HitsTheSpot is built for food lovers, not data brokers. This policy explains what we collect, how we use it, and the choices you have to stay in control.
DISCLAIMER
The use of this Platform in any of its forms (as described below) is subject to the terms and conditions stated in this document. By accessing this Platform, you agree to abide by these terms and conditions.
This Privacy Policy governs the usage of ‘HitsTheSpot’ which is maintained by Vitely Ventures Private Limited (hereinafter referred as "We" and/or "us" and/or "Vitely" and/or "Company") is designed to help you understand how we collect, use, disclose, and safeguard your personal information when you use our mobile application, website, and related services (collectively, the "Platform"). By accessing or using the Platform, you agree to the terms of this Privacy Policy.
This Platform: HitsTheSpot (including its web application, iOS and Android mobile applications, pages, extensions, and any other related interfaces or versions) and other as may be launched from time to time (hereinafter referred to as "Platform") is developed, operated and maintained by Vitely Ventures Private Limited ("The Company"), a Company, having office at: 3rd Floor, II, Judges Bungalow Rd, opp. Pushparaj Tower, Sumeru, Bodakdev, Ahmedabad, Gujarat, 380054.
In the Privacy Policy, "we", "our" and "us" means "the company"; "you" and "your" means any person who accesses and uses this Platform; This Privacy Policy covers this Platform’s treatment of personally identifiable information that the company collects when you are on this platform and afterwards, and when you use this platform’s services. This policy also covers the company's treatment of any personally identifiable information (“PII”) that users share and/or the PII which the company may fetch/collect from various service providers with whom the company has integrated its systems to provide the necessary services to you. This policy does not apply to the practices of companies that the company does not own or control or to people that the company does not employ or manage.
This policy is in compliance with the Digital Personal Data Protection Act (DPDPA), 2023, General Data Protection Regulation (GDPR), and Health Insurance Portability and Accountability Act (HIPAA).
We ensure that all personal data is processed lawfully, fairly, and transparently. We respect your rights as a data principal, including the right to access, rectification, erasure, restriction, and objection to data processing.
For any concerns or queries regarding data protection, you may contact us as mentioned in the Contact Us section.
At Our Company, your privacy is not just a legal obligation, it’s a commitment. We believe that your trust is built on how transparently and securely we handle your personal information. This Privacy Policy is designed to provide you with a clear understanding of how we collect, use, protect, and share your data whether you provide it directly to us or we obtain it from reliable third-party service providers integrated with our systems.
We want you to feel confident using our platform, knowing that your personal data is in safe hands. This policy answers key questions:
We use your data to provide personalized restaurant recommendations, enable dining reservations, ensure a secure user experience, enhance platform functionality, and comply with legal obligations. Data is also used for marketing (with your consent) and analytics to improve our services.
We share your data with carefully chosen partners, including restaurant partners (for improvement in their services and analytics purpose, analytics providers, regulatory authorities (as required by law), and service providers who help us deliver our services.
By continuing to use our Platform, you agree to the terms of this Privacy Policy. You always have control over your data and can access, update, delete, or withdraw your consent at any time.
Privacy is an evolving landscape, and so is this policy. We may update it from time to time without prior notice to reflect changes in our practices or to comply with legal requirements. We encourage you to revisit this page periodically for the latest version.
By accessing our Platform and consenting to the use of cookies, you enable us to offer a more personalized experience, remembering your preferences, conducting data analytics, and enhancing Plaftform performance.
We collect and process personal information in the course of providing our services as mentioned in Section C and D of this policy. This includes data collected from individuals associated with our users, restaurant partners, and other stakeholders, in compliance with the Digital Personal Data Protection Act, 2023 and General Data Protection Act.
Please note that the following details may or may not be collected. The specific information collected will depend on the type of user you are and the nature of your interaction with our services.
The data listed below is processed to enable platform functionality, create and manage user accounts, facilitate transactions, and personalize services. It is also used to ensure security, detect fraud, fulfill contractual obligations, provide customer support, and improve overall user experience. Additionally, certain data is processed to comply with legal, regulatory, and audit requirements.
| Subject | Personal Data Collected |
|---|---|
| Customers (B2C / CRM) |
|
| Restaurant Partners (B2B) |
|
| Restaurant Operational Data (B2B) |
|
| Transactional & Financial Data (B2B) |
|
| Employees / Staff (B2B) |
|
| Device & Network Data (Both B2B and B2C) |
|
| Communication Data |
|
| Sensitive Data (User-Provided) |
|
| Analytics & Derived Data |
|
| Data Collected from Third Parties |
|
| Compliance & Regulatory Data |
|
Our Company and its partners collect and use your personal information and other information only as follows ("The purpose") :
By using our Platform and its services, you explicitly consent to receive essential communications from us, regardless of your registration on any Do Not Disturb (DND) registry, including those maintained by the Telecom Regulatory Authority of India (TRAI), the Department of Telecommunications (DoT), or any other appropriate authority.The said consent shall be obtained through a checkbox mechanism, with the option for the user to withdraw or unsubscribe from such consent at any time thereafter.
This may include, but is not limited to:
At Our Company, we prioritize the confidentiality and security of your personal data. We do not disclose personal information except to those who require access for legitimate purposes, including our employees, officers, professional advisors, third-party contractors, and service providers, as necessary for the purposes specified in this policy.
Your personal data may be shared with such third-party service providers, subject to confidentiality arrangements and strictly on a need-to-know basis. These providers may include
Notwithstanding the above, we reserve the right to disclose your personal data as follows:
We ensure that all personal data is processed lawfully, fairly, and transparently. We respect your rights as a data principal, including the right to access, rectification, erasure, restriction, and objection to data processing.
The Platform currently operates across multiple countries and territories worldwide. Accordingly, the information we collect may be stored and processed on secure servers located in countries other than your own, including India. All such transfers are carried out in compliance with applicable data protection laws, and we maintain robust technical and organizational safeguards, including encryption, access control, and monitoring, to ensure the security and confidentiality of your personal information. You expressly consent to the cross-border transfer, storage, and processing of your personal information as described in this Section. The Platform does not practice data localization and functions independently of territorial restrictions.
From time to time, we may request more personal information in order to provide you with other benefits of the Service. The company may aggregate personal information and disclose such data in a manner to:
We need your personal data in order to:
We need your personal data in order to:
We will retain your information for as long as your account is active or as needed to provide you services or as may be required for internal analysis purpose or as may be required by law, whichever is later. If you wish to cancel your account or request that we no longer use your information to provide you services, contact us at email provided in contact us section of website. We will retain and use your information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.
As is true of most web sites/ Application, we gather certain information automatically and store it in log files. This information may include internet protocol (IP) addresses, browser type, internet service provider (ISP), referring/exit pages, operating system, date/time stamp, and/or clickstream data. We may combine this automatically collected log information with other information we collect about you. We do this to improve services we offer you, to improve marketing, security, analytics, or site functionality
We may partner with a third party to either display advertising on our platform or to manage our advertising on other sites. Our third-party partner may use technologies such as cookies to gather information about your activities on this site and other sites in order to provide you advertising based upon your browsing activities and interests. There are a number of products and services that may be offered by third parties on our Site, (collectively, "Offers"). If you choose to apply for these separate products or services, disclose information to the providers, or grant them permission to collect information about you, then their use of your information is governed by their privacy policies and they will be acting as data controllers of your information. You should evaluate the practices of these external services providers and should view their privacy policies or contact them directly for further information before deciding to use their services. The Company is not responsible for their privacy practices.
In our Application/Website, there are options wherein you can log in to our site using sign-in services such as Facebook, Google or an Open ID provider. These services will authenticate your identity and provide you the option to share certain personal information with us such as your sign-in information, name and email address to link between the sites.
We allow you to sign in to the App using third-party authentication providers such as Google or Facebook. When you choose to log in through these services, we only receive the limited information necessary to authenticate your account, such as your name, email address, and profile picture. This information is shared with us solely as permitted by the respective provider and authorized by you during the login process. At no point do we receive or access your Google, Facebook, or any other third-party account password. Additionally, these providers do not receive any information about your activities within our App, including any content you view, create, or interact with. Your use of third-party login options is subject to the privacy policies and terms of the respective providers.
Our Site includes links to other Web sites whose privacy practices may differ from those of the company. If you submit personal information to any of those sites, your information is governed by their privacy policies and they will be acting as data controllers of your information. We encourage you to carefully read the privacy policy of any Website you visit.
We provide our registered customers with periodic emailers and email/SMS alerts. We also allow users to unsubscribe/opt-out to email newsletters and from time to time may transmit emails promoting the company or third-party goods or services. The company's subscribers may opt-out of receiving our promotional emails and terminate their newsletter subscriptions by following the instructions in the emails. Opting out in this manner will not end transmission of service-related emails/SMS, such as email/SMS alerts
If you have any complaints, security related concerns, please contact nodal officer at the email mentioned on contact us segment on our website. We will work closely with you to ensure a rapid and personal response to your concerns.
You are responsible for maintaining the confidentiality of your login id and password. You are responsible for maintaining the security of your Login ID and Password and may not provide these credentials to any third party. If you believe that they have been stolen or been made known to others, you must contact us immediately at details mentioned in contact us segment of website. We are not responsible if someone else accesses your account through Registration Information they have obtained from you or through a violation by you of this Privacy and Security Policy or the Company’s Terms & Conditions
We may update this Privacy Policy to reflect changes to our information practices. We encourage you to periodically review this page for the latest information on our privacy practices.
If you have questions, comments, concerns or feedback regarding this Privacy and Security Policy or any other privacy or security concern, send an e-mail to Nodal Officer, as per details mentioned in contact us segment of our Platform.
This Policy shall be governed by and construed in accordance with the laws of the Republic of India and the courts at Ahmedabad, Gujarat, India shall have sole and exclusive jurisdiction in relation to any disputes arising out of or in connection with this Policy.
Our Services do not address anyone under the age of 18. We do not knowingly collect personal identifiable information from children under 18. In the case we discover that a child under 18 has provided us with personal information, we immediately delete this from our servers. If you have any questions or concerns regarding this Privacy Policy, please contact us using the details provided on our Contact Us page.
In compliance with Section 8(9) of the Digital Personal Data Protection Act, 2023, and Article 37 of General Data Protection Act, our Company has appointed a Data Protection Officer (DPO) .The DPO is responsible for overseeing our data protection strategy and implementation to ensure compliance with DPDPA requirements. The DPO also serves as the primary point of contact for Data Principals regarding the processing of their personal data and for addressing any grievances.
Email: dpo@hitsthespot.app
| COOKIE TYPE | DESCRIPTION |
|---|---|
| Essential Cookies | Necessary for the website's functionality and cannot be disabled. They enable core features like security, network management, and accessibility. |
| Performance Cookies | Collect information about how you use our website, such as which pages you visit most often. This data helps us improve website performance. |
| Functional Cookies | Remember your preferences and choices to provide a more personalized experience, such as remembering your login details or language preferences. |
| Analytical Cookies | Help us understand how users interact with our website by collecting and reporting information anonymously. |
| Marketing Cookies | Track your online activity to help advertisers deliver more relevant advertising or to limit how many times you see an ad. |
We may allow third-party service providers to place cookies on your device to enhance Platform functionality and deliver targeted advertisements. These providers may include:
In compliance with Section 8(9) of the Digital Personal Data Protection Act, 2023, and Article 37 of General Data Protection Act, our Company has appointed a Data Protection Officer (DPO) The DPO is responsible for overseeing our data protection strategy and implementation to ensure compliance with DPDPA requirements. The DPO also serves as the primary point of contact for Data Principals regarding the processing of their personal data and for addressing any grievances.
Data Protection Officer
dpo@hitsthespot.app
Primary contact for data privacy questions and grievances