Privacy Policy

This website is operated by QUM QUM (“QumQum”, “we”, “us”), an Arabian restaurant located at 11/3333, Thrikkakara Circle, Infopark Express Way, Nilampathinjamugal Road, Kakkanad, Kochi, Kerala 682039, India. GSTIN: 32AABFQ4301K1ZN. FSSAI licence no. 11326007000158.

Registered legal entity name: [Legal entity name to be confirmed]. We are responsible (as the “data fiduciary” or “controller”) for the personal information described in this policy.

You can browse this website without giving us any personal information. We only collect personal information when you choose to use one of the features below.

WhatsApp table waitlist

When you message our waitlist number (+91 95623 19499) on WhatsApp — for example by scanning the QR code at the restaurant — we collect your WhatsApp phone number, the name you give us, your party size and seating preference, your place in the queue and its status (for example waiting, notified, seated or cancelled), your replies when your table is ready, the number of visits recorded against your number, and a log of the messages exchanged with our waitlist service. Our host staff may also add you to the waitlist or record a reservation with your name, phone number, party size, time and a short note.

Reservation requests

The reservation form on our website does not send your details to our servers. When you submit it, it opens WhatsApp with a pre-filled message containing the name, phone number, date, time, number of guests and any notes you entered. Nothing is shared with us until you choose to send that message from WhatsApp. The optional email field on the form is not included in the message and is not stored or sent anywhere.

Contests (for example our World Cup Predictor)

When you enter a contest we collect your name, your mobile number, and your picks. To prevent abuse we also store a one-way hashed (scrambled) form of your IP address, your browser’s user-agent string, and the time you entered. We use hashed IP addresses and phone numbers to apply temporary rate limits.

Calls, WhatsApp chats and other contact

If you call us, message us on WhatsApp at +91 95620 99499, or contact us on Instagram, we receive whatever information you share in that conversation, such as your name, number and message.

Technical information

Like most websites, our hosting provider automatically processes basic technical information when you visit, such as your IP address, browser type, and the pages requested, to deliver the site and keep it secure.

We do not take online payments on this website. Online orders are placed on Zomato or Swiggy, which handle your details under their own privacy policies.

• To manage the table waitlist and reservations, including sending you WhatsApp updates such as your place in the queue and when your table is ready.
• To respond to your reservation requests, questions and feedback.
• To run contests: recording entries, checking eligibility (one entry per number), running prize draws and contacting winners.
• To contact you about the contest and QumQum offers, where you agreed to this when entering a contest. You can opt out at any time (see “Your rights”).
• To estimate waiting times and understand how busy the restaurant is.
• To keep the website and our services secure and prevent spam or abuse.
• To comply with our legal obligations.

We use your information on the basis of your consent (which you give by messaging us, submitting a request or entering a contest), to provide the service you asked for, and for our legitimate interest in running and protecting our services. We do not sell your personal information.

We do not use advertising or analytics cookies, and we do not use tracking tools such as Google Analytics or the Meta (Facebook) Pixel on this website.

The only cookie we set is a strictly necessary session cookie (qumqum_host) used by our staff to sign in to the internal host desk. Guests do not receive it.

Our pages include an embedded Google Map. When it loads, Google may set its own cookies or collect information about your device under Google’s Privacy Policy. You can block or delete cookies in your browser settings.

We share personal information only with service providers that help us run our services:

• Meta (WhatsApp Business Platform) — delivers WhatsApp messages for the waitlist and reservations.
• Supabase — database hosting for waitlist, reservation and contest records.
• Vercel — website hosting and delivery.
• Google Maps — the embedded map showing our location.
• flagcdn.com — serves the team flag images on our contest page; your browser requests these images directly.

Links to Zomato, Swiggy, Instagram, Google Maps and WhatsApp take you to services run by those companies, which have their own privacy policies. Some of our providers may store or process information outside India. We may also disclose information where required by law.

We keep personal information only for as long as we need it for the purposes above, then delete or anonymise it.

• Waitlist, reservation and WhatsApp message records: [retention period to be confirmed].
• Contest entries: for the duration of the contest and prize fulfilment, then [retention period to be confirmed].
• Rate-limit records hold only hashed values and reset automatically after a short window (up to one hour).

You can ask us to delete your information sooner (see below).

Our databases are not publicly accessible and can only be reached by our server using a restricted key. Contest phone numbers are masked when shown back on screen, IP addresses are stored only in hashed form, and the staff host desk is passcode-protected. No method of transmission or storage is completely secure, but we take reasonable steps to protect your information.

Depending on where you live, you may have the right to:

• access the personal information we hold about you and get a copy of it;
• correct inaccurate or incomplete information;
• ask us to delete your information;
• withdraw consent at any time, including opting out of offers (this does not affect earlier processing);
• object to or ask us to restrict certain processing;
• receive your information in a portable format, where applicable;
• nominate someone to exercise your rights on your behalf, where applicable; and
• complain to a data protection authority.

These rights are provided under laws including India’s Digital Personal Data Protection Act, 2023; for residents of the United Arab Emirates, the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL); and for residents of the European Economic Area or United Kingdom, the GDPR / UK GDPR.

To exercise any of these rights, contact us using the details below. We may need to verify your identity (for example by confirming your phone number) before acting on a request. To stop WhatsApp waitlist messages you can also simply reply to cancel or block the number.

Our website and services are not directed at children, and we do not knowingly collect personal information from anyone under 18 without the consent of a parent or guardian. If you believe a child has given us personal information, please contact us and we will delete it.

We may update this policy from time to time, for example when we add new features. We will post the updated version on this page and change the “Last updated” date above.

For privacy questions or requests, contact:

← Back to QumQum