Location:
Your information is stored in secure cloud servers located in the United States and may be accessed from our California facility.
YOUR CALIFORNIA PRIVACY RIGHTS (CCPA)
As a California resident, you have the following rights:
Right to Know:
Request information about:
- Categories of personal information collected
- Sources of information
- Business purposes for collection
- Third parties who receive your information
- Specific pieces of personal information we hold about you
Right to Delete:
Request deletion of your personal information, subject to certain exceptions (e.g., completing transactions, legal compliance).
Right to Opt-Out:
Opt-out of the sale of your personal information (Note: We do not sell personal information).
Right to Non-Discrimination:
We will not discriminate against you for exercising your privacy rights.
Right to Correct:
Request correction of inaccurate personal information.
Right to Limit Use:
Request limitation of use of sensitive personal information.
To Exercise Your Rights:
- Email: legal@bombayflavors.com
- Phone: +1 510 714 4642
- Mail: 145 Grau Dr, Fremont, CA 94536
We will respond to verified requests within 45 days (extendable to 90 days if necessary).
COOKIES & TRACKING
Cookie Usage:
We use cookies and similar technologies to:
- Enable website functionality
- Remember your preferences
- Analyze website traffic
- Provide personalized content
Cookie Management:
You can control cookies through your browser settings. Disabling cookies may limit website functionality.
Do Not Track:
We do not currently respond to "Do Not Track" signals.
MARKETING COMMUNICATIONS
Email Marketing:
- We send promotional emails only with your consent
- Every email includes an unsubscribe option
- You can opt-out at any time without penalty
Social Media:
- We may use your information to engage with you on social platforms
- Social media interactions are governed by each platform's privacy policy
AUTOMATED DECISION MAKING
We do not use automated decision-making or profiling that would significantly affect you without human review. Any automated processes (such as email marketing triggers) include human oversight and opt-out options.
CALIFORNIA SHINE THE LIGHT LAW
Under California Civil Code Section 1798.83, California residents may request information about our disclosure of personal information to third parties for direct marketing purposes. As stated in this policy, we do not sell or share personal information with third parties for their direct marketing purposes.
INTERNATIONAL TRANSFERS
Your information is processed and stored within the United States. We do not transfer personal information outside the United States.
PHOTOGRAPHY AND MEDIA CONSENT
Event Photography:
- We may photograph catered events for marketing purposes
- Explicit consent required: We will obtain written consent before photographing any event
- Opt-out option: You may decline photography without affecting service quality
- Usage rights: Photos may be used on our website, social media, and marketing materials
- Removal requests: You may request removal of photos at any time
Social Media Sharing:
- We may share event photos on social media platforms
- We will not tag individuals without permission
- Group photos will not identify specific individuals unless consented
FOOD SAFETY & ALLERGIES
Critical Food Safety Information:
- We collect allergy and dietary restriction information to ensure safe food preparation
- This information is shared with our kitchen staff and catering team
- You are responsible for accurately communicating all allergies and dietary needs at least 48 hours before your event
- We cannot guarantee 100% allergen-free environments due to shared kitchen facilities
- Cross-contamination warning: Our kitchen handles nuts, dairy, gluten, and other common allergens
- We follow California Health Department food safety protocols
- Emergency contact information may be collected for events with severe allergy concerns
Liability Limitation:
While we take food allergies seriously and implement safety protocols, customers with severe allergies should understand the inherent risks of food service and make informed decisions. We recommend consulting with your physician for severe allergies. By providing our services, you acknowledge these risks and agree that we have fulfilled our duty of care by following industry-standard food safety practices.
DATA BREACH NOTIFICATION
In the event of a data breach that may affect your personal information:
- We will notify affected customers within 72 hours of discovery
- We will provide details about what information was involved
- We will explain steps taken to address the breach
- We will offer guidance on protective measures you can take
- We will notify relevant authorities as required by law
BUSINESS CONTINUITY
In the event of business closure, sale, or transfer:
- Customer data will be transferred only to qualified food service businesses
- You will be notified at least 30 days before any transfer
- You may request data deletion before transfer
- The acquiring business must agree to honor this privacy policy
DATA RETENTION
We retain your personal information for:
- Order Information: 7 years (for tax and legal compliance)
- Marketing Data: Until you opt-out or we determine it's no longer needed
- Website Data: 2 years
- Communication Records: 3 years
- Payment Information: As required by payment processors and law
- THIRD-PARTY LINKS
Our website may contain links to third-party websites. We are not responsible for their privacy practices. Please review their privacy policies before providing any information.
CHANGES TO THIS POLICY
We may update this Privacy Policy periodically. Changes will be posted on our website with an updated effective date. Material changes will be communicated via email or website notice.
CONTACT US
For privacy-related questions or concerns:
Bombay Flavors LLC Legal Department
- Email: legal@bombayflavors.com
- Phone: +1 510 714 4642
- Address: 145 Grau Dr, Fremont, CA 94536
For California Privacy Rights:
Submit requests using the contact information above. Please include:
- Your full name
- Email address or phone number
- Specific request type
- Verification information as requested
COMPLAINTS
If you believe we have not handled your personal information appropriately, you may file a complaint with:
California Attorney General's Office Privacy Unit 1300 I Street, Suite 1101 Sacramento, CA 95814 Email: privacy@oag.ca.gov
Acknowledgment: By using our services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and disclosure of your personal information as described herein.
Effective Date: June 1, 2024
Last Updated: July 15, 2025
INTRODUCTION
Welcome to Bombay Flavors LLC. This Privacy Policy explains how Bombay Flavors LLC ("we," "us," "our") collects, uses, and protects your personal information when you visit our website at www.bombayflavors.com, use our catering services, or interact with us through other channels.
Our Contact Information:
-
- Business Name: Bombay Flavors LLC
- Address: 145 Grau Dr, Fremont, CA 94536
- Phone: +1 510 714 4642
- Email: legal@bombayflavors.com
This Privacy Policy complies with the California Consumer Privacy Act (CCPA), California Civil Code Section 1798.83 (Shine the Light Law), and other applicable privacy laws including federal laws such as CAN-SPAM Act and relevant health department regulations. Our website and services are not intended for children under 13, and we do not knowingly collect personal information from children.
INFORMATION WE COLLECT
Personal Information We Collect:
| Category |
Examples |
Business Purpose |
| Contact Information |
Name, email address, phone number, delivery address |
Order processing, communication, delivery coordination |
| Financial Information |
Payment method details, billing address |
Payment processing through Square, PayPal, Venmo, Zelle |
| Order Information |
Food preferences, dietary restrictions, allergies, event details, order history |
Catering service delivery, food safety, customer service |
| Communication Records |
Email correspondence, phone call recordings, feedback, complaints |
Customer support, service improvement |
| Category |
Examples |
Business Purpose |
| Event Information |
Event date, location, guest count, special requests |
Catering service planning and execution |
| Marketing Information |
Email preferences, promotional responses |
Marketing communications (with consent) |
| Website Data |
IP address, browser type, pages visited, cookies |
Website functionality, analytics, user experience |
| Social Media Information |
Profile information from Facebook, Instagram, TikTok, LinkedIn, Snapchat |
Social media engagement, marketing |
Sensitive Personal Information:
We may collect sensitive information including:
- Food allergies and dietary restrictions (for food safety and service customization)
- Health information related to dietary needs (with your explicit consent)
HOW WE USE YOUR INFORMATION
We use your personal information for the following purposes:
Primary Business Operations:
- Order Processing: Fulfill catering orders, coordinate delivery, process payments
- Customer Service: Respond to inquiries, handle complaints, provide support
- Food Safety: Accommodate dietary restrictions and allergies
- Communication: Send order confirmations, delivery updates, service notifications
- Legal Compliance: Meet health department requirements, tax obligations, legal duties
Secondary Uses (with appropriate consent):
- Marketing: Send promotional offers, newsletters, event announcements
- Social Media: Engage with customers on social platforms
- Analytics: Improve services, analyze customer preferences, website optimization
- Event Documentation: Photograph events for marketing (with explicit consent)
INFORMATION SHARING
Third-Party Service Providers:
We share information with trusted partners who help us operate our business:
- Payment Processors: Square, PayPal, Venmo, Zelle (for payment processing)
- Cloud Storage: HostingRaja (for data storage and backup)
- Social Media Platforms: Facebook, Instagram, TikTok, LinkedIn, Snapchat (for marketing)
- Delivery Services: Third-party delivery partners (when applicable)
- Legal/Professional Services: Attorneys, accountants, consultants (as needed)
Legal Disclosures:
We may disclose your information when required by law or to:
- Comply with legal obligations or court orders
- Protect our rights, property, or safety
- Investigate fraud or security issues
- Respond to government requests
Business Transfers:
If we sell or transfer our business, customer information may be transferred to the new owner with appropriate protections.
DATA SECURITY & STORAGE
Security Measures:
- Data Encryption: All sensitive data is encrypted during transmission and storage
- Access Controls: Limited access to personal information on a need-to-know basis
- Cloud Security: Data stored with HostingRaja using industry-standard security protocols
- Payment Security: All payment processing complies with PCI DSS standards
- Regular Audits: Periodic security assessments and updates
Data Location:
Your information is stored in secure cloud servers located in the United States and may be accessed from our California facility.
YOUR CALIFORNIA PRIVACY RIGHTS (CCPA)
As a California resident, you have the following rights:
Right to Know:
Request information about:
- Categories of personal information collected
- Sources of information
- Business purposes for collection
- Third parties who receive your information
- Specific pieces of personal information we hold about you
Right to Delete:
Request deletion of your personal information, subject to certain exceptions (e.g., completing transactions, legal compliance).
Right to Opt-Out:
Opt-out of the sale of your personal information (Note: We do not sell personal information).
Right to Non-Discrimination:
We will not discriminate against you for exercising your privacy rights.
Right to Correct:
Request correction of inaccurate personal information.
Right to Limit Use:
Request limitation of use of sensitive personal information.
To Exercise Your Rights:
- Email: legal@bombayflavors.com
- Phone: +1 510 714 4642
- Mail: 145 Grau Dr, Fremont, CA 94536
We will respond to verified requests within 45 days (extendable to 90 days if necessary).
COOKIES & TRACKING
Cookie Usage:
We use cookies and similar technologies to:
- Enable website functionality
- Remember your preferences
- Analyze website traffic
- Provide personalized content
Cookie Management:
You can control cookies through your browser settings. Disabling cookies may limit website functionality.
Do Not Track:
We do not currently respond to "Do Not Track" signals.
MARKETING COMMUNICATIONS
Email Marketing:
- We send promotional emails only with your consent
- Every email includes an unsubscribe option
- You can opt-out at any time without penalty
Social Media:
- We may use your information to engage with you on social platforms
- Social media interactions are governed by each platform's privacy policy
AUTOMATED DECISION MAKING
We do not use automated decision-making or profiling that would significantly affect you without human review. Any automated processes (such as email marketing triggers) include human oversight and opt-out options.
CALIFORNIA SHINE THE LIGHT LAW
Under California Civil Code Section 1798.83, California residents may request information about our disclosure of personal information to third parties for direct marketing purposes. As stated in this policy, we do not sell or share personal information with third parties for their direct marketing purposes.
INTERNATIONAL TRANSFERS
Your information is processed and stored within the United States. We do not transfer personal information outside the United States.
PHOTOGRAPHY AND MEDIA CONSENT
Event Photography:
- We may photograph catered events for marketing purposes
- Explicit consent required: We will obtain written consent before photographing any event
- Opt-out option: You may decline photography without affecting service quality
- Usage rights: Photos may be used on our website, social media, and marketing materials
- Removal requests: You may request removal of photos at any time
Social Media Sharing:
- We may share event photos on social media platforms
- We will not tag individuals without permission
- Group photos will not identify specific individuals unless consented
FOOD SAFETY & ALLERGIES
Critical Food Safety Information:
- We collect allergy and dietary restriction information to ensure safe food preparation
- This information is shared with our kitchen staff and catering team
- You are responsible for accurately communicating all allergies and dietary needs at least 48 hours before your event
- We cannot guarantee 100% allergen-free environments due to shared kitchen facilities
- Cross-contamination warning: Our kitchen handles nuts, dairy, gluten, and other common allergens
- We follow California Health Department food safety protocols
- Emergency contact information may be collected for events with severe allergy concerns
Liability Limitation:
While we take food allergies seriously and implement safety protocols, customers with severe allergies should understand the inherent risks of food service and make informed decisions. We recommend consulting with your physician for severe allergies. By providing our services, you acknowledge these risks and agree that we have fulfilled our duty of care by following industry-standard food safety practices.
DATA BREACH NOTIFICATION
In the event of a data breach that may affect your personal information:
- We will notify affected customers within 72 hours of discovery
- We will provide details about what information was involved
- We will explain steps taken to address the breach
- We will offer guidance on protective measures you can take
- We will notify relevant authorities as required by law
BUSINESS CONTINUITY
In the event of business closure, sale, or transfer:
- Customer data will be transferred only to qualified food service businesses
- You will be notified at least 30 days before any transfer
- You may request data deletion before transfer
- The acquiring business must agree to honor this privacy policy
DATA RETENTION
We retain your personal information for:
- Order Information: 7 years (for tax and legal compliance)
- Marketing Data: Until you opt-out or we determine it's no longer needed
- Website Data: 2 years
- Communication Records: 3 years
- Payment Information: As required by payment processors and law
- THIRD-PARTY LINKS
Our website may contain links to third-party websites. We are not responsible for their privacy practices. Please review their privacy policies before providing any information.
CHANGES TO THIS POLICY
We may update this Privacy Policy periodically. Changes will be posted on our website with an updated effective date. Material changes will be communicated via email or website notice.
CONTACT US
For privacy-related questions or concerns:
Bombay Flavors LLC Legal Department
- Email: legal@bombayflavors.com
- Phone: +1 510 714 4642
- Address: 145 Grau Dr, Fremont, CA 94536
For California Privacy Rights:
Submit requests using the contact information above. Please include:
- Your full name
- Email address or phone number
- Specific request type
- Verification information as requested
COMPLAINTS
If you believe we have not handled your personal information appropriately, you may file a complaint with:
California Attorney General's Office Privacy Unit 1300 I Street, Suite 1101 Sacramento, CA 95814 Email: privacy@oag.ca.gov
Acknowledgment: By using our services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and disclosure of your personal information as described herein.