Privacy Policy

FUDIKOO PRIVACY POLICY.

 

1. Introduction

At Fudikoo (“we”, “us”, or “our”), we value your privacy and are committed to protecting your personal data.
This Privacy Policy explains how we collect, use, store, disclose, and safeguard information when you interact with our mobile application, website, and related services (collectively, the “Platform”).

Fudikoo is a company based in India. This Policy has been designed to comply with applicable data-protection laws, including:

• The Digital Personal Data Protection Act, 2023 (India)
• The Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL) (UAE)
• The Personal Data Protection Law (Royal Decree M/19 of 2023) (KSA)

and aligned with internationally recognized privacy principles such as lawfulness, transparency, data minimization, and accountability.

 

By accessing or using our Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your information as described herein. If you do not agree with any part of this Policy, please discontinue use of our Platform immediately.

2. Scope of Application

This Privacy Policy applies to all individuals and entities who access, use, or interact with Fudikoo’s Platform, including but not limited to:

• Users who download, register, or use the mobile application or website;
• Vendors, restaurants, cafés, bars, and catering providers who list or manage their business profiles on the Platform;
• Visitors who browse or interact with our website or promotional pages; and
• Any other individuals whose personal data may be collected or processed through the Platform’s features, integrations, or communication systems.

This Policy governs all personal data collected through our digital interfaces, mobile applications, APIs, and other tools operated by Fudikoo, unless a separate policy or agreement specifically applies to certain services.

It does not apply to:

• Third-party websites, services, or applications that may be linked or integrated with Fudikoo’s Platform;
• Vendors’ own independent data-collection or processing activities outside the Platform; or
• Any offline interactions or services not connected to Fudikoo’s digital ecosystem.

Users and vendors are encouraged to review the privacy practices of any third parties they engage with outside of Fudikoo’s Platform.

3. Definitions

For the purpose of this Privacy Policy, the following terms shall have the meanings set out below:

“Personal Data” means any information that identifies or can reasonably be used to identify an individual, directly or indirectly, such as name, contact details, email address, phone number, device identifiers, location data, or any combination thereof.

“Processing” means any operation or set of operations performed on Personal Data, whether by automated means or otherwise, including collection, storage, recording, organization, structuring, alteration, retrieval, use, disclosure, transmission, dissemination, restriction, erasure, or destruction.

“Data Subject” refers to any individual whose Personal Data is collected, held, or processed by Fudikoo.

“User” refers to any individual who downloads, accesses, or uses the Fudikoo Platform for table bookings, takeaway orders, or catering services.

“Vendor” refers to any restaurant, café, bar, catering provider, or similar establishment that registers or lists its services through the Fudikoo Platform.

“Platform” means Fudikoo’s mobile application, website, web portals, APIs, and all other related digital tools or services operated by Fudikoo.

“Controller” (or “Data Fiduciary” where applicable) means the natural or legal person who determines the purposes and means of processing Personal Data.
Fudikoo acts as a Controller when it processes data relating to users and vendors who interact directly with the Platform.

“Processor” means a person or entity that processes Personal Data on behalf of a Controller.
Fudikoo may act as a Processor when it processes user data on behalf of vendors using its technology infrastructure.

“Third Party” means any individual or organization other than the Data Subject, Fudikoo, or any authorized Processor acting on Fudikoo’s behalf.

“Applicable Laws” means all data-protection, privacy, and electronic-communications laws applicable to Fudikoo’s operations, including without limitation the Digital Personal Data Protection Act, 2023 (India), the Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (UAE), and the Personal Data Protection Law, Royal Decree M/19 of 2023 (KSA), together with any amendments or implementing regulations thereof.

4. Information We Collect

We collect different categories of information from users, vendors, and visitors to operate and improve the Fudikoo Platform.
The data we collect depends on how you interact with our services — whether as a user booking a table, a vendor managing a listing, or a visitor browsing our website.

4.1 Information You Provide to Us

When you use or register on the Platform, you may provide us with the following information voluntarily:

• Name, contact number, and email address
• Business name, restaurant or café details, and location information
• Profile photos, logos, and menu items uploaded to your vendor profile
• Booking details, takeaway orders, or catering requests
• User feedback, inquiries, or support messages
• Any other information you choose to share with us through forms, chat, or customer support channels

If you are a vendor, you may also provide additional information such as your business registration details, license numbers, and other documents necessary for verification.

4.2 Information Collected Automatically

When you access or use the Platform, certain information is collected automatically using standard technologies such as cookies, log files, and analytics tools.
This includes:

• Device type, operating system, and browser version
• IP address, time zone, and language preference
• Access timestamps, page visits, and feature usage data
• Crash logs, performance diagnostics, and error reports
• Referral sources or links that brought you to the Platform

This data helps us understand how users engage with our Platform and allows us to maintain performance, security, and user experience.

4.3 Information from Third-Party Integrations

Fudikoo may integrate with third-party platforms to enhance functionality.
When you choose to connect your account or interact with such services, we may receive limited information as permitted by those providers, including:

• Authentication tokens or verification credentials
• Business identifiers and contact details
• Analytics or performance metrics
• Social media or mapping information (if you connect accounts or locations)

We process such data in accordance with this Policy and the privacy terms of the relevant third-party provider.

 

4.4 Location and Device Information

With your consent, we may collect or access limited location data (e.g., city or region) to show nearby restaurants or to customize offers.
You may control location permissions through your device settings at any time.
We may also collect device-related details such as model, device ID, app version, or operating system for security and troubleshooting purposes.

4.5 Information Collected from Vendors About Customers

Vendors may upload or share limited user details (such as name, contact number, or booking information) to facilitate reservations or catering orders.
Fudikoo processes this data solely to provide the requested services on behalf of vendors, and such data is not used for unrelated purposes.

5. Purpose and Lawful Basis for Processing

5.1 General Principle.
Fudikoo shall collect and process Personal Data only when such processing is lawful, necessary, and proportionate to the purpose for which it is undertaken. The purposes for which data is processed are set out below, together with the lawful bases that justify such processing under the Applicable Laws.

5.1.1 Purposes of Processing

(a) Service Delivery and Operations.
To register, verify, and manage user and vendor accounts; to facilitate table bookings, takeaway orders, and catering arrangements; to display vendor details, menus, and offers; to provide confirmations, notifications, and updates relating to bookings or orders; and to operate, maintain, and enhance the functionality, safety, and performance of the Platform.

(b) Communication and Support.
To respond to inquiries, resolve complaints, and provide customer support; to send important service-related announcements, updates, and administrative messages; and to deliver optional marketing communications where prior consent has been obtained.

(c) Platform Improvement and Analytics.
To analyse usage behaviour, preferences, and engagement patterns; to conduct product development, performance analysis, troubleshooting, and optimisation; and to prevent, detect, and address fraud, abuse, or technical issues.

(d) Legal and Regulatory Compliance.
To comply with statutory obligations, court orders, or regulatory requirements; to enforce the Terms and Conditions; and to protect Fudikoo’s legal rights, property, and interests.

(e) Marketing and Customisation (Optional).
To personalise content, recommendations, and promotional offers; to send reminders, loyalty rewards, or discounts from participating vendors; and to conduct surveys or promotional campaigns. You may opt out of marketing communications at any time by following the unsubscribe instructions or contacting Fudikoo directly.

5.2 Lawful Bases for Processing

5.2.1 Fudikoo shall rely only on lawful bases recognised under the Applicable Laws for the processing of Personal Data.

5.2.2 Such lawful bases include the following:

(a) Consent. Processing carried out with your freely given, specific, informed, and unambiguous consent—for example, subscribing to promotional notifications or enabling location services. Consent may be withdrawn at any time.

(b) Contractual Necessity. Processing required to perform or fulfil the services requested by you or to take steps prior to entering into a contractual relationship, such as confirming a reservation or maintaining your account.

(c) Legitimate Interests. Processing necessary for Fudikoo’s legitimate business purposes, provided such interests do not override your rights and freedoms. Examples include improving the Platform, ensuring security, and analysing performance.

(d) Legal Obligation. Processing necessary for compliance with a legal duty imposed by any competent authority or Applicable Law, including maintaining transaction records or responding to lawful requests.

(e) Public Interest and Security. Processing necessary to safeguard the integrity and security of the Platform and its users, including detecting or preventing misuse or unauthorised access.

5.2.3 These lawful bases are consistent with:
(a) Sections 4–7 of the Digital Personal Data Protection Act, 2023 (India);
(b) Articles 4–9 of the Federal Decree-Law No. 45 of 2021 (UAE PDPL); and
(c) Articles 6–10 of the Personal Data Protection Law, Royal Decree M/19 of 2023 (KSA).

5.3 Data Minimisation and Fair Use

5.3.1 Fudikoo shall collect only such Personal Data as is adequate, relevant, and limited to what is necessary for the purposes stated above.

5.3.2 Personal Data shall not be retained or processed for any secondary or incompatible purpose unless required or permitted by Applicable Law or with your prior consent.

5.3.3 All processing activities shall be fair, transparent, and conducted in a manner that upholds the rights and expectations of Users and Vendors under the Applicable Laws

6. Data from Third-Party Platforms

6.1 Integration and Connectivity.
Fudikoo may provide optional integrations with third-party digital platforms or tools, including but not limited to mapping services, social-media logins, analytics providers, and business-management systems. These integrations are offered to enhance functionality and user convenience within the Platform.

6.2 Categories of Data Received.
When a User or Vendor connects a third-party service to the Platform, Fudikoo may receive limited information permitted by that service’s own settings and privacy policies. Such information may include:
(a) authentication tokens or access credentials;
(b) account identifiers, profile information, or business contact details;
(c) usage statistics, analytic events, or device metadata; and
(d) other data expressly authorised by the User or Vendor through the third-party interface.

6.3 Independent Control of Third Parties.
Each third-party platform is independently responsible for its own privacy and data-handling practices. Fudikoo has no control over and assumes no responsibility for the content, policies, or activities of any third-party provider. Users and Vendors are encouraged to review the privacy policies of such third-party services before enabling integration.

6.4 Use and Protection of Data.
Any Personal Data received from a third-party service shall be processed by Fudikoo strictly in accordance with this Privacy Policy and only for the purpose of operating, maintaining, or enhancing the integrated functionality. Fudikoo shall not use such data for unrelated marketing or profiling activities without obtaining prior consent.

6.5 Revocation of Access.
Users and Vendors may revoke third-party access at any time through the settings of the respective external service or by contacting Fudikoo. Upon revocation, Fudikoo shall cease further data synchronisation and shall delete any stored credentials in accordance with its data-retention procedures.

6.6 Examples of Typical Integrations.
Common third-party connections may include, without limitation, location or map services (for restaurant listings), communication APIs, analytics or crash-reporting SDKs, and social-media logins used for simplified account creation. These examples are illustrative and may evolve with future product enhancements.

7. Sharing and Disclosure of Information

7.1 General Rule.
Fudikoo shall not sell, lease, or otherwise disclose Personal Data to any unauthorised third party. Personal Data may only be shared in the circumstances expressly permitted under this Section and always in accordance with Applicable Laws.

7.2 Sharing with Service Providers

7.2.1 Fudikoo may engage carefully selected third-party service providers to perform operational, technical, or administrative functions necessary for the operation of the Platform.

7.2.2 Such service providers may include, but are not limited to:
(a) cloud-hosting and data-storage providers;
(b) IT infrastructure, security, and analytics providers;
(c) customer-support and communication platforms;
(d) payment processors, where applicable; and
(e) verification, audit, or legal-compliance partners.

7.2.3 All service providers engaged by Fudikoo shall be bound by written agreements requiring them to maintain confidentiality, process data solely under Fudikoo’s instructions, and apply appropriate technical and organisational safeguards.

7.3 Sharing with Vendors and Business Partners

7.3.1 Where a User books a service through the Platform, relevant information such as name, contact number, reservation details, and special instructions may be shared with the Vendor to facilitate the requested service.

7.3.2 Vendors receiving such data act as independent data controllers or fiduciaries in respect of their own operations. Fudikoo shall not be responsible for any processing or misuse of data carried out independently by Vendors outside the Platform.

7.3.3 Fudikoo may also share limited information with authorised business partners or affiliates for onboarding support, customer-service assistance, and account management purposes, subject to contractual confidentiality obligations.

7.4 Legal and Regulatory Disclosures

7.4.1 Fudikoo may disclose Personal Data where such disclosure is required by law or regulation, or pursuant to any lawful request, subpoena, court order, or directive issued by a competent authority.

7.4.2 Disclosures made under this clause shall be limited to the minimum information necessary to comply with the relevant legal requirement.

7.4.3 Fudikoo shall, where permissible, notify the affected Data Subject before or as soon as reasonably practicable after such disclosure.

7.5 Corporate Transactions

7.5.1 In the event of any merger, acquisition, restructuring, or sale of assets involving Fudikoo, Personal Data may form part of the transferred business assets.

7.5.2 In such cases, the receiving entity shall be bound to honour the terms of this Privacy Policy or provide equivalent safeguards ensuring the continuity of data protection.

7.6 Protection and Limitation of Liability

7.6.1 Fudikoo shall take reasonable steps to ensure that any third party receiving Personal Data implements appropriate security and confidentiality measures.

7.6.2 However, Fudikoo shall not be held liable for any act, omission, or negligence of independent third parties or Vendors beyond its control once data has been lawfully disclosed to them in accordance with this Section.

8. Cross-Border Data Transfers

8.1 General Principle.
Fudikoo may store, process, or transfer Personal Data to servers or service providers located in jurisdictions other than the one in which the Data Subject resides. Such transfers shall be undertaken only where necessary for the operation of the Platform, and always in accordance with Applicable Laws and appropriate safeguards.

8.2 Permitted Transfer Scenarios

8.2.1 Cross-border transfers of Personal Data may occur in the following circumstances:
(a) where the transfer is necessary for the performance of a contract between the Data Subject and Fudikoo;
(b) where the Data Subject has given explicit consent after being informed of the possible risks;
(c) where the transfer is required by law, regulation, or court order;
(d) where the transfer is necessary for establishing, exercising, or defending legal claims; or
(e) where the receiving jurisdiction ensures an adequate level of data protection consistent with Applicable Laws.

8.3 Safeguards for International Transfers

8.3.1 Fudikoo shall implement suitable contractual, technical, and organisational safeguards to ensure that Personal Data transferred across borders receives a level of protection substantially equivalent to that afforded under the Applicable Laws.

8.3.2 Such safeguards may include, without limitation:
(a) execution of Data-Processing Agreements (DPAs) or Standard Contractual Clauses (SCCs) with third-party processors;
(b) use of secure, encrypted communication channels and restricted-access storage systems; and
(c) periodic compliance audits of data-hosting or processing partners.

8.4 Regional Hosting and Processing

8.4.1 Personal Data collected through the Platform may be stored or backed up in data centres located in India, the United Arab Emirates, the Kingdom of Saudi Arabia, or other jurisdictions offering equivalent protection standards.

8.4.2 Transfers between these jurisdictions shall be governed by contractual safeguards and technical security measures ensuring compliance with all relevant data-transfer regulations.

8.5 User Acknowledgement

8.5.1 By using the Platform, Users and Vendors acknowledge and consent to the processing and transfer of their Personal Data in accordance with this Section.

8.5.2 Fudikoo shall, upon request, provide further information on the mechanisms or safeguards applied to specific cross-border transfers.

9. Data Retention and Deletion

9.1 Retention Principle.
Fudikoo shall retain Personal Data only for as long as it is necessary to fulfil the purposes for which such data was collected or to comply with a legal, regulatory, or contractual obligation. Upon expiry of the applicable retention period, data shall be securely deleted, anonymised, or archived in accordance with this Policy and the Applicable Laws.

9.2 Retention Periods

9.2.1 Retention periods shall vary depending on the category of data and the nature of the processing activity. Without prejudice to longer periods mandated by law, Fudikoo generally applies the following guidelines:

Data Category	Typical Retention Period	Purpose
User Account Details	Active duration of account + up to 180 days after closure	Account management, reactivation window
Booking & Order Information	Up to 90 days from completion	Service delivery, audit, and support
Vendor Business Information	Active vendor term + up to 1 year after termination	Compliance and reconciliation
Communication Logs (chat, email, support)	Up to 180 days	Customer service history and verification
Location & Device Data	Session-based or 30 days max	Technical performance and fraud detection
Cookies and Analytics Data	As per cookie type; typically 90 days	Usage analytics and optimisation
Legal or Accounting Records	As required by statutory retention rules	Legal and tax compliance

9.2.2 Where statutory retention obligations differ between jurisdictions, the longer legally required period shall apply.

9.3 Deletion Requests

9.3.1 Users and Vendors may request deletion of their accounts or specific Personal Data at any time by contacting Fudikoo through the official communication channels provided in this Policy.

9.3.2 Upon receipt of a verified request, Fudikoo shall delete or anonymise the requested data within a reasonable timeframe, typically between 7 and 30 days, unless retention is required by law or for legitimate business purposes such as dispute resolution or fraud prevention.

9.3.3 Deletion confirmation shall be communicated to the requester once the process is complete.

9.4 Suspension and Backups

9.4.1 Deleted data may continue to exist temporarily in encrypted system backups or archives maintained for disaster-recovery purposes.
Such data shall be permanently erased during the next scheduled purge cycle and shall not be accessible for operational use.

9.4.2 During account suspension or deactivation, Fudikoo may retain minimal identifying information to prevent re-registration abuse or comply with legal record-keeping duties.

9.5 Compliance Alignment

9.5.1 This retention framework is consistent with:
(a) Section 8 of the Digital Personal Data Protection Act, 2023 (India);
(b) Articles 9 and 21 of the Federal Decree-Law No. 45 of 2021 (UAE PDPL); and
(c) Articles 17 and 25 of the Personal Data Protection Law, Royal Decree M/19 of 2023 (KSA).

9.5.2 Fudikoo shall periodically review its data-retention schedules to ensure ongoing compliance with Applicable Laws and industry best practices.

 

10. User Rights and Access Requests

10.1 General Principle.
Fudikoo respects the rights of all individuals with respect to their Personal Data and shall facilitate the exercise of such rights in accordance with Applicable Laws. All Users and Vendors shall have the ability to access, correct, delete, or otherwise control their Personal Data as detailed in this Section.

10.2 Rights Available to Data Subjects

10.2.1 Subject to verification of identity and any legal limitations, Users and Vendors are entitled to the following rights:

(a) Right of Access.
To obtain confirmation as to whether Fudikoo processes Personal Data relating to them and to receive a copy of such data along with information regarding its source, purpose, and category.

(b) Right to Rectification.
To request correction or updating of inaccurate, incomplete, or outdated Personal Data held by Fudikoo.

(c) Right to Erasure (“Right to be Forgotten”).
To request deletion or anonymisation of Personal Data when it is no longer required for the purposes for which it was collected, or when consent has been withdrawn.

(d) Right to Restrict Processing.
To request that Fudikoo temporarily suspend the processing of their Personal Data under specific circumstances, such as when accuracy is contested or processing is unlawful.

(e) Right to Data Portability.
To receive their Personal Data in a structured, commonly used, and machine-readable format, and to transmit such data to another service provider, where technically feasible.

(f) Right to Object.
To object, on legitimate grounds, to processing carried out on the basis of Fudikoo’s legitimate interests, or to the use of data for direct marketing or profiling purposes.

(g) Right to Withdraw Consent.
To withdraw previously granted consent at any time, without affecting the lawfulness of processing already carried out based on such consent.

(h) Right to Lodge Complaints.
To raise concerns with Fudikoo’s designated Data Protection Officer or, where applicable, the relevant data-protection authority within their jurisdiction.

10.3 Procedure for Submitting Requests

10.3.1 Any request to exercise the rights listed above must be made in writing to Fudikoo through the contact details provided in Section 16 (Contact and Data Protection Officers) of this Policy.

10.3.2 The request shall include sufficient information to verify the requester’s identity and to locate the data concerned. In cases where Fudikoo cannot reasonably verify the requester’s identity, additional information may be requested before processing the request.

10.3.3 Upon receipt of a valid request, Fudikoo shall respond within a reasonable period, typically within 30 days, or such longer period as may be permitted by Applicable Law, while keeping the requester informed of progress.

10.3.4 Where a request is manifestly unfounded, excessive, or repetitive, Fudikoo reserves the right to charge a reasonable administrative fee or to refuse to act on such request, with justification provided to the requester.

10.4 Limitations and Exceptions

10.4.1 The rights set out in this Section are not absolute and may be restricted under the following circumstances:
(a) where compliance would prejudice national security, defence, or public order;
(b) where the data is required for prevention or detection of crime or fraud;
(c) where retention is necessary for compliance with a legal obligation or the establishment of legal claims; or
(d) where Applicable Law provides specific exemptions.

10.4.2 Fudikoo shall document and maintain a record of any such refusals or restrictions, together with the rationale for its decision, as required under the Applicable Laws.

10.5 Compliance Alignment

10.5.1 The rights enumerated in this Section correspond to and are derived from the following legal instruments:
(a) Sections 11–14 of the Digital Personal Data Protection Act, 2023 (India);
(b) Articles 13–17 of the Federal Decree-Law No. 45 of 2021 (UAE PDPL); and
(c) Articles 17–22 of the Personal Data Protection Law, Royal Decree M/19 of 2023 (KSA).

10.5.2 Fudikoo commits to implementing internal mechanisms to ensure timely handling of access requests, deletion demands, and consent withdrawals, in full compliance with the above provisions.

11. Cookies and Tracking Technologies

11.1 Use of Cookies.
Fudikoo may use cookies, web beacons, pixels, software-development kits (SDKs), and similar technologies (collectively, “Cookies”) to enhance user experience, analyse traffic patterns, and ensure the secure and efficient operation of the Platform.

11.2 Types of Cookies Employed.
The Platform may employ the following categories of Cookies:
(a) Essential Cookies: Necessary for the operation of core features such as authentication, session management, and security controls.
(b) Performance Cookies: Used to collect aggregated, anonymous statistics on how the Platform is used, including page visits, click rates, and error logs.
(c) Functionality Cookies: Enable the Platform to remember user preferences, language selections, and saved settings to improve convenience.
(d) Analytics and Advertising Cookies: Used, with consent, to measure engagement, deliver relevant offers, and assess the effectiveness of marketing campaigns.

11.3 Third-Party Cookies.
Certain analytics or advertising tools (for example, Google Analytics, Meta Pixel, or crash-reporting SDKs) may place their own Cookies through the Platform. Such third parties are responsible for their own data-handling practices and provide separate privacy notices. Fudikoo does not control or assume responsibility for these external technologies.

11.4 User Consent and Control.
11.4.1 Upon first access, Users shall be presented with a clear Cookie-consent banner allowing them to accept or manage non-essential Cookies.
11.4.2 Users may withdraw consent or adjust Cookie preferences at any time through browser or device settings.
11.4.3 Disabling certain Cookies may affect functionality or service quality but will not restrict access to essential Platform features.

11.5 Retention of Cookie Data.
Cookie-generated data shall be retained only for as long as necessary to fulfil its stated purpose and in no event longer than 90 days unless Applicable Law requires otherwise.

11.6 Updates to Cookie Practices.
Fudikoo may periodically update its Cookie categories or partners. Any material change will be reflected in this Policy and, where required, Users will be notified or prompted to reconfirm consent.

12. Security Measures

12.1 Commitment to Security.
Fudikoo adopts appropriate technical, administrative, and organisational measures to protect Personal Data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. These measures are continuously reviewed and enhanced in line with evolving security standards and Applicable Laws.

12.2 Technical Safeguards

12.2.1 Fudikoo employs multiple layers of security designed to protect both stored and transmitted data, including:
(a) encryption of data in transit and at rest using industry-standard protocols (such as HTTPS/SSL and AES);
(b) use of firewalls, intrusion detection, and prevention systems;
(c) access-control policies incorporating multi-factor authentication and least-privilege principles;
(d) periodic vulnerability scanning and penetration testing; and
(e) secure coding practices to minimise exploitable risks within the Platform.

12.3 Organisational and Administrative Measures

12.3.1 Fudikoo ensures that all employees, contractors, and service providers with access to Personal Data are bound by confidentiality obligations and receive regular training on data-protection responsibilities.

12.3.2 Internal data-handling policies and audit logs are maintained to monitor access, detect anomalies, and ensure accountability.

12.3.3 Vendor and Processor engagements include mandatory security and privacy clauses within all Data-Processing Agreements (DPAs).

12.4 Incident Response and Breach Notification

12.4.1 In the event of a confirmed or suspected Personal Data breach, Fudikoo shall activate its internal Incident Response Plan, which includes investigation, containment, and remediation procedures.

12.4.2 If the breach is likely to result in harm to the Data Subject, Fudikoo shall, without undue delay and within the time period prescribed under Applicable Laws, notify:
(a) the affected Data Subjects, describing the nature of the breach and recommended precautions; and
(b) the relevant data-protection authority, where such notification is legally required.

12.4.3 All breaches and remedial actions shall be documented and reviewed to prevent recurrence.

12.5 Data Minimisation and Access Limitation

12.5.1 Fudikoo shall ensure that Personal Data is accessible only to those personnel or service providers who require it for legitimate operational purposes.

12.5.2 Access rights shall be regularly reviewed and revoked immediately upon role change, termination, or completion of contractual engagement.

12.6 No Absolute Guarantee

12.6.1 While Fudikoo takes all reasonable precautions to protect Personal Data, no method of storage or transmission over the Internet is completely secure.
12.6.2 Accordingly, Fudikoo does not guarantee absolute security and shall not be liable for breaches arising from factors beyond its reasonable control, such as cyberattacks, transmission errors, or unauthorised acts by third parties.

13. Children’s Privacy

13.1 General Policy.
Fudikoo’s Platform and related services are not intended for use by individuals under the age of eighteen (18) years. Fudikoo does not knowingly collect or process Personal Data from minors without appropriate parental or guardian consent.

13.2 Parental Consent Requirement.
13.2.1 Where it becomes necessary to process Personal Data of a minor (for example, during a family or group booking), such processing shall be undertaken only with the verifiable consent of the child’s parent or legal guardian.
13.2.2 Fudikoo may request additional information or documentation to confirm the identity and authority of the consenting adult before processing any such data.

13.3 Prohibition on Direct Engagement.
13.3.1 Fudikoo shall not knowingly engage in direct communication, marketing, or profiling activities targeting individuals under the age of eighteen (18).
13.3.2 If any such data is inadvertently collected, Fudikoo shall promptly delete it upon discovery or upon receiving notice from a parent or guardian.

13.4 Reporting and Removal.
Parents or guardians who believe that their child has provided Personal Data to Fudikoo without consent may request deletion by contacting the company through the details provided in Section 16 (Contact and Data Protection Officers).
Fudikoo shall act on such verified requests without undue delay.

13.5 Compliance Reference.
This Section is implemented in accordance with:
(a) Section 10 of the Digital Personal Data Protection Act, 2023 (India);
(b) Article 5(7) of the Federal Decree-Law No. 45 of 2021 (UAE PDPL); and
(c) Article 26 of the Personal Data Protection Law, Royal Decree M/19 of 2023 (KSA).

14. Changes to this Policy

14.1 Right to Amend.
Fudikoo reserves the right to review, modify, or update this Privacy Policy from time to time to reflect changes in legal requirements, technological developments, or its business operations.

14.2 Version Control and Effective Date.
Each version of this Privacy Policy shall display an effective date at the top of the document. The most recent version shall supersede all previous versions and shall govern the processing of Personal Data from its effective date.

14.3 Notification of Material Changes.
14.3.1 Where any change materially affects the manner in which Personal Data is collected, used, or shared, Fudikoo shall notify Users and Vendors in advance through appropriate means, such as email, in-app notification, or a notice displayed on the Platform.
14.3.2 Continued use of the Platform after the effective date of such updates shall constitute deemed acceptance of the revised terms.

14.4 User Responsibility to Review.
Users and Vendors are encouraged to review this Privacy Policy periodically to stay informed about how Fudikoo protects Personal Data and any updates to its privacy practices.

14.5 Archival of Previous Versions.
Fudikoo shall maintain an internal record of all prior versions of this Policy, including the dates of publication and a summary of key amendments, in accordance with audit and compliance requirements.

15. Governing Law and Jurisdiction

15.1 Applicable Law.
This Privacy Policy, and any dispute or claim arising out of or in connection with it or its subject matter, shall be governed by and construed in accordance with the laws of India, without prejudice to the mandatory data-protection requirements of other jurisdictions in which Fudikoo operates or provides services.

15.2 Jurisdiction.
15.2.1 Any dispute arising from or relating to this Privacy Policy shall fall within the exclusive jurisdiction of the competent courts of India, unless Applicable Law in a particular jurisdiction expressly requires local adjudication.
15.2.2 Notwithstanding the foregoing, Fudikoo reserves the right to initiate proceedings or take enforcement action in any jurisdiction where a breach of this Policy or of the Applicable Laws has occurred or has an effect.

15.3 Local Law Compliance.
15.3.1 Fudikoo shall ensure that its data-processing activities within the United Arab Emirates and the Kingdom of Saudi Arabia comply with the mandatory provisions of those jurisdictions’ data-protection and consumer laws.
15.3.2 Nothing in this Policy shall be interpreted as limiting the rights of Data Subjects or authorities under the UAE PDPL or KSA PDPL to enforce local data-protection standards.

15.4 Cross-Border Harmonisation.
Fudikoo’s approach to data protection is designed to be harmonised across jurisdictions. In the event of any inconsistency between the provisions of this Policy and the mandatory requirements of local data-protection legislation, the latter shall prevail to the extent of such inconsistency.

16. Contact and Data Protection Officers

16.1 Primary Contact.
For any questions, concerns, or complaints regarding this Privacy Policy or Fudikoo’s data-protection practices, Users and Vendors may contact:

Fudikoo – Privacy Office
📧 Email: privacy@fudikoo.com
🌐 Website: www.fudikoo.com, www.fudikoo.in
Attention: Data Protection Officer

16.2 Jurisdiction-Specific Contact Points.

(a) India.
For matters relating to the Digital Personal Data Protection Act, 2023, Users and Vendors may contact the above-mentioned Privacy Office, which also acts as Fudikoo’s Grievance Officer in accordance with Section 11 of the Act.

(b) United Arab Emirates.
For matters arising within the UAE, Fudikoo’s Privacy Office shall coordinate with its local Data-Protection Representative to handle requests or investigations under the Federal Decree-Law No. 45 of 2021 (PDPL).

(c) Kingdom of Saudi Arabia.
For matters governed by the Personal Data Protection Law (Royal Decree M/19 of 2023), Users may contact the Privacy Office, which liaises with the local Compliance Contact registered with the Saudi Data and Artificial Intelligence Authority (SDAIA).

16.3 Response Time.
Fudikoo endeavours to acknowledge all privacy-related communications within seven (7) business days and to resolve or respond to verified requests within thirty (30) days, unless Applicable Law allows or requires a longer period.

16.4 Escalation and Supervisory Authorities.
If a Data Subject believes that Fudikoo has not handled a privacy matter satisfactorily, they may lodge a complaint with the competent data-protection authority in their jurisdiction, such as the Data Protection Board of India, the UAE Data Office, or the Saudi Data and Artificial Intelligence Authority (SDAIA).