Privacy Policy

SORA TRADES PRIVATE LIMITED, trading as Konma Xperience, B-308, Bollineni Hill Side, Phase 2, Perumbakkam, Sholinganallur, Chennai, Tamil Nadu 600126, India, decides why and how your data is used (the “data fiduciary”). Contact for anything in this notice: Vinay, Customer Success Executive, soratradesprivatelimited@gmail.com, +91 95000 35764.

• Identity and contact: your name, mobile number (used to sign in), and email address if you give one.
• Addresses: delivery addresses you save or enter at checkout, including pincode.
• Orders and bookings: what you bought or booked, amounts, coupons and loyalty points, delivery status, and refund history. We do not see or store your card or UPI credentials; Razorpay handles them.
• Feedback and support: reviews, feedback and messages you send us, including any photos you attach.
• Preferences: settings you choose in your account, such as communication preferences.
• Device and log data: IP address, browser and device type, pages visited, timestamps and error logs, collected automatically for security and to keep the site working. We use essential cookies and similar storage to keep you signed in and hold your cart.

Our site is for people aged 18 and over; we do not knowingly collect data from children.

• To verify your phone number and sign you in (WhatsApp one-time code).
• To take payment, prepare and deliver your order, book your event place and issue refunds.
• To send order, delivery and booking updates and answer support requests.
• To run the loyalty programme and show your account history.
• To prevent fraud and abuse, keep the site secure and fix errors.
• To meet legal duties such as tax, accounting and food-safety record keeping.
• To improve our products and service, using your feedback and aggregated usage.

We use your consent, given when you sign in or place an order, or a legitimate use the Act allows, such as performing your order or meeting a legal obligation. We do not sell your personal data. We send promotional messages only if you have agreed to receive them.

We share only what each provider needs to do its job. They act on our instructions.

Some providers process data on servers outside India. We also disclose data where the law or a court or authority requires it, or to protect our rights and users’ safety.

• Account details: for as long as your account is active, and until you ask us to erase it.
• Order, payment, tax and refund records: for the period tax and accounting law requires (generally up to 8 years), even after you close your account.
• Feedback and complaint records: while needed to resolve and evidence the matter, then deleted or anonymised.
• Security and server logs: kept for a limited period, typically up to 12 months.

Under the DPDP Act you may:

• ask for a summary of the personal data we hold and how it is used, and who it has been shared with;
• ask us to correct inaccurate or incomplete data, or to update it (you can also edit your details in My Konma);
• ask us to erase your data, except what we must keep by law;
• withdraw your consent at any time. This does not affect what we did before, and may mean we can no longer serve you;
• have your grievance addressed, and nominate another person to exercise these rights if you die or become unable to;
• complain to the Data Protection Board of India after you have raised the matter with us.

Contact us by writing to soratradesprivatelimited@gmail.com or calling +91 95000 35764, from the phone number or email registered on your account, saying what you want. We may verify your identity first. We acknowledge within 48 hours and respond within 30 days. See also Grievance Redressal.

Signed in, you can do most of this yourself under Account, Privacy & data: download your data, see and withdraw your consents, name a nominee, or delete your account. Every consent you give is logged with the notice version (currently 2026-10-03), the channel and the time.

We use access controls, encrypted connections and limited staff access to protect your data. No system is perfectly secure; if a breach affects you we will notify you and the authorities as the law requires. We may update this notice; the “Last updated” date shows the current version and we will highlight material changes.