Privacy Policy

Lava Flames Restaurants Private Limited ("we," "us," or "our"), operating the restaurant brand Lava Stone Fire World, is committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website lavastonefireworld.com, make reservations, or interact with us in any capacity.

Please read this policy carefully. If you do not agree with the terms of this Privacy Policy, please discontinue use of our website and services.

We may collect the following categories of personal information:

• Identity Data: name, date of birth, gender
• Contact Data: email address, phone number, postal address
• Reservation Data: dining date, time, party size, special requests
• Transaction Data: billing details, payment method (we do not store full card numbers)
• Technical Data: IP address, browser type, device information, cookies and usage data
• Marketing Data: your preferences for receiving communications from us
• Feedback Data: reviews, survey responses, and communication records

We use the information we collect for the following purposes:

• To process and manage table reservations and event bookings
• To process payments and prevent fraud
• To send you booking confirmations, reminders, and updates
• To personalise your dining experience and loyalty benefits
• To send promotional offers, news, and updates (with your consent)
• To respond to enquiries, feedback, and complaints
• To comply with legal and regulatory obligations
• To improve our website, services, and operations
• To conduct analytics and understand customer behaviour

We process your personal data on the following legal grounds under applicable Indian data protection law (Information Technology Act, 2000 and DPDP Act, 2023):

• Consent: where you have given explicit consent (e.g., marketing communications)
• Contract: where processing is necessary to fulfil a reservation or service agreement
• Legal Obligation: where processing is required to comply with applicable law
• Legitimate Interests: where processing is necessary for our legitimate business interests, balanced against your rights

We do not sell your personal information. We may share your data with:

• Service Providers: payment processors, reservation platforms, IT providers, and delivery partners operating under strict data processing agreements
• Food Delivery Platforms: Zomato, Swiggy, and similar partners when you place orders through those platforms
• Analytics Providers: Google Analytics and Meta Pixel for aggregate, anonymised website analytics
• Legal Authorities: courts, regulators, and government bodies when required by law
• Business Transfers: in the event of a merger, acquisition, or sale of business assets

All third parties are required to handle your data securely and only for specified purposes.

Our website uses cookies and similar technologies to enhance your experience. These include:

• Essential Cookies: required for the website to function correctly
• Analytics Cookies: Google Analytics to understand how visitors use our site
• Marketing Cookies: Meta Pixel for advertising and conversion tracking

You may manage or disable cookies through your browser settings. Disabling certain cookies may affect website functionality. By continuing to use our website, you consent to our use of cookies in accordance with this policy.

We retain your personal data only for as long as necessary to fulfil the purposes outlined in this policy, or as required by applicable law. Reservation and transaction records are typically retained for a period of 7 years in accordance with Indian accounting and tax regulations. Marketing preferences are retained until you withdraw consent.

Under applicable Indian law, including the Digital Personal Data Protection Act, 2023, you have the following rights:

• Right to Access: request a copy of the personal data we hold about you
• Right to Correction: request correction of inaccurate or incomplete data
• Right to Erasure: request deletion of your data, subject to legal retention requirements
• Right to Withdraw Consent: withdraw consent for marketing communications at any time
• Right to Grievance Redressal: raise a complaint regarding our data practices

To exercise any of these rights, please contact our Grievance Officer at the details below.

We implement appropriate technical and organisational measures to protect your personal information from unauthorised access, disclosure, alteration, or destruction. These include SSL/TLS encryption for data in transit, restricted access controls, and regular security reviews. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

Our website may contain links to third-party websites, including food delivery platforms, review sites, and social media. This Privacy Policy does not apply to those external sites. We encourage you to review the privacy policies of any third-party sites you visit.

Our services are not directed at children under the age of 18. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal data, please contact us immediately and we will take steps to delete the information.

We may update this Privacy Policy from time to time. We will notify you of any material changes by updating the "Last Updated" date at the top of this page and, where appropriate, by email or a prominent notice on our website. Your continued use of our services after any changes constitutes your acceptance of the updated policy.

For any queries, concerns, or requests regarding this Privacy Policy or your personal data, please contact our designated Grievance Officer: