Privacy Policy

Effective Date: June 1, 2024 Last Updated: July 15, 2025 INTRODUCTION Welcome to Bombay Flavors LLC. This Privacy Policy explains how Bombay Flavors LLC ("we," "us," "our") collects, uses, and protects your personal information when you visit our website at www.bombayflavors.com, use our catering services, or interact with us through other channels. Our Contact Information:
    • Business Name: Bombay Flavors LLC
    • Address: 145 Grau Dr, Fremont, CA 94536
    • Phone: +1 510 714 4642
    • Email: legal@bombayflavors.com
This Privacy Policy complies with the California Consumer Privacy Act (CCPA), California Civil Code Section 1798.83 (Shine the Light Law), and other applicable privacy laws including federal laws such as CAN-SPAM Act and relevant health department regulations. Our website and services are not intended for children under 13, and we do not knowingly collect personal information from children. INFORMATION WE COLLECT Personal Information We Collect:
Category Examples Business Purpose
Contact Information Name, email address, phone number, delivery address Order processing, communication, delivery coordination
Financial Information Payment method details, billing address Payment processing through Square, PayPal, Venmo, Zelle
Order Information Food preferences, dietary restrictions, allergies, event details, order history Catering service delivery, food safety, customer service
Communication Records Email correspondence, phone call recordings, feedback, complaints Customer support, service improvement
Category Examples Business Purpose
Event Information Event date, location, guest count, special requests Catering service planning and execution
Marketing Information Email preferences, promotional responses Marketing communications (with consent)
Website Data IP address, browser type, pages visited, cookies Website functionality, analytics, user experience
SocialMedia Information Profile information from Facebook, Instagram, TikTok, LinkedIn, Snapchat Social media engagement, marketing
Sensitive Personal Information: We may collect sensitive information including:
  • Food allergies and dietary restrictions (for food safety and service customization)
  • Health information related to dietary needs (with your explicit consent)
HOW WE USE YOUR INFORMATION We use your personal information for the following purposes: Primary Business Operations:
  • Order Processing: Fulfill catering orders, coordinate delivery, process payments
  • Customer Service: Respond to inquiries, handle complaints, provide support
  • Food Safety: Accommodate dietary restrictions and allergies
  • Communication: Send order confirmations, delivery updates, service notifications
  • Legal Compliance: Meet health department requirements, tax obligations, legal duties
Secondary Uses (with appropriate consent):
  • Marketing: Send promotional offers, newsletters, event announcements
  • Social Media: Engage with customers on social platforms
  • Analytics: Improve services, analyze customer preferences, website optimization
  • Event Documentation: Photograph events for marketing (with explicit consent)
INFORMATION SHARING Third-Party Service Providers: We share information with trusted partners who help us operate our business:
  • Payment Processors: Square, PayPal, Venmo, Zelle (for payment processing)
  • Cloud Storage: HostingRaja (for data storage and backup)
  • Social Media Platforms: Facebook, Instagram, TikTok, LinkedIn, Snapchat (for marketing)
  • Delivery Services: Third-party delivery partners (when applicable)
  • Legal/Professional Services: Attorneys, accountants, consultants (as needed)
Legal Disclosures: We may disclose your information when required by law or to:
  • Comply with legal obligations or court orders
  • Protect our rights, property, or safety
  • Investigate fraud or security issues
  • Respond to government requests
Business Transfers: If we sell or transfer our business, customer information may be transferred to the new owner with appropriate protections. DATA SECURITY & STORAGE Security Measures:
  • Data Encryption: All sensitive data is encrypted during transmission and storage
  • Access Controls: Limited access to personal information on a need-to-know basis
  • Cloud Security: Data stored with HostingRaja using industry-standard security protocols
  • Payment Security: All payment processing complies with PCI DSS standards
  • Regular Audits: Periodic security assessments and updates
Data Location: Your information is stored in secure cloud servers located in the United States and may be accessed from our California facility. YOUR CALIFORNIA PRIVACY RIGHTS (CCPA) As a California resident, you have the following rights: Right to Know: Request information about:
  • Categories of personal information collected
  • Sources of information
  • Business purposes for collection
  • Third parties who receive your information
  • Specific pieces of personal information we hold about you
Right to Delete: Request deletion of your personal information, subject to certain exceptions (e.g., completing transactions, legal compliance). Right to Opt-Out: Opt-out of the sale of your personal information (Note: We do not sell personal information). Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights. Right to Correct: Request correction of inaccurate personal information. Right to Limit Use: Request limitation of use of sensitive personal information. To Exercise Your Rights:
  • Email: legal@bombayflavors.com
  • Phone: +1 510 714 4642
  • Mail: 145 Grau Dr, Fremont, CA 94536
We will respond to verified requests within 45 days (extendable to 90 days if necessary). COOKIES & TRACKING Cookie Usage: We use cookies and similar technologies to:
  • Enable website functionality
  • Remember your preferences
  • Analyze website traffic
  • Provide personalized content
Cookie Management: You can control cookies through your browser settings. Disabling cookies may limit website functionality. Do Not Track: We do not currently respond to "Do Not Track" signals. MARKETING COMMUNICATIONS Email Marketing:
  • We send promotional emails only with your consent
  • Every email includes an unsubscribe option
  • You can opt-out at any time without penalty
Social Media:
  • We may use your information to engage with you on social platforms
  • Social media interactions are governed by each platform's privacy policy
AUTOMATED DECISION MAKING We do not use automated decision-making or profiling that would significantly affect you without human review. Any automated processes (such as email marketing triggers) include human oversight and opt-out options. CALIFORNIA SHINE THE LIGHT LAW Under California Civil Code Section 1798.83, California residents may request information about our disclosure of personal information to third parties for direct marketing purposes. As stated in this policy, we do not sell or share personal information with third parties for their direct marketing purposes. INTERNATIONAL TRANSFERS Your information is processed and stored within the United States. We do not transfer personal information outside the United States. PHOTOGRAPHY AND MEDIA CONSENT Event Photography:
  • We may photograph catered events for marketing purposes
  • Explicit consent required: We will obtain written consent before photographing any event
  • Opt-out option: You may decline photography without affecting service quality
  • Usage rights: Photos may be used on our website, social media, and marketing materials
  • Removal requests: You may request removal of photos at any time
Social Media Sharing:
  • We may share event photos on social media platforms
  • We will not tag individuals without permission
  • Group photos will not identify specific individuals unless consented
FOOD SAFETY & ALLERGIES Critical Food Safety Information:
  • We collect allergy and dietary restriction information to ensure safe food preparation
  • This information is shared with our kitchen staff and catering team
  • You are responsible for accurately communicating all allergies and dietary needs at least 48 hours before your event
  • We cannot guarantee 100% allergen-free environments due to shared kitchen facilities
  • Cross-contamination warning: Our kitchen handles nuts, dairy, gluten, and other common allergens
  • We follow California Health Department food safety protocols
  • Emergency contact information may be collected for events with severe allergy concerns
Liability Limitation: While we take food allergies seriously and implement safety protocols, customers with severe allergies should understand the inherent risks of food service and make informed decisions. We recommend consulting with your physician for severe allergies. By providing our services, you acknowledge these risks and agree that we have fulfilled our duty of care by following industry-standard food safety practices. DATA BREACH NOTIFICATION In the event of a data breach that may affect your personal information:
  • We will notify affected customers within 72 hours of discovery
  • We will provide details about what information was involved
  • We will explain steps taken to address the breach
  • We will offer guidance on protective measures you can take
  • We will notify relevant authorities as required by law
BUSINESS CONTINUITY In the event of business closure, sale, or transfer:
  • Customer data will be transferred only to qualified food service businesses
  • You will be notified at least 30 days before any transfer
  • You may request data deletion before transfer
  • The acquiring business must agree to honor this privacy policy
DATA RETENTION We retain your personal information for:
  • Order Information: 7 years (for tax and legal compliance)
  • Marketing Data: Until you opt-out or we determine it's no longer needed
  • Website Data: 2 years
  • Communication Records: 3 years
  • Payment Information: As required by payment processors and law
  • THIRD-PARTY LINKS Our website may contain links to third-party websites. We are not responsible for their privacy practices. Please review their privacy policies before providing any information. CHANGES TO THIS POLICY We may update this Privacy Policy periodically. Changes will be posted on our website with an updated effective date. Material changes will be communicated via email or website notice. CONTACT US For privacy-related questions or concerns:
Bombay Flavors LLC Legal Department
  • Email: legal@bombayflavors.com
  • Phone: +1 510 714 4642
  • Address: 145 Grau Dr, Fremont, CA 94536
For California Privacy Rights: Submit requests using the contact information above. Please include:
  • Your full name
  • Email address or phone number
  • Specific request type
  • Verification information as requested
COMPLAINTS If you believe we have not handled your personal information appropriately, you may file a complaint with: California Attorney General's Office Privacy Unit 1300 I Street, Suite 1101 Sacramento, CA 95814 Email: privacy@oag.ca.gov Acknowledgment: By using our services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and disclosure of your personal information as described herein.Effective Date: June 1, 2024 Last Updated: July 15, 2025 INTRODUCTION Welcome to Bombay Flavors LLC. This Privacy Policy explains how Bombay Flavors LLC ("we," "us," "our") collects, uses, and protects your personal information when you visit our website at www.bombayflavors.com, use our catering services, or interact with us through other channels. Our Contact Information:
    • Business Name: Bombay Flavors LLC
    • Address: 145 Grau Dr, Fremont, CA 94536
    • Phone: +1 510 714 4642
    • Email: legal@bombayflavors.com
This Privacy Policy complies with the California Consumer Privacy Act (CCPA), California Civil Code Section 1798.83 (Shine the Light Law), and other applicable privacy laws including federal laws such as CAN-SPAM Act and relevant health department regulations. Our website and services are not intended for children under 13, and we do not knowingly collect personal information from children. INFORMATION WE COLLECT Personal Information We Collect:
Category Examples Business Purpose
Contact Information Name, email address, phone number, delivery address Order processing, communication, delivery coordination
Financial Information Payment method details, billing address Payment processing through Square, PayPal, Venmo, Zelle
Order Information Food preferences, dietary restrictions, allergies, event details, order history Catering service delivery, food safety, customer service
Communication Records Email correspondence, phone call recordings, feedback, complaints Customer support, service improvement

Category Examples Business Purpose
Event Information Event date, location, guest count, special requests Catering service planning and execution
Marketing Information Email preferences, promotional responses Marketing communications (with consent)
Website Data IP address, browser type, pages visited, cookies Website functionality, analytics, user experience
Social Media Information Profile information from Facebook, Instagram, TikTok, LinkedIn, Snapchat Social media engagement, marketing
Sensitive Personal Information: We may collect sensitive information including:
  • Food allergies and dietary restrictions (for food safety and service customization)
  • Health information related to dietary needs (with your explicit consent)
HOW WE USE YOUR INFORMATION We use your personal information for the following purposes: Primary Business Operations:
  • Order Processing: Fulfill catering orders, coordinate delivery, process payments
  • Customer Service: Respond to inquiries, handle complaints, provide support
  • Food Safety: Accommodate dietary restrictions and allergies
  • Communication: Send order confirmations, delivery updates, service notifications
  • Legal Compliance: Meet health department requirements, tax obligations, legal duties
Secondary Uses (with appropriate consent):
  • Marketing: Send promotional offers, newsletters, event announcements
  • Social Media: Engage with customers on social platforms
  • Analytics: Improve services, analyze customer preferences, website optimization
  • Event Documentation: Photograph events for marketing (with explicit consent)
INFORMATION SHARING Third-Party Service Providers: We share information with trusted partners who help us operate our business:
  • Payment Processors: Square, PayPal, Venmo, Zelle (for payment processing)
  • Cloud Storage: HostingRaja (for data storage and backup)
  • Social Media Platforms: Facebook, Instagram, TikTok, LinkedIn, Snapchat (for marketing)
  • Delivery Services: Third-party delivery partners (when applicable)
  • Legal/Professional Services: Attorneys, accountants, consultants (as needed)
Legal Disclosures: We may disclose your information when required by law or to:
  • Comply with legal obligations or court orders
  • Protect our rights, property, or safety
  • Investigate fraud or security issues
  • Respond to government requests
Business Transfers: If we sell or transfer our business, customer information may be transferred to the new owner with appropriate protections. DATA SECURITY & STORAGE Security Measures:
  • Data Encryption: All sensitive data is encrypted during transmission and storage
  • Access Controls: Limited access to personal information on a need-to-know basis
  • Cloud Security: Data stored with HostingRaja using industry-standard security protocols
  • Payment Security: All payment processing complies with PCI DSS standards
  • Regular Audits: Periodic security assessments and updates
Data Location: Your information is stored in secure cloud servers located in the United States and may be accessed from our California facility. YOUR CALIFORNIA PRIVACY RIGHTS (CCPA) As a California resident, you have the following rights: Right to Know: Request information about:
  • Categories of personal information collected
  • Sources of information
  • Business purposes for collection
  • Third parties who receive your information
  • Specific pieces of personal information we hold about you
Right to Delete: Request deletion of your personal information, subject to certain exceptions (e.g., completing transactions, legal compliance). Right to Opt-Out: Opt-out of the sale of your personal information (Note: We do not sell personal information). Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights. Right to Correct: Request correction of inaccurate personal information. Right to Limit Use: Request limitation of use of sensitive personal information. To Exercise Your Rights:
  • Email: legal@bombayflavors.com
  • Phone: +1 510 714 4642
  • Mail: 145 Grau Dr, Fremont, CA 94536
We will respond to verified requests within 45 days (extendable to 90 days if necessary). COOKIES & TRACKING Cookie Usage: We use cookies and similar technologies to:
  • Enable website functionality
  • Remember your preferences
  • Analyze website traffic
  • Provide personalized content
Cookie Management: You can control cookies through your browser settings. Disabling cookies may limit website functionality. Do Not Track: We do not currently respond to "Do Not Track" signals. MARKETING COMMUNICATIONS Email Marketing:
  • We send promotional emails only with your consent
  • Every email includes an unsubscribe option
  • You can opt-out at any time without penalty
Social Media:
  • We may use your information to engage with you on social platforms
  • Social media interactions are governed by each platform's privacy policy
AUTOMATED DECISION MAKING We do not use automated decision-making or profiling that would significantly affect you without human review. Any automated processes (such as email marketing triggers) include human oversight and opt-out options. CALIFORNIA SHINE THE LIGHT LAW Under California Civil Code Section 1798.83, California residents may request information about our disclosure of personal information to third parties for direct marketing purposes. As stated in this policy, we do not sell or share personal information with third parties for their direct marketing purposes. INTERNATIONAL TRANSFERS Your information is processed and stored within the United States. We do not transfer personal information outside the United States. PHOTOGRAPHY AND MEDIA CONSENT Event Photography:
  • We may photograph catered events for marketing purposes
  • Explicit consent required: We will obtain written consent before photographing any event
  • Opt-out option: You may decline photography without affecting service quality
  • Usage rights: Photos may be used on our website, social media, and marketing materials
  • Removal requests: You may request removal of photos at any time
Social Media Sharing:
  • We may share event photos on social media platforms
  • We will not tag individuals without permission
  • Group photos will not identify specific individuals unless consented
FOOD SAFETY & ALLERGIES Critical Food Safety Information:
  • We collect allergy and dietary restriction information to ensure safe food preparation
  • This information is shared with our kitchen staff and catering team
  • You are responsible for accurately communicating all allergies and dietary needs at least 48 hours before your event
  • We cannot guarantee 100% allergen-free environments due to shared kitchen facilities
  • Cross-contamination warning: Our kitchen handles nuts, dairy, gluten, and other common allergens
  • We follow California Health Department food safety protocols
  • Emergency contact information may be collected for events with severe allergy concerns
Liability Limitation: While we take food allergies seriously and implement safety protocols, customers with severe allergies should understand the inherent risks of food service and make informed decisions. We recommend consulting with your physician for severe allergies. By providing our services, you acknowledge these risks and agree that we have fulfilled our duty of care by following industry-standard food safety practices. DATA BREACH NOTIFICATION In the event of a data breach that may affect your personal information:
  • We will notify affected customers within 72 hours of discovery
  • We will provide details about what information was involved
  • We will explain steps taken to address the breach
  • We will offer guidance on protective measures you can take
  • We will notify relevant authorities as required by law
BUSINESS CONTINUITY In the event of business closure, sale, or transfer:
  • Customer data will be transferred only to qualified food service businesses
  • You will be notified at least 30 days before any transfer
  • You may request data deletion before transfer
  • The acquiring business must agree to honor this privacy policy
DATA RETENTION We retain your personal information for:
  • Order Information: 7 years (for tax and legal compliance)
  • Marketing Data: Until you opt-out or we determine it's no longer needed
  • Website Data: 2 years
  • Communication Records: 3 years
  • Payment Information: As required by payment processors and law
  • THIRD-PARTY LINKS Our website may contain links to third-party websites. We are not responsible for their privacy practices. Please review their privacy policies before providing any information. CHANGES TO THIS POLICY We may update this Privacy Policy periodically. Changes will be posted on our website with an updated effective date. Material changes will be communicated via email or website notice. CONTACT US For privacy-related questions or concerns:
Bombay Flavors LLC Legal Department
  • Email: legal@bombayflavors.com
  • Phone: +1 510 714 4642
  • Address: 145 Grau Dr, Fremont, CA 94536
For California Privacy Rights: Submit requests using the contact information above. Please include:
  • Your full name
  • Email address or phone number
  • Specific request type
  • Verification information as requested
COMPLAINTS If you believe we have not handled your personal information appropriately, you may file a complaint with: California Attorney General's Office Privacy Unit 1300 I Street, Suite 1101 Sacramento, CA 95814 Email: privacy@oag.ca.gov Acknowledgment: By using our services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and disclosure of your personal information as described herein.
Chat Icon