Privacy & Terms
Draft updated 21 October 2026
Privacy notice
This notice covers personal information handled through the Gabbar Chai website, its enquiry forms and staff-operated point of sale. “Gabbar Chai”, “we” and “our” refer to the business operating this brand; its full legal identity is pending confirmation. External websites have their own privacy notices.
1. Information collected
- Contact, wholesale and franchise enquiries: name, phone number, email address, subject or city/area, and message. Franchise enquiries also request years of food-industry experience.
- Staff accounts: email address, sign-in credentials handled by the authentication service, and account information supplied by a chosen sign-in provider.
- Counter transactions: order items, outlet, amounts, selected payment method and payment status, notes, and any customer name or phone number provided for the order.
- Browser storage: selected-outlet preferences, sign-in sessions and navigation state. Hosting and external resource providers may also receive technical connection information, such as an IP address and browser information.
Please do not include Aadhaar or other identity documents, health information, passwords, card details or UPI PINs in an enquiry or order note. The public website does not provide checkout or collect payment credentials.
2. Purposes and your choices
Enquiry information is used to respond to your request, assess a wholesale or franchise proposal and maintain related correspondence. Staff information supports account access and authorised store operations. Transaction information supports fulfilment, billing, payment verification and applicable accounting or legal obligations.
You can browse the catalogue without submitting an enquiry. Providing the required enquiry fields allows us to respond by email or phone about that request; it does not subscribe you to unrelated promotional messages. Any separate marketing use requires its own appropriate notice and permission.
3. Storage, access and service providers
Enquiries are stored in Lovable Cloud and are available to authorised administrators. Store records and staff accounts use hosted storage and authentication services with role-based access. Service providers may process information needed to supply these services. Disclosure may also be necessary to comply with a lawful request or protect legal rights, subject to applicable law.
The hosting location, provider contracts, any international processing and a complete provider inventory must be confirmed before this notice is finalised. Any transfer must meet restrictions applicable under Indian law.
4. Browser storage and external services
Browser storage supports outlet selection and staff sign-in. You may clear stored data through your browser settings; doing so can reset preferences or sign you out. The site loads fonts and some images from external providers. Opening Google Maps, social profiles or official brand links takes you to services governed by their own terms and notices.
No advertising or analytics integration has been identified in the website’s application code. Hosting-level logs and any services added outside that code still require verification. This is not a claim that visiting the site involves no technical data collection.
5. Retention and security
Enquiry retention periods, transaction-record retention and backup deletion arrangements are pending confirmation. The final policy must specify retention based on the stated purpose and applicable legal obligations, rather than retain information indefinitely.
Access controls are used for staff and administrator records. No internet service can guarantee absolute security. Suspected misuse or a security concern can be reported to the contact below. Any required breach notifications must follow the law applicable at the time.
6. Privacy requests and children
You may contact us to request access to information you have submitted, correct it, withdraw permission for enquiry-related contact, request deletion or raise a complaint. Requests are subject to proportionate identity verification and any recordkeeping obligations; information needed for lawful retention or an unresolved dispute may not be immediately deleted.
Business enquiries and staff accounts are intended for adults aged 18 or over. Children should not submit personal information through these forms. A parent or guardian may contact us if a child’s information has been submitted.
As of this draft’s date, section 43A of the Information Technology Act, 2000 and the 2011 Sensitive Personal Data or Information Rules remain relevant where applicable. The Digital Personal Data Protection Act, 2023 and its 2025 Rules have phased commencement; their principal processing, notice and individual-rights provisions are scheduled to take effect in May 2027. This notice does not present those future statutory rights as already in force.
Website terms
1. Scope and permitted use
This website presents our teas, retail product line, stores and business enquiries. It is an editorial catalogue, not an online ordering service. Orders and billing are handled at our outlets through the staff counter. Staff access is restricted to authorised users.
Use the website lawfully. Do not submit unlawful content, impersonate others, interfere with the service, attempt unauthorised access or misuse another person’s information. Submitting an enquiry does not create a franchise agreement, wholesale contract or promise of acceptance.
2. Products, prices and availability
Products, availability, outlet hours and prices can change. Some product and store photographs are sample images; actual packaging or appearance may differ. Confirm current availability and the applicable price with the outlet before purchasing. Retail prices and café menu prices describe different products and should not be treated as interchangeable.
Check the actual package for ingredients, allergens, storage instructions, batch details, best-before dates, net quantity and maximum retail price. Website descriptions do not replace statutory package declarations or professional medical advice. Tell the outlet about any allergy before ordering.
3. Purchases and consumer rights
For a billing error, defective product, incorrect order or quality concern, contact the selling outlet or email us with the receipt or order reference and relevant details. Do not send payment credentials. Refunds, replacements and other remedies are assessed in accordance with applicable law and the circumstances of the purchase; these terms do not impose a blanket “no refund” rule.
Nothing here limits statutory rights under the Consumer Protection Act, 2019 or other applicable Indian law, or prevents approaching a competent consumer commission or other lawful authority.
4. Content and external links
Website text, images and brand assets belong to their respective owners. Personal browsing and sharing links are permitted; copying for commercial use requires the relevant owner’s permission. External brand, map and social links are provided for reference and do not make their services part of this website. Their terms apply when you use them.
5. Availability, applicable law and updates
We aim to keep information accurate, but the website may contain errors or be temporarily unavailable. This does not exclude liability or remedies that cannot lawfully be excluded, including for fraud, misleading representations or defective goods.
These terms are governed by Indian law. Disputes may be raised before the courts, consumer commissions or other authorities having jurisdiction under applicable law; no exclusive venue is imposed on consumers by this page.
Changes will be reflected on this page with an updated date. A material change to how personal information is used requires appropriate notice and, where required, fresh consent; updating this page alone is not consent to a new purpose.
Contact & grievances
For privacy requests, consumer complaints or questions about these terms, email hello@gabbarchai.com or use our contact page. Include only the details necessary to identify the enquiry or transaction.
Where rule 5(9) of the 2011 Sensitive Personal Data or Information Rules applies, information-processing grievances must be addressed within one month of receipt. The responsible grievance officer and an operational complaints procedure must be confirmed before final approval.
Legal operator and registered address: to be added. Named grievance officer, designation and contact details: to be added. The general contact email is not a confirmed grievance-officer appointment.