This Privacy Policy describes how Bombay Kitchen Inc. (“Bombay Kitchen”, “we”, “us”, or “our”) collects, uses, shares, and protects information about you when you visit our website at www.bombaykitchen.com (the “Website”), submit an inquiry, use our services, visit or order from our outlets where applicable, or otherwise interact with us. By using the Website, you agree to the terms of this Privacy Policy.

1. Information We Collect

a) Information You Provide Directly

Name, email address, phone number, street address, city, state/region, country/region, postal code, and other details you submit through contact, franchise, catering, or inquiry forms
Information related to franchise inquiries, such as citizenship, franchise experience, preferred territory, liquid capital range, timing preferences, and how you heard about us
Order, catering, delivery, or pickup details when you place an order through Bombay Kitchen outlets or related service channels, where applicable
Payment information when applicable, which is processed securely through third-party payment processors or ordering platforms and is not stored by us in full
Communications you send us by email, phone, website forms, social media, or other customer service channels

b) Information Collected Automatically

When you visit our Website, we and our third-party partners may automatically collect certain information, including:

Internet Protocol (IP) address and approximate location, such as city, state, or region
Browser type and version, operating system, device type, and device/browser identifiers
Pages visited, time spent on pages, clickstream activity, and interactions with Website forms or links
Referring URLs, campaign information, and search terms where available
Session identifiers, timestamps, and other technical log information

c) Cookies and Tracking Technologies

We use cookies and similar technologies to analyze website traffic, improve website functionality, enhance user experience, and measure website performance. Users may manage their cookie preferences through our cookie consent management platform. These may include:

Essential cookies: Required for basic Website functionality, form submission, security, and session management
Analytics cookies: Help us understand how visitors use the Website, such as page visits and user interactions
Advertising cookies: Used to measure advertising performance, support remarketing, and understand campaign effectiveness
Social media pixels and embedded links: Enable sharing, social media engagement, audience building, or measurement through platforms such as Facebook, Instagram, LinkedIn, X, and Pinterest

You can control cookies through your browser settings or, where available, our cookie consent tool. Disabling certain cookies may affect Website functionality or the performance of some Website features.

2. Third-Party Tracking and Advertising

Our Website may load third-party scripts, tags, links, pixels, or similar technologies that collect addressing and signaling information, including IP addresses and device/browser identifiers, as part of normal webpage operation, analytics, advertising measurement, and social media functionality. These third parties may include:

Google Analytics / Google Analytics 4 (analytics.google.com), where enabled
Google Ads / DoubleClick and related Google advertising or conversion measurement services, where enabled
Google Ads Remarketing or similar remarketing tools, where enabled
Social media and audience platforms linked from or integrated with the Website, such as Facebook, Instagram, LinkedIn, X, and Pinterest

These services are governed by their own privacy policies. We encourage you to review Google’s Privacy Policy at https://policies.google.com/privacy and the privacy policies of any social media or advertising platforms you choose to use.

Certain third-party trackers may be considered “pen registers” under California law (Cal. Penal Code § 638.50(b)). By continuing to use this Website after being presented with this notice and, where applicable, our cookie consent banner, you provide informed, specific, and prior consent to the installation and use of the tracking processes described in this Policy, as required by California Penal Code § 638.51(a).

3. How We Use Your Information

We use the information we collect to:

Respond to your inquiries, contact requests, franchise applications, catering requests, and customer service communications
Process and support orders, pickup, delivery, catering, or outlet-related requests where applicable
Manage franchise inquiries, evaluate potential territories, and communicate with prospective franchisees
Improve and optimize our Website, products, outlet experience, customer experience, and marketing communications
Measure advertising effectiveness, understand campaign performance, and attribute conversions
Retarget or remarket to Website visitors across advertising and social media platforms where permitted
Comply with legal obligations, enforce our terms, and protect our rights
Detect, prevent, and respond to fraud, abuse, technical issues, or security incidents

4. How We Share Your Information

We do not sell your personal information. We may share your information with:

Service providers: Website hosting providers, form-management tools, email service providers, IT vendors, customer support providers, payment processors, ordering platforms, delivery partners, or other vendors who process data on our behalf
Advertising and analytics partners: Google, social media platforms, and other service providers that help us measure, optimize, and improve our marketing
Franchise and business operations personnel: Internal team members and authorized representatives who need the information to respond to inquiries, evaluate franchise interest, or provide services
Legal authorities: When required by law, subpoena, legal process, or when necessary to protect our rights, customers, employees, business, or the public
Business transfers: In connection with a merger, acquisition, restructuring, financing, sale of assets, or similar business transaction

5. Your Privacy Rights

California Residents (CCPA / CPRA)

If you are a California resident, you may have the following rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA):

Right to Know: Request disclosure of the categories and specific pieces of personal information we have collected about you
Right to Delete: Request deletion of your personal information, subject to certain exceptions
Right to Correct: Request correction of inaccurate personal information
Right to Opt-Out: Opt out of the sale or sharing of personal information for cross-context behavioral advertising
Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights
Right to Limit Use of Sensitive Personal Information: Limit our use of sensitive personal information where applicable

To exercise any of these rights, contact us at: sanjivmody@bombaykitchen.com or call (516) 767-7400.

Consent to Tracking (California Pen Register Law)

Under California Penal Code § 638.51(a), installing or using a pen register requires either a court order or prior informed consent. By clicking “Accept” on our cookie consent banner, or by continuing to use our Website after reviewing this Policy and the cookie banner where presented, you provide your informed, specific, and voluntary consent to the use of tracking technologies described in Section 2.

You may withdraw consent at any time by: (1) clicking “Manage Cookies” in our cookie banner where available, (2) adjusting your browser settings to block cookies, or (3) using opt-out tools provided by Google at https://adssettings.google.com and other applicable advertising platforms.

Other U.S. State Privacy Rights

Residents of Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Delaware, Iowa, Nebraska, New Hampshire, New Jersey, and other states with applicable privacy laws may have similar rights, subject to the scope and limitations of those laws. Contact us to exercise your rights.

6. Data Retention

We retain personal information for as long as necessary to fulfill the purposes described in this Policy, respond to inquiries, provide services, comply with legal obligations, resolve disputes, maintain business records, and enforce our agreements. Analytics and advertising data is retained in accordance with the retention settings configured in our third-party platforms, where applicable.

7. Data Security

We implement reasonable administrative, technical, and physical safeguards designed to protect your information. However, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security of your data.

8. Children’s Privacy

Our website and services are not directed to children under the age of 13. We do not knowingly collect, use, or disclose personal information from children under 13 years of age. If we become aware that personal information has been collected from a child under 13 without appropriate parental consent, we will take reasonable steps to delete such information.

9. Links to Third-Party Sites

Our Website may contain links to third-party websites, social media pages, ordering platforms, delivery services, or other online services. We are not responsible for the privacy practices of those third parties. We encourage you to read their privacy policies before providing any personal information.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last Updated” date at the top of this page and, where appropriate, provide additional notice. Your continued use of the Website after any changes constitutes your acceptance of the updated Policy.

11. Contact Us

If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact us:

Bombay Kitchen Inc.

76 S Bayles Ave, Port Washington, NY 11050

Email: sanjivmody@bombaykitchen.com | pankajkumar@rajbhog.com

Phone: (516) 767-7400

Website: www.bombaykitchen.com

Privacy Policy