CookEase Privacy Policy & Beta User Consent
Last Updated: 31 December 2025
Effective From: 31 December 2025
CookEase (“we”, “our”, “us”) is a community‑driven meal‑kit and cooking platform currently operating in beta. This document serves as our detailed Privacy Policy and Beta User Consent. It explains how we handle personal data, the limitations of our beta operations, and your rights as a user. By creating an account and checking the consent box, you acknowledge that you have read, understood and agreed to this policy.
Purpose and Scope
CookEase is in an early‑access phase. Features, pricing, delivery slots and logistics may change as we refine the platform. Operational licences and food‑safety registrations (e.g., FSSAI) are in progress. This policy applies to all data collected during the beta and will be updated as the platform evolves.
Beta Stage Disclosure
Experimental features: New menus, subscription plans, loyalty programmes or workflow changes may be added or removed without notice.
Variable pricing and delivery: Pricing, delivery windows and service availability may fluctuate while we optimise supply, logistics and regulatory compliance.
Licensing and compliance: Food safety licences and other regulatory approvals are being obtained. Services may pause or change in certain regions as we meet FSSAI and local requirements.
User feedback: Your feedback helps us test and improve the platform. Data collected from surveys or feedback forms will be used solely to enhance CookEase and will not be shared externally.
Information We Collect
We collect information that is necessary to operate CookEase and improve your experience:
Personal Information
Full name and title
Email address and phone number
Delivery address and location
Account credentials (hashed password, login metadata)
Dietary preferences (vegetarian, vegan, allergies, cuisine interests)
Usage & Interaction Data
Account creation date, login timestamps and session duration
Device identifiers and browser type
Navigation behaviour (pages visited, clicks, feature usage)
Feedback and support communications
Participation in surveys and beta feature testing
Transactional & Payment Information
Order details and purchase history
Preferred payment method (handled via secure third‑party gateways—CookEase does not store your full card details)
Promotional codes and loyalty benefits
Why We Collect and How We Use Data
We collect data for the following purposes:
Account management: To create and maintain your CookEase account, authenticate you, manage preferences and process orders.
Service delivery: To prepare and deliver meal kits, manage inventory, handle customer support and process transactions.
Beta feature testing: To test, evaluate and iterate on new features, menus, subscription models and pricing structures.
Communication: To send transactional emails or SMS messages (order confirmations, service notices), beta updates and product announcements.
Analytics: To analyse usage patterns, improve user experience and plan our menus, logistics and marketing. Data is aggregated where possible.
Legal compliance: To meet legal obligations under India’s food‑safety regulations, taxation requirements and the Digital Personal Data Protection Act (DPDP 2023/2025).
Security: To detect and prevent fraud, breaches or misuse of the platform.
We do not sell or rent your personal data to third parties. Data may be shared with trusted service providers (e.g., payment processors, analytics providers) only for the purpose of operating CookEase.
Consent and User Rights
Under India’s DPDP Act and Rules, personal data must be processed only with explicit consent. When you use CookEase, we ask for your consent to collect and process data. You have the right to:
Be informed: We will clearly explain why we are collecting your data, what categories of data we collect and how it will be used. Under DPDP rules, organisations must give users clear information about the specific purpose of processing, the type of data collected and any third parties with whom it will be shared.
Voluntary participation: Your consent is voluntary. Access to core services is not conditional upon providing consent for non‑essential processing.
Unambiguous consent: You provide consent through an affirmative action (e.g., checking a box). Simply browsing our site does not imply consent.
Access, correction and deletion: You may request a copy of your personal data, ask for corrections or request deletion. We will comply subject to legal requirements.
Withdraw consent: You may withdraw consent at any time. We will cease processing your data and disable non‑essential cookies.
Portability: Where feasible, you can request that your data be transferred to another service.
Complaint: You can lodge a complaint with India’s Data Protection Board if you believe we have not complied with DPDP.
Consent Architecture for Cookies
India’s DPDP Rules require explicit consent before using cookies or similar tracking technologies. We follow an opt‑in model:
Essential cookies: These enable core functions (session management, authentication) and are used without consent.
Analytics & preference cookies: We seek explicit consent to use cookies for analytics or remembering preferences. Cookies will not be placed until you actively consent. Website operators (data fiduciaries) may process data from cookies only after explicit user consent.
Third‑party cookies: Cookies from analytics platforms or advertising partners will be disabled until consent is given. We disclose the names of third parties and the type of data collected.
Managing consent: You may change or revoke consent at any time via cookie settings. We log consent records to demonstrate compliance.
Data Security and Storage
We implement reasonable administrative, technical and physical safeguards to protect your data:
Encryption: Sensitive data is encrypted in transit (HTTPS/TLS) and at rest.
Access controls: Personal data is accessible only to authorised employees and service providers who require it to perform their tasks.
Anonymisation: Where possible, data used for analytics is aggregated or anonymised.
Breach response: In case of a data breach, we will follow the DPDP’s breach‑notification guidelines, including notifying the Data Protection Board and affected users within the prescribed timeframe.
Data is stored on secure servers within India, except where cross‑border storage is permitted by law. Retention periods are based on operational needs and legal requirements; once data is no longer required, it is securely deleted.
Third‑Party Services and Data Sharing
CookEase may use third parties to provide certain services:
Payment processors: For secure payment handling and fraud detection. We do not store full payment details.
Analytics providers: To monitor usage and improve user experience. Data is aggregated and anonymised where possible.
Delivery partners: To coordinate the delivery of meal kits. They receive only the information necessary to fulfil the order.
Marketing platforms: To send opted‑in communications.
Each third party is contractually required to protect your data, use it only for the specified purpose and comply with DPDP and FSSAI regulations.
Variability of Services During Beta
Because CookEase is in beta:
Menu items, pricing, promotions and subscription terms may change without notice.
Delivery areas and slots may be restricted or altered.
Certain features may be suspended or removed.
Refund and cancellation policies are subject to change as we refine operations.
We commit to transparency and will inform you of significant changes via email or in‑platform notifications.
Food Safety & Health Disclaimer
Ingredient transparency: We endeavour to list all ingredients and allergens accurately. However, variations may occur due to sourcing and preparation.
No medical advice: CookEase content is for informational purposes only. We are not licensed healthcare providers. You should consult a professional for dietary or medical advice.
User responsibility: Users with allergies or dietary restrictions must carefully review ingredients and consult their healthcare provider before ordering.
Changes to This Policy
We may update this policy to reflect changes in operations, legal requirements or best practices. The “Last Updated” date at the top will be revised accordingly. Continued use of CookEase after updates implies acceptance of the revised policy. We encourage users to review the policy periodically.
Governing Law
This policy is governed by and interpreted in accordance with the laws of India, including the Digital Personal Data Protection Act and applicable food safety regulations.
This Privacy Policy and Beta User Consent underscores CookEase’s commitment to transparency, user rights and responsible data practices. As Indian data‑protection regulations evolve and CookEase moves toward full launch, we will continue to refine our policies and infrastructure to ensure compliance, trust and a great user experience.