1. Terms used
The following words carry the meaning given to them by the Digital Personal Data Protection Act, 2023 (the "DPDP Act") and the rules made under it.
- Data Fiduciary
- The owner of the website Yimolub (yimolub.world), who decides why and how personal data is processed. Contact: info@yimolub.world, +91 40 4862 3197, Flat No. 204, Green Park Residency, Madhapur, Hyderabad, Telangana 500081, India.
- Data Principal
- The visitor or correspondent to whom the personal data relates.
- Personal data
- Any data about an individual who can be identified by or in relation to that data.
2. Data and sources
Personal data can reach the Data Fiduciary from three places. In each case the visitor decides what to share.
Contact form
- email address, name and phone number (required);
- area in Hyderabad and preferred way of reply (optional);
- the text of the question and the consent checkbox.
In the current version of the site this form is checked by the browser only. Its contents are not transmitted to the Data Fiduciary or stored anywhere; after sending, the visitor sees a thank-you page whose address carries no form data.
Plan order block
- the choice between a 7-meal and a 30-meal run on a plan page.
This choice only changes what the page shows. It is not sent, saved or linked to the visitor.
Direct email and telephone
- the sender's email address or phone number, name and whatever the message contains.
Health information, test results, prescriptions or details of medicines are not requested. The visitor is asked not to include them in any message.
3. Purposes and legal basis
| Purpose | Legal basis |
|---|---|
| Answering questions about plans, portions, prices and delivery sent by email or phone | Consent given by the Data Principal when writing or calling, section 6 of the DPDP Act |
| Agreeing a plan, a start date, an address and payment with a visitor who asks for it | Consent of the Data Principal for that specific purpose |
| Delivering the site's pages safely (server logs kept by the hosting provider) | Legitimate use for the security and operation of the website, section 7 of the DPDP Act |
Consent may be withdrawn at any time by writing to info@yimolub.world. Withdrawal does not affect processing that took place before it.
4. Recipients and transfers
Personal data is not sold, rented or shared for marketing. When the site is opened, the visitor's browser also contacts the following services.
| Recipient | What it receives | Where |
|---|---|---|
| Hosting provider of yimolub.world | IP address, time of request, page requested, browser type (server logs) | According to the provider's data centres |
| Google Fonts (Google LLC) for the fonts DM Serif Display, Karla | IP address and basic browser data needed to deliver the font files | Possibly outside India, including the USA |
| Email provider of the Data Fiduciary | Messages sent to info@yimolub.world | According to the provider's servers |
Where data is processed outside India, this takes place in accordance with the DPDP Act and any restrictions notified by the Central Government.
5. Storage period
Input in the contact form and the order block is not stored at all. Emails and notes of telephone conversations are kept for up to nine months after the last message in a conversation and are then deleted, unless a law requires longer storage. Server logs are kept by the hosting provider under its own schedule, usually for a few weeks.
6. Cookies and tracking
The site sets no cookies and uses no local storage, analytics, advertising or tracking pixels. Details are given in the cookie policy.
7. Rights of the Data Principal
- Access
- To obtain a summary of the personal data processed and of the processing activities.
- Correction and completion
- To have inaccurate or incomplete data corrected, completed or updated.
- Erasure
- To have personal data deleted once it is no longer needed for the purpose for which it was given.
- Grievance redressal
- To raise a complaint with the Data Fiduciary at info@yimolub.world. Requests are acknowledged within two working days and answered within 21 days.
- Nomination
- To nominate another person to exercise these rights in the event of death or incapacity.
If a grievance is not resolved, the Data Principal may approach the Data Protection Board of India.
8. Security and minors
Reasonable technical and organisational safeguards protect the mailbox and the devices on which correspondence is read. The site is intended for adults; personal data of children is not knowingly processed. If a parent or guardian learns that a child has written to us, the message will be deleted on request.
9. Revisions
This policy may be revised when the site or the law changes. The date at the top of the page shows the latest revision. Significant changes will be visible on this page before they apply.