Data Protection & Consent Notice
Last updated: 15/08/2026
This notice is provided under the Digital Personal Data Protection Act, 2023 ("DPDP Act") at the point personal data is collected from you, in addition to our fuller Privacy Policy.
1. Who is Collecting Your Data
Orbitlink Innovations Pvt Ltd, operating FlowPlate, is the "Data Fiduciary" responsible for your personal data under the DPDP Act.
2. What We Collect and Why
| Data Collected | Purpose |
|---|---|
| Name, mobile, email | Account creation, OTP login, support |
| Restaurant details (name, address, GSTIN) | Service setup, GST-compliant invoicing |
| Payment details (via Razorpay) | Subscription billing, hardware orders |
| Order/menu/billing data | Core service functionality |
| Customer name/phone (QR ordering) | Order fulfillment for that restaurant only |
3. Your Consent
By proceeding, you consent to Orbitlink processing the above data for the stated purposes. We will seek fresh consent before using your data for any new purpose.
4. Withdrawing Consent
You may withdraw consent any time by contacting support@orbitlink.in. This may mean we can no longer provide the Service to you, and does not affect processing already carried out before withdrawal.
5. Your Rights
Right to access, correct, or request erasure of your data, and to nominate another person to act on your behalf regarding your data in the event of death or incapacity.
6. Data Sharing
Shared with Razorpay (payments), Fast2SMS (OTP), and cloud storage providers strictly to deliver the Service. We do not sell your personal data.