Privacy Policy
Last Updated: October 13, 2026 • Black Fox The Coffee House
1. Introduction & Scope
Welcome to Black Fox: The Coffee House (“Sanctuary”, “Café”), located at Shop No 20, Asopalav One West, Bhayli Main Road, Besides Adventuraa, Sevasi, Vadodara, Gujarat 391101, operated and powered by Cyber Drift Solutions (“Company”, “we”, “us”, or “our”).
This Privacy Policy outlines how we collect, process, store, and safeguard personal data across our physical premises (dining rooms, counters, brew bar, CCTV security surveillance, and guest Wi-Fi), our online portals (`blackfoxcoffeehouse.com`), table reservation systems, mobile applications, and automated electronic messaging integrations powered by the Meta WhatsApp Business Cloud API and SMS gateways.
We operate in strict conformity with the Digital Personal Data Protection Act (DPDPA), the Information Technology Act, 2000, and Meta Platforms, Inc. WhatsApp Business Terms.
2. Information We Collect
Mobile telephone number and guest name provided at checkout or pass onboarding; itemized orders, brew selections, bill totals, payment modes (Cash, UPI, Card, Black Card Wallet), and POS invoice numbers.
Name, email address, phone number, party size, requested date/time slot, and guest notes (culinary preferences, allergy disclosures, celebration notes) submitted through our reservation system.
Continuous closed-circuit television (CCTV) cameras operate in public dining halls, entrances, counter registers, and open areas for guest and staff security, loss prevention, and fraud investigation. No audio is recorded in private washrooms.
Device MAC addresses and connection timestamps recorded by our public guest Wi-Fi routers in accordance with Indian Department of Telecommunications (DoT) compliance standards.
3. Meta WhatsApp Business Cloud API Disclosures
We utilize the official Meta WhatsApp Business Cloud API (operated by Meta Platforms, Inc.) for paperless digital communication:
Instant itemized tax receipts (ORDER_RECEIPT), table reservation confirmations, and 4-digit security login OTPs.
Loyalty incentives (WE_MISS_YOU_PERK, max once/30 days) and monsoon flash specials (MONSOON_FLASH_PERK, strictly 7-day cooldown).
Instant Opt-Out (STOP): You can unsubscribe from promotional WhatsApp messages anytime by replying “STOP”, “UNSUBSCRIBE”, or “CANCEL” to our verified WhatsApp Business thread.
4. Zero Sale of Data & Sharing Limits
We will NEVER sell, lease, trade, or monetize your personal data or phone number to data brokers, marketing agencies, or third parties.
Data is shared strictly with essential infrastructure processors bound by confidentiality contracts: Meta Platforms, Inc. (WhatsApp transmission), cloud hosts (Google Cloud Platform, Cloudflare), and statutory law enforcement agencies when compelled by Indian legal process.
5. Data Security Architecture
Cyber Drift Solutions implements military-grade security controls:
- Customer authentication uses salted SHA-256 OTP hashing with constant-time verification.
- All network communications are secured using modern TLS 1.3 encryption (HTTPS).
- Physical NFC Black Cards utilize isolated cryptographic token IDs rather than unencrypted financial balances.
- Staff and barista terminal access is governed by strict Role-Based Access Control (RBAC).
6. Data Retention & Erasure Schedule
- Sales Invoices & Billing Records: Retained for 7 years as mandated by Indian Income Tax and GST laws.
- CCTV Security Footage: Purged on a rolling 15 to 30-day loop unless required for ongoing police investigation.
- Table Booking Records: Anonymized within 12 months.
- Right to Erasure: You may request complete erasure of your member profile and contact details by emailing
support@blackfoxtch.com. Non-tax personal records will be scrubbed within 30 days.
7. Children's Privacy
Our services and stored-value passes are not directed toward children under 18 years without parental consent. We do not knowingly solicit personal data from unsupervised minors.
8. Grievance Officer & Contact Information
In accordance with the Information Technology Act, 2000 and the Digital Personal Data Protection Act, please direct privacy inquiries, grievance submissions, or data deletion requests to:
Entity: MISCHF VENTURES (for Black Fox The Coffee House)
Attention: Data Protection & Grievance Redressal Officer
Email: support@blackfoxtch.com
Cafe Address: Shop No 20, Asopalav One West, Bhayli Main Road, Besides Adventuraa, Sevasi, Vadodara, Gujarat 391101
Websites: https://blackfoxcoffeehouse.com