Privacy Policy

This policy explains what personal data foodontrains ("we") collects through foodontrains.in, why, and what you can do about it. It follows the Information Technology Act, 2000 and its rules, and the Digital Personal Data Protection Act, 2023.

1. What we collect

• Journey details: PNR or train number and date, coach, seat, boarding and delivery station.
• Contact details: your name and mobile number.
• Order details: what you ordered, the amount, the order status and its history.
• Payment details: for online payments, the payment method type, amount, status and reference numbers from our payment partner. We never see or store your full card, UPI PIN or bank login details.
• Technical data: IP address, browser and device type, and pages visited, kept in server logs for security and troubleshooting.
• Usage data: through PostHog, the pages you visit, buttons you press and the steps you take to order, with your approximate location from your IP address, so we can see how the website is used and fix problems.
• Advertising data: through the Meta Pixel, the pages you visit and actions such as searching, adding to cart and placing an order (with its amount), as described under cookies below.

We do not ask for sensitive data such as health, financial account or identity documents.

2. Why we use it

• To look up your train and show stations, timings and restaurants on your route.
• To place your order with the restaurant and have it delivered to your coach and seat.
• To send you order confirmations and updates on WhatsApp, SMS or a call, and to help you with support requests.
• To process payments and refunds, and to keep accounts and tax records.
• To prevent fraud and misuse, keep the website secure, and improve our service.
• To meet legal obligations and respond to lawful requests from authorities.

By placing an order you consent to this use. We use your data only for these purposes and do not sell it. We do not send you marketing messages unless you agree to them separately.

3. Who we share it with

• The restaurant that prepares your order and its delivery staff: your name, mobile number, train, coach, seat, station and order.
• Service providers who work for us under contract: train-information providers (your PNR or train number), messaging providers for WhatsApp, SMS and email, our payment gateway, and our hosting provider.
• Meta Platforms (Facebook and Instagram), through the Meta Pixel, to measure and improve our ads.
• PostHog, our website analytics provider, to understand how the website is used.
• Authorities when the law requires it, or to protect the rights and safety of our users, staff or the public.

4. Cookies and browser storage

We use one essential cookie to show the order you are tracking, and your browser's local storage to keep your cart and remember your name, mobile number and last order on your device.

We also use the Meta Pixel, which sets cookies and sends Meta the address of the pages you visit (which can include your PNR or train number), actions such as searching, adding to cart and placing an order with its amount, and your IP address and browser details. We use this to see which of our ads lead to orders and to show our ads to people likely to need them. We do not send Meta your name or mobile number. Meta handles this data under its own privacy policy. You can clear or block these cookies in your browser settings, or turn off ad personalisation in your Facebook or Instagram settings.

For analytics we use PostHog, which stores a random visitor ID in your browser's cookies and local storage and records the pages you visit, buttons you press and steps you take to order. Text you type into forms is not recorded. You can clear this in your browser settings.

5. How long we keep it

We keep order and payment records for as long as needed to provide the service and as required by tax, accounting and other laws (generally up to 8 years). Server logs are kept for a shorter period. After that, data is deleted or anonymised.

6. Security

We protect your data with reasonable security practices, including encrypted connections (HTTPS), restricted access to our systems, and payment handling by a PCI-DSS compliant payment gateway. No system is completely secure, so please contact us if you notice anything unusual.

7. Your rights

You can ask us to:

• tell you what personal data we hold about you and who we have shared it with;
• correct or update it;
• delete it, unless we must keep it by law;
• withdraw your consent (we may then be unable to take further orders from you);
• nominate someone to exercise these rights for you in case of death or incapacity.

Write to the Grievance Officer below. We may ask you to confirm your mobile number before acting on a request.

8. Children

The website is meant for adults. A person under 18 should use it only with a parent or guardian, who places the order on their behalf.

9. Where your data is kept

Your data may be stored and processed on servers in India or abroad, by us or our service providers, only as permitted by Indian law and with the same protections described here.

10. Changes

We may update this policy. The latest version, with its date, is always on this page.

Contact and grievances

For help with an order, write to foodontrainsofficial@gmail.com or call +91 92880 91593.

If you have a complaint about the service, an order or how we handle your personal data, write to our Grievance Officer at foodontrainsofficial@gmail.com with "Grievance" in the subject. We acknowledge complaints within 48 hours and resolve them within one month of receiving them.

Last updated 3 November 2026.