privacy policy
last updated 20 august 2026
This policy explains what personal data Galo collects when you use www.galofoods.com or order from our counters, why we collect it, and the choices you have. It is issued under the Digital Personal Data Protection Act, 2023 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.
Operating entity — Galo Concepts, part of the Abraf group.
Contact — info@galofoods.com · WhatsApp +91 95970 47999
Email — info@galofoods.com · WhatsApp — +91 95970 47999
1. what we collect
You give us directly
- Orders & enquiries — name, mobile number, the items you ask about, and the outlet you want to collect from. Orders placed over WhatsApp reach us as ordinary WhatsApp messages.
- Galo Gold membership — name, mobile number, wallet balance and transaction history.
- Careers — the details and CV you send to info@galofoods.com or share in the chat with Ritika, our automated first-round assistant.
- Investor & franchise enquiries — name, contact details, city of interest and the information you enter in our enquiry form.
Collected automatically
- Device type, browser, approximate city (derived from IP), pages viewed, referring source and campaign parameters.
- If you allow notifications, a push subscription token tied to your browser.
We do not store card numbers, UPI PINs or bank credentials. Any payment is handled by the payment gateway, which is separately certified to handle that data.
2. why we use it
| Purpose | Legal basis |
|---|---|
| Preparing and handing over your order | Performance of contract |
| Running Galo Gold balances and credits | Performance of contract |
| Replying to enquiries, applications and complaints | Consent / legitimate use |
| Improving the website and menu mix | Legitimate use |
| Offers and announcements | Consent, withdrawable any time |
| Tax, accounting and statutory records | Legal obligation |
We do not sell your personal data, and we do not use it to make automated decisions that produce legal effects about you.
3. ordering and chatting over whatsapp
Most Galo orders and enquiries arrive over WhatsApp. When you message us, WhatsApp’s own privacy terms apply to the message in transit; we receive your WhatsApp display name, mobile number and message contents. We use them to answer you and fulfil the request. We will only send you promotional messages if you have opted in, and you can stop them by replying STOP at any time.
4. who we share it with
- Payment gateway — to take payment.
- Hosting and infrastructure — our website host, which stores the site and its logs.
- Mall operators — only where a specific outlet requires it for access or billing.
- Professional advisers and authorities — where the law requires disclosure.
We require each processor to use your data only on our instructions and to keep it secure.
5. how long we keep it
- Order and enquiry records — up to 3 years from the last interaction.
- Membership and wallet records — while the account is active, then 8 years for tax purposes.
- Job applications — 12 months, unless you ask us to delete sooner.
- Website analytics — up to 26 months in aggregate form.
6. your rights
Under the DPDP Act, 2023 you may ask us to: confirm what we hold about you and give you a copy; correct or complete inaccurate data; erase data we no longer need; withdraw a consent you previously gave; or nominate someone to exercise these rights if you die or become incapacitated.
Write to info@galofoods.com from the email or mobile number on the record. We respond within 30 days. If you are not satisfied, escalate it in writing to info@galofoods.com marked “grievance”, and after that to the Data Protection Board of India.
7. cookies and similar technologies
We use a small number of cookies and local storage keys: strictly necessary ones that remember your cart, theme and login state; and analytics ones that tell us, in aggregate, which pages and products people look at. You can clear or block cookies in your browser; the cart and theme memory will stop working if you do.
8. security
The site is served entirely over HTTPS. Access to customer records is limited to staff who need it. We keep backups and apply security updates to the platform. No system is perfectly secure, and if a breach affects your personal data we will notify you and the Data Protection Board as required.
9. children
Galo’s services are intended for people aged 18 and over. We do not knowingly collect data from children. If you believe a child has given us personal data, contact us and we will delete it.
10. contact
Questions about this policy: info@galofoods.com. For formal complaints, write to the same address with the subject “grievance”.