Privacy Policy

Curry Express ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your personal data when you visit mycurryexpress.com.com or use our online ordering services.

By using our website or placing an order, you agree to the collection and use of information in accordance with this policy.

📋 Information We Collect

We collect only the information necessary to provide our services. This includes:

• Full name — to identify your order and account
• Phone number — for OTP verification, order notifications, delivery contact, and occasional promotional messages (with your consent)
• Email address — for order confirmations and account recovery (optional)
• Delivery address — only when placing a delivery order
• Order history — items ordered, amounts, timestamps
• Device and browser information — IP address, browser type, and session data collected automatically for security and fraud prevention

We do not collect payment card numbers directly. All card transactions are handled by our payment processor and are subject to their privacy practices.

⚙️ How We Use Your Information

Your information is used exclusively to operate and improve our services:

• Process and fulfill your orders
• Send order confirmations, status updates, and pickup/delivery notifications
• Verify your identity via one-time passcode (OTP)
• Send occasional promotional offers, discounts, or updates (only with your explicit consent — you may opt out at any time)
• Respond to customer support inquiries
• Detect and prevent fraud or unauthorized access
• Improve our website performance and user experience
• Comply with applicable legal obligations

We do not use your information for advertising, profiling, or any purpose unrelated to your order or account.

🔒 We Do Not Sell Your Data

Your personal information stays with Curry Express and is used only to serve you as a customer.

💬 SMS Communications

By providing your phone number, you consent to receive text messages from Curry Express. We use SMS to keep you informed and to enhance your experience.

🔗 Third-Party Services

We work with a small number of trusted service providers who help us operate our platform. These providers have access to your information only as necessary to perform their services and are obligated not to disclose or use it for any other purpose.

• Payment processing — to securely handle card transactions
• SMS delivery — to send OTP, order notifications, and promotional messages
• Web hosting — to serve and maintain our website

We do not share your data with these providers beyond what is strictly necessary to complete the service requested.

🛡️ Data Security

We take the security of your personal information seriously and implement reasonable technical and organizational measures to protect it, including:

• HTTPS encryption on all web pages
• Hashed and salted credential storage — we never store passwords in plain text
• OTP-based authentication with expiry and rate limiting
• Access controls limiting who can view customer data internally

While we work hard to protect your information, no method of transmission over the internet is 100% secure. In the unlikely event of a data breach that affects your personal information, we will notify you as required by applicable Indiana law.

🗂️ Data Retention

We retain your personal information only as long as necessary to fulfill the purposes described in this policy, including:

• Active account data is retained while your account exists
• Order history is retained for a minimum of 2 years for operational and legal purposes
• OTP codes are automatically deleted after use or expiry (10 minutes)
• Session tokens expire after a set period of inactivity

You may request deletion of your account and associated data at any time by contacting us at info@mycurryexpress.com.com.

⚖️ Your Rights

As a customer, you have the right to:

• Access — request a copy of the personal information we hold about you
• Correction — request that inaccurate or incomplete information be updated
• Deletion — request that we delete your personal data, subject to legal retention requirements
• Opt-out of SMS — reply STOP to any SMS message at any time
• Data portability — request your order history in a readable format

To exercise any of these rights, contact us at info@mycurryexpress.com.com or call (260) 372-7811. We will respond within a reasonable timeframe.

🍪 Cookies & Tracking

Our website uses cookies and similar technologies to maintain your session (e.g., keeping items in your cart) and to understand how visitors use our site.

• Essential cookies — required for the website to function (cart, session, authentication)
• Analytics — we may use basic, privacy-respecting analytics to understand page performance

We do not use advertising cookies or cross-site tracking. You can disable cookies in your browser settings, though some website features may not function correctly as a result.

👶 Children's Privacy

Our website and services are not directed to children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us immediately and we will delete it.

🔄 Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. We encourage you to review this policy periodically.

Your continued use of our website after any changes constitutes your acceptance of the updated Privacy Policy.

📬 Contact Us

If you have any questions, concerns, or requests related to this Privacy Policy or your personal data, please contact us:

We aim to respond to all privacy-related inquiries within 5 business days.