PANOVA Café & Bakery respects your personal data. This notice explains how we collect, process, safeguard, and honor your rights under India’s Digital Personal Data Protection Act, 2023.
Under Section 2(i) of the Digital Personal Data Protection Act, 2023, the Data Fiduciary responsible for determining the purpose and means of processing your personal data is:
Entity Name: PANOVA Café & Artisanal Bakery
Operating Address: In front of SBI Bank, Sahu Chowk, Rajopatti, Sitamarhi, Bihar 843302, India
Contact Telephone: +91 76448 80012
Official Inquiries: contactpanova@gmail.com
Primary Web Portal: https://www.panova.in
In line with the Principle of Data Minimisation (Section 4 & 5, DPDP Act 2023), we only collect the minimum digital personal data required to prepare your food, issue table tokens, and operate our café:
Under Section 4(1) and Section 6 of the DPDP Act 2023, personal data is processed solely for lawful purposes for which you have provided clear, affirmative consent, or for specific legitimate uses:
Order Fulfillment (Section 6 - Consent): Transmitting your item choices to the kitchen display/barista station, generating unique token receipts, and notifying you when ready.
Statutory Tax Compliance (Section 7 - Certain Legitimate Uses): Generating GST tax invoices and accounting records as mandated by the Government of India and Bihar Commercial Taxes Department.
Loyalty Rewards (Section 6 - Explicit Consent): Granting loyalty points, notifying winners of monthly stamp club draws, and offering birthday cake discounts if registered.
In strict observance of Section 6(1) of the DPDP Act, 2023:
Reasonable Security Practices (Section 8(5)): We maintain industry-standard security safeguards to protect personal data from unauthorized access, alteration, or disclosure. All web traffic is strictly encrypted over TLS 1.3 (HTTPS). Internal POS databases are gated with multi-factor authentication and role-based access.
Data Retention & Erasure (Section 8(7)): Once the primary purpose of processing is fulfilled (e.g. food is served and order cycle completed), customer phone numbers are purged from active order queues. Transaction records retained for GST compliance are archived and deleted after the statutory accounting period expires.
Protection of Children's Data (Section 9): Panova does not knowingly track minors or engage in behavioral monitoring or targeted advertising directed at children.
As a Data Principal under Indian law, you are entitled to enforce the following statutory rights:
Obtain a summary of personal data being processed and the identities of any data fiduciaries with whom it has been shared.
Request correction of inaccurate or misleading data, completion of incomplete data, or updating of your contact records.
Demand deletion of your personal data when no longer necessary for the purpose or upon consent withdrawal.
Nominate any individual who shall, in the event of death or incapacity, exercise your data rights on your behalf.
In compliance with Section 8(10) & Section 13 of the DPDP Act, 2023, we have designated a Grievance Redressal Officer to address all queries, consent revocations, and complaints:
Name / Title: Grievance Redressal Officer, PANOVA Café
Mailing Address: Opposite SBI Bank, Sahu Chowk, Rajopatti, Sitamarhi, Bihar 843302, India
Direct Redressal Email: grievance@panova.in (alt: contactpanova@gmail.com)
Direct Phone Helpline: +91 76448 80012 (Mon–Sat, 10:00 AM – 6:00 PM IST)
Resolution SLA: Every grievance is acknowledged within 48 hours and definitively resolved within 30 days as prescribed by law.
Right to Escalate: If you are not satisfied with the resolution provided by our Grievance Officer, or if no response is received within the statutory period, you have the right under Section 13(3) to file a formal complaint with the Data Protection Board of India (DPBI).
Exercise your right to access, correct, or erase your customer records.