Privacy policy

Ruchi, Authentic Indian Cuisine & Bar, runs this website and the restaurant at 1 Changi Business Park Crescent, #01-14 & 15, Plaza 8 @ CBP, Singapore 486025. In this policy, "we" and "us" mean Ruchi.

Questions about your personal data go to our Data Protection Officer at info@ruchi.sg.

We collect personal data when you give it to us:

• Account: your name, email address, mobile number (optional) and password. We store your password only as a secure scrambled code (a hash), never as readable text.
• Pickup orders: what you ordered, your pickup time, name, email, mobile number, any notes, and whether and how you paid.
• Table bookings: the day, sitting, arrival time, party size, your name, email, mobile number and any notes.
• Catering and event enquiries: your contact details, company name if you give one, the date, time, guest numbers, menu choices, delivery address for catering and any notes.
• Ruchi points: the points you earn and use, linked to your orders.
• Messages: anything you send us by email, phone or WhatsApp.

We collect some technical data automatically:

• One sign-in cookie (ruchi_session), set only when you sign in, to keep you signed in. We use no advertising or tracking cookies and no analytics tools.
• Storage in your own browser for your cart, your veg or non-veg preference and the order you are paying for. This stays on your device and is not sent to us until you place an order.
• Server logs with your IP address, browser type and the pages requested, kept briefly to protect the site against misuse.

We do not receive or store your card details. Online payments are handled entirely by our payment provider.

• To prepare your order, tell you when it is ready and take payment.
• To hold, confirm or change your table booking.
• To answer catering and event enquiries and send you quotes.
• To run your account and Ruchi points.
• To send emails you need, such as order receipts, booking confirmations and password reset links.
• To keep the website safe, prevent fraud and meet our legal and accounting duties.

We do not send marketing emails or messages unless you have asked to receive them, and you can stop them at any time.

We share personal data only with companies that help us run the website, and only what each one needs:

• Online payments: Stripe or Razorpay process your payment.
• Email: Resend delivers our emails to you.
• Hosting and database: Vercel, Render and Neon run the website and store its data, in Singapore where they offer it.
• Images: Cloudinary stores our dish photos. It holds no personal data about you.
• Photos on Ruchi Celebrations pages load from Unsplash, which, like any website, can see your IP address.

These providers may process data outside Singapore. When they do, we use providers that protect it to a standard comparable to the PDPA.

We may also share data when the law requires it, or to protect our customers, staff or business.

We keep personal data only as long as we need it for the purposes above. Order and payment records are kept for at least five years because Singapore tax law requires it. You can ask us to close your account at any time; we then remove your account details and keep only the records the law requires.

Under the PDPA you can:

• ask what personal data we hold about you and how we have used it in the past year,
• ask us to correct anything that is wrong (you can also update your details on your account page),
• withdraw your consent to our using your data. We will tell you what that means for your account or bookings first.

Send your request to info@ruchi.sg. We reply as soon as we reasonably can, usually within 30 days. If you are not happy with our answer, you can contact the Personal Data Protection Commission (www.pdpc.gov.sg).

The website uses an encrypted connection (HTTPS). Passwords are stored as secure hashes, sign-in is protected against repeated guessing, and only our staff can open the staff dashboard. Changing your password signs you out on every device. No system is perfectly secure, so please use a password you do not use anywhere else.

If we change this policy, we will update it here and change the date at the top. For important changes we will also tell signed-in customers by email.

Email info@ruchi.sg, call +65 6298 1925 or WhatsApp +65 8514 4757. You can also write to us at Plaza 8 @ CBP, 1 Changi Business Park Crescent, #01-14 & 15, Singapore 486025.