Privacy Policy
This is our privacy notice under the Digital Personal Data Protection Act, 2023. It says what personal data we process, why, who sees it, how long we keep it, and how you can control it.
Last updated: 10 October 2026
1. Who we are
Meat Story Pvt Ltd, trading as The Meat Story ("we", "us"), is the Data Fiduciary for the personal data described in this notice, which means we decide why and how it is processed.
- Address: No 11 Abrahams cottage, Chelekare, Hennur, Bengaluru 560043, Karnataka, India
- Email: info@themeatstory.com
- Phone: +91 99162 62620
Questions about your data and requests to use your rights go to our Grievance Officer. Details are on the Grievance Redressal and Your Data Rights page.
2. The personal data we process, and why
We process only the data below, for the purposes stated against it. We do not process it for any other purpose without asking you first.
| When | Personal data | Why | On what basis |
|---|---|---|---|
| Browsing this website | IP address, browser and device type, pages requested, time (server logs) | To run the site, keep it secure and detect misuse | Security safeguards we must maintain under the DPDP Rules |
| Using the shopping cart | The cart contents you choose and any instructions you type, linked to a random identifier in an essential cookie | To save your cart and price it | You provide it for this purpose |
| Creating an account | Name, email address, verified mobile number, food preference, device and security records | To create and secure your account and verify your mobile number by OTP | Your consent, given at registration |
| Placing an order | Name, phone number, delivery address, order details, payment status. Card and bank details go to the payment provider, not to us | To process payment, deliver, issue invoices, handle returns and support | You provide it to place the order, and legal obligations such as tax and accounting |
| Building a pet meal plan | Your pet's name, breed, age, weight, and diet or health information you give | To prepare a meal plan that suits your pet | Your consent. Using health information for recommendations needs a separate consent |
| Contacting us | Your name, contact details and message | To reply and resolve your query | You provide it for this purpose |
| Service messages | Mobile number, email address | Order confirmations, delivery updates, OTPs and security alerts, by SMS, email or WhatsApp | Necessary to provide the service you asked for |
| Offers and news (optional) | Email address, mobile number | Marketing by email, WhatsApp or SMS | Your separate consent for each channel, which you can withdraw at any time |
We do not currently run analytics, advertising or tracking tools on this website. If we add any that process personal data, we will ask for your separate consent first and update this notice.
We do not sell or rent your personal data.
3. Cookies
This website uses one cookie, and it is essential. Without it your cart could not be saved between pages.
| Cookie | Purpose | Lifetime | Details |
|---|---|---|---|
| ms_cart | Links your browser to your saved cart using a random code, not your name or contact details | 14 days of inactivity for guests; removed when you sign in and your cart is merged into your account | First-party, HTTP-only (scripts cannot read it), sent only to our site |
You can delete this cookie in your browser at any time; your saved cart will then no longer be linked to your browser.
When you pay, Razorpay's secure payment window opens. It is run by Razorpay, a separate company, and Razorpay may set its own cookies and collect device information in that window to process and secure the payment. That is covered by Razorpay's own privacy policy, and it happens only when you choose to pay.
4. Who we share it with
We share personal data only with service providers who process it on our behalf, and only as needed for the purpose above.
| Provider | What it does | Where |
|---|---|---|
| MongoDB Atlas | Stores our application data | Mumbai, India |
| Razorpay and PayU | Process payments. They receive your payment details directly; we do not store card or bank numbers | India |
| Delivery partners | Receive your name, phone number and address to deliver your order | India |
| Meta (WhatsApp Business) | Sends one-time sign-in codes and service messages, and offers where you have consented | Operated by Meta |
| Twilio | Sends the one-time sign-in code by SMS when WhatsApp can't be reached. It receives your mobile number | Operated by Twilio |
| Application hosting and a cache service | Run the website and API and hold your cart under a random identifier | Germany and France (see section 5) |
We may also disclose personal data where required by law, a court, or a government authority.
5. Transfers outside India
Our application servers are in Germany and our cart cache is in France, and messaging providers such as Meta and Twilio run their own systems outside India, so some processing of your data happens outside India. Our database is in Mumbai. We transfer data only to countries the Government of India has not restricted under the DPDP Act, and require our providers to protect it.
6. How long we keep it
We keep personal data only as long as the purpose needs it or the law requires.
| Data | How long |
|---|---|
| Server and request logs | 12 months. The law requires us to keep access logs for a year so unauthorised access can be detected and investigated; we then erase them |
| Guest cart | 14 days of inactivity (30 days for a signed-in account) |
| Price quotes | 30 days |
| Service messages and notifications | 180 days |
| Account details | While your account is active. After you close it we remove or anonymise your name, email, phone number and photo |
| Orders, invoices and payment records | For the period tax and accounting laws require (for a company this can be up to eight years), even if you close your account |
| Records of your consent and of rights requests | Kept as evidence that we followed your choices |
7. Your rights
Under the Digital Personal Data Protection Act, 2023 you have the right to:
- Access a summary of the personal data we hold about you, who we have shared it with, and what we do with it.
- Correct, complete or update your personal data.
- Ask us to erase your personal data. We will do so unless the law requires us to keep it, in which case we will tell you what we keep and why.
- Withdraw any consent you gave, at any time and as easily as you gave it.
- Get your grievance redressed.
- Nominate another person to exercise these rights for you if you die or become unable to act.
To use any of these rights, follow the steps on the Grievance Redressal and Your Data Rights page. We may ask you to verify your identity first so that your data is never given to someone else. There is no charge. We aim to respond within 30 days.
8. Withdrawing consent
You can withdraw consent for optional purposes, such as marketing on each channel, from your account or by writing to us. You can also withdraw consent to account processing, which closes your account. Withdrawal does not affect processing done before it. If you withdraw consent for something we need to deliver an order you have already paid for, we may not be able to complete that order, and we will tell you. Records the law requires us to keep, such as invoices, will be kept.
9. Children
Our services are for adults aged 18 and over. We do not knowingly process the personal data of children, and we do not track or monitor the behaviour of children or show them targeted advertising. If you believe a child has given us personal data, contact us and we will delete it.
10. How we protect your data
We use reasonable security safeguards, including encryption of data in transit, access limited to staff who need it, protected credentials, and records of who accessed what. We never store payment card or bank details on our servers.
If a personal data breach affects you, we will tell you and the Data Protection Board of India as the law requires, and explain what happened and what you can do.
11. Your responsibilities
Please give us accurate information, do not impersonate another person, and do not make false or frivolous complaints. Please do not put personal details such as phone numbers or addresses in the cart instructions box.
12. Complaints
Please contact our Grievance Officer first. If you are not satisfied with our response, or we do not respond in time, you may complain to the Data Protection Board of India, which receives complaints online.
13. Language
This notice is in English. You can ask us for it in any language listed in the Eighth Schedule to the Constitution of India by writing to us.
14. Changes to this notice
We will post changes on this page with a new revision date. If a change affects how we use your data, we will tell you and, where the law requires, ask for your consent again. This version was last updated on 10 October 2026.
To use your rights or raise a concern, see Grievance Redressal and Your Data Rights. You can reach the Grievance Officer at naveenr@themeatstory.com or +91 99162 62620.