Legal

Privacy Policy

How we collect, use, and protect your information.

Last updated: September 2026 · Effective immediately

This Privacy Policy is provided in accordance with Section 5 of the Digital Personal Data Protection Act, 2023. It describes what personal data we collect, why we collect it, how we use it, and how you can exercise your rights. This policy applies to the Mellon website and governs how we collect, use, and protect personal information you share with us.

1. Who We Are

Mellon Health Cafe ("Mellon", "we", "us") is a health food café brand operating outlets across Delhi and Gwalior, India. Our registered office is at [BUSINESS TO CONFIRM: REGISTERED OFFICE ADDRESS].

For the purposes of this Privacy Policy, Mellon is the data fiduciary responsible for your personal data when you use this website.

2. Information We Collect

We collect personal data only when you choose to share it with us through our enquiry form on the Contact page. The specific categories of personal data we collect are:

  • Name — to identify you and address your enquiry personally
  • Email address — to respond to your enquiry
  • Message content — to understand and address your enquiry or feedback

We do not currently collect phone numbers, addresses, payment information, or any other personal data through this website.

3. How We Use Your Information

We process your personal data for the following specific purposes:

  • Responding to your enquiry — we use your name, email, and message content to understand and reply to your question, feedback, or franchise enquiry
  • Franchise information — if your enquiry relates to a franchise opportunity, we may share relevant information about the franchise model

We do not use your data for automated decision-making, profiling, marketing, or any purpose beyond responding to your enquiry.

4. Third-Party Services

We do not sell, rent, or trade your personal data. We use the following third-party services to operate this website:

  • Formspree — processes form submissions on our behalf. When you submit the enquiry form, your name, email, and message are sent to Formspree for delivery to us. Formspree's privacy policy governs their handling of this data.
  • Cloudflare Turnstile — provides bot protection for our enquiry form. This may process your IP address and browser information as part of its security verification.

These services process data under confidentiality obligations and only as necessary to operate their respective functions.

5. Data Retention

We retain your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law.

Enquiry form submissions are retained for a limited period to allow us to respond to your enquiry. [BUSINESS TO CONFIRM: SPECIFIC RETENTION PERIOD]

When personal data is no longer needed for the specified purpose, we will delete or anonymise it. You may also request erasure of your data at any time by contacting our Grievance Officer (see Section 8 below).

6. Your Rights

Under the Digital Personal Data Protection Act, 2023 (DPDP Act), you have the following rights as a Data Principal:

  • Access — request a copy of the personal data we hold about you (Section 11)
  • Correction — request correction of inaccurate or incomplete personal data (Section 12)
  • Erasure — request deletion of your personal data when it is no longer needed for the purpose it was collected (Section 13)
  • Withdraw consent — withdraw your consent for data processing at any time (Section 6(7))
  • Grievance — raise a complaint with our Grievance Officer or with the Data Protection Board of India

To exercise any of these rights, write to our Grievance Officer at the contact details provided in Section 8 below. To withdraw consent, you may contact us at any time — withdrawing consent is as easy as giving it.

You may also file a complaint with the Data Protection Board of India, established under Section 18 of the DPDP Act. For more information, visitmeity.gov.in.

7. Cookies & Tracking

This website does not use analytics cookies, advertising cookies, or third-party tracking tools. We do not use Google Analytics, Meta Pixel, Hotjar, Microsoft Clarity, or similar services.

Formspree and Cloudflare Turnstile may set their own cookies during form submission as part of their normal operation. These cookies are governed by their respective privacy policies, not ours.

8. Changes to This Policy

We may update this policy from time to time. The "Last updated" date at the top will reflect any changes. Continued use of the website after an update constitutes acceptance of the revised policy.

9. Contact

For any queries related to this Privacy Policy, write to us at mellon.eujay@gmail.com or visit our Contact page.