Privacy policy | Nawab’s Kitchen

Last updated 15 October 2026.

Who this notice covers

This notice describes information handled through the Nawab’s Kitchen website and its browser-installed app, including the current nawabskitchen.vercel.app website. ‘We’, ‘our’, and ‘the team’ refer to the Nawab’s Kitchen team responsible for this website. It also explains related enquiries received by email. Independent social networks and payment providers have their own privacy notices. Contact us using either email address at the end of this page.

Website operator: Nawabs Kitchen Official. Responsible contact for privacy requests and complaints: Khaja Moinuddin. Public contact location supplied by the operator: Hyderabad, Telangana, India — PIN 500089. Email contact@nawabskitchen.org or 786godsfood@gmail.com. This identifies the website contact; it does not assert incorporation, charitable registration, or tax approval.

Information you choose to provide

Contact, feedback, collaboration, and assistance forms ask for your name, email, enquiry category, message, and, where shown, a subject and optional telephone number. Assistance requests also ask for your city or general area. We receive the information and attachments you choose to include in direct emails or messages. Required fields are marked on the form; without them we may be unable to respond or assess a request.

Please share only what is necessary. Do not send passwords, OTPs, card numbers, bank login details, Aadhaar or other identity documents, medical records, or children’s identifying details through these forms. If you contact us for another person, obtain their permission and avoid unnecessary details. Requests involving children should come from a parent, guardian, or authorised organisation.

Technical information and local storage

Our hosting and security providers may process your IP address, browser/device information, requested pages, request time, referring site, and error or security events to deliver and protect the website. The website uses a session preference for the installation suggestion and an offline cache for a basic information page and icons. Form messages are not intentionally saved in browser storage or queued for offline sending. See the Cookie policy for details.

Why we use information

We use enquiry information to answer messages, assess and coordinate assistance, discuss donations or collaborations, investigate complaints, and keep relevant correspondence. Contact details may be used to reply through the channel you supplied. Sending a help request does not guarantee assistance or enrol you in marketing.

Technical data supports delivery, reliability, troubleshooting, and prevention of misuse. Where applicable law requires a legal basis, processing depends on the purpose: your consent, steps requested by you before an agreement or performance of an agreement, compliance with a legal obligation, or a legitimate interest where that basis is available and appropriate. Optional advertising consent, where required, must be separate from contacting the team. Visiting a page or scrolling is not consent to optional tracking.

Who receives information

Relevant team members receive enquiries. Vercel provides website hosting. Zoho ZeptoMail is the form email-delivery integration when operational; messages and acknowledgements are processed through that service and the receiving mailboxes. Direct email to the Gmail address also involves Google’s email service. The website’s email adapter disables open and click tracking.

Where configured, Cloudflare Turnstile processes browser/security signals for a challenge, and Upstash Redis stores submission identifiers, keyed hashes, counters, and delivery status to help handle duplicates or abuse. These entries do not intentionally contain the message body; hashing does not necessarily make data anonymous. Availability and configuration of these controls can change.

A payment provider may share donor, transaction, membership, and contact information with the recipient through its own dashboard or notifications. We may use information received there to reconcile payments and answer donor enquiries. We do not receive your full card details through this website. We may disclose information when lawfully required or where necessary to address fraud, protect safety, or establish or defend legal rights. We do not sell contact-form messages or donor contact lists.

YouTube, social links, and messaging services

Official YouTube players on video cards can load when they approach the screen, before you press Play. Loading them discloses technical request information to YouTube/Google. We use youtube-nocookie.com privacy-enhanced players, which reduce certain personalisation uses but do not make viewing anonymous or eliminate all storage and processing. Playback, account sign-in, or opening YouTube can involve further processing under Google’s policies. A separate watch-page player loads after its Play control is selected.

The website retrieves public video metadata to show recent uploads. Following Instagram, Facebook, X, YouTube, or WhatsApp links connects you with those independent services. Their account, cookie, messaging, and privacy settings apply. A public post or comment on those services is not a private message to us. Instagram currently has a profile invitation rather than an embedded post feed.

Advertising and Google AdSense

Website display advertising through Google AdSense and visitor analytics are not currently enabled. The following explains how information may be used if AdSense is introduced.

If enabled, third-party vendors, including Google, may use cookies or similar identifiers to serve advertising based on previous visits to this website or other websites. Google’s advertising cookies allow Google and its partners to personalise ads using those visits where permitted and, where required, after consent. Ad services may process IP address, browser/device information, interactions, and identifiers for delivery, measurement, security, and fraud prevention.

You can manage personalised advertising through Google My Ad Center and participating vendors’ opt-out tools. These settings do not necessarily remove all advertising or replace a website consent choice. If website advertising is introduced, we will update the vendor disclosures and provide consent and withdrawal controls where required before activating it. See the Advertising disclosure and Cookie policy. Ads within a YouTube player are governed by YouTube’s advertising arrangements.

Retention and deletion

We keep correspondence while it is needed to respond to a request, coordinate an agreed activity, resolve a complaint, or maintain records required by law. Relevant payment, accounting, dispute, and fraud records may need longer retention than a routine enquiry. Retention depends on the purpose, the status of the enquiry, and applicable legal obligations. You may ask us to explain the retention of a particular record or request its deletion.

The configured submission-control adapter gives its temporary counters and status entries expiry periods of up to 24 hours. This does not delete emails or provider logs. Hosting, security, email, social, and payment providers maintain their own retention and backup arrangements; no India-only storage or universal deletion period is promised. You can ask us about a particular record or request deletion using the contact details below.

International processing and security

Providers may process information outside your country, including outside India. You can contact us for information about the providers involved in your enquiry and applicable safeguards. We use HTTPS and restrict access to information to people and services that need it. No online service is completely secure. Do not email financial credentials. If we identify a personal-data incident, we will assess and provide notifications required by applicable law.

Children, photographs, and dignity

This website describes work that benefits children, but its enquiry and payment features are intended for adults or authorised representatives. We do not seek personal information directly from children through forms. A child’s appearance in a photograph is not permission to identify, contact, profile, or reuse their image. Parents, guardians, people pictured, and authorised representatives can report a photograph or privacy concern; please provide the page URL and the concern without publishing more personal information.

Your choices, requests, and complaints

You can request access to information we hold about you, correction, deletion, withdrawal of consent, or information about sharing. Depending on the law applicable to you, additional rights may include restriction, objection, portability, or a complaint to a competent supervisory authority. These rights are subject to legal conditions and exceptions; this notice does not claim every right applies to every visitor.

Email with the subject ‘Privacy request’ or ‘Privacy complaint’ and describe what you need. We may ask for proportionate verification to protect your information; do not send an identity document unless a necessary, secure method has been agreed. We will respond within applicable legal time limits and explain any lawful reason we cannot fully fulfil a request. Withdrawing consent does not undo earlier lawful processing and may prevent us continuing an assistance request that needs the information. You can complain to a relevant authority without first giving up your other rights.

Updates to this notice

We will revise this page when practices or services change and update the date shown above. Where required, material changes will receive a more prominent notice or a new consent request. The linked Cookie, Donation, and Refund policies explain related matters.

Contact the team

For policy questions, privacy requests, donation concerns, or complaints, email contact@nawabskitchen.org or 786godsfood@gmail.com. Please describe your concern and share only the information needed to investigate it.

Provider policies and choices

These services have their own practices. A listing here does not mean every service is enabled, or that every provider acts only on our instructions.