Privacy policy

Privacy policy

Who we are

Thunder Hospitality Pvt. Ltd. is a hospitality group based in Bengaluru, India, operating restaurants, bars, and sweets retail under multiple brands.​
Registered address: No 1325/1/85/1, BDA 80 Feet Road, Shantiniketan Layout, Arekere, Bannerghatta Road, Bengaluru South, Karnataka 560076.​
Corporate identifiers: CIN U55101KA2023PTC171645 and GSTIN 29AAKCT0038L1Z0.​
This policy covers our corporate site and official brand properties including Mithai Mahal and Tales of Flamingo located in Arekere, Bengaluru.​

Contact information

For privacy-specific queries, write to the Thunder Hospitality registered address listed above with attention to “Privacy Contact”.​
For general reservations and enquiries, the team is available on +91 72042 00440, and at our published outlet addresses in Arekere, Bengaluru.​
Operational brand addresses are publicly listed for Mithai Mahal and Tales of Flamingo in the Arekere area of Bengaluru.​

What personal data we collect and why

When you make a table reservation, event enquiry, or sweets order through our channels or partner platforms, we may collect your name, contact number, email, party size, and order/event details to fulfill your request and provide support.​
We may also collect transaction context and visit preferences related to bookings or orders to manage seating, service quality, and follow-up communications consistent with the channel you choose.​
If you interact with our social pages or embedded posts, the platforms hosting those features may collect additional data under their respective policies, which apply alongside this policy.​

Comments and user submissions

If our sites enable comments, we may collect the data shown in the form along with technical information such as IP address and user agent to prevent spam and abuse, and to maintain service integrity across our brand pages.​
Public posts or reviews made on partner platforms or social channels are governed by those platforms’ terms and may be visible to other users under those platforms’ policies.​

Media

If uploads are enabled on our sites, avoid including embedded location data in images; media posted on public pages may be visible to other visitors consistent with the page’s purpose and platform behavior.​
Where uploads occur on partner or social platforms, their file handling, visibility, and metadata rules apply in addition to this policy.​

Contact forms

If you submit a contact, reservation, or event form, we use the details to respond, schedule, and deliver the requested service, and may retain the record for service quality, dispute resolution, and regulatory compliance.​
Form fields and retention may differ by channel, including third-party booking or ordering partners that facilitate reservations and dine-out offers for our venues.​

Cookies

Our brand websites may use essential cookies for core site functions and analytics cookies to understand site usage and improve performance where available on the specific brand site.​
You can manage cookies through your browser settings; disabling certain cookies may affect site features on the relevant brand website or partner booking pages you use.​

Embedded content from other websites

Pages may include embedded content or links to partner platforms, such as reservation widgets or Instagram posts, which behave as if visited on the originating site or app with their own data practices.​
These services may collect data, use cookies, and track engagement with embedded content according to their policies and settings.​

Analytics

Our sites or hosting providers may process aggregated or anonymized analytics to understand traffic patterns, improve reliability, and protect against misuse, depending on the capabilities active on each brand site.​
Analytics features on third‑party booking or ordering pages are controlled by those providers and are subject to their respective privacy statements.​

Who we share your data with

To deliver reservations, events, and offers, we may process your data on trusted third‑party platforms such as restaurant booking and dine‑out partners associated with our venues.​
We may also use social platforms for community engagement and promotions, where your interactions are processed by those platforms under their own policies.​

How long we retain your data

Reservation, enquiry, or order records may be retained for the period necessary to provide the service, manage operations, and meet audit or regulatory requirements applicable to our Bengaluru hospitality business.​
Public posts on third‑party platforms remain subject to those platforms’ retention and deletion policies, independent of Thunder Hospitality.​

What rights you have over your data

You can request access, correction, or deletion of personal data you have provided to us through our corporate or brand channels, subject to applicable legal and operational requirements in India.​
Requests concerning data held by third‑party platforms must be directed to those providers, whose tools and processes apply to their services.e

Where we send or process data

When you use partner booking or ordering platforms, your data may be processed on their infrastructure, which may be located outside your jurisdiction and governed by their safeguards.​
Social media interactions are processed by the respective social platforms consistent with their cross‑border processing practices and controls.​

How we protect your data

Our objective is to use reasonable technical and organizational measures appropriate to a hospitality business to secure reservation, enquiry, and order information handled through our corporate and brand channels in Bengaluru.​
Operational controls are reviewed in line with business needs, with adjustments as our brand footprint and partner integrations evolve in Arekere and across Bengaluru.​

What data breach procedures we have in place

Suspected incidents are escalated internally for investigation and mitigation, and notifications are made when required by applicable obligations relevant to our registered entity in Karnataka.​
Where an incident concerns a third‑party booking or social platform, the provider’s incident response and notification processes also apply to data processed on their systems.​

Third‑party data sources

If you interact with our brands through partner listings, booking portals, or social platforms, we may receive limited information from those providers to manage your reservation or engagement.​
Such data is processed in accordance with this policy and the terms set by the originating platform facilitating the interaction.​

Automated decision‑making and profiling

We do not conduct automated decision‑making that produces legal effects for guests, and any audience targeting conducted on social platforms follows those platforms’ controls and settings.​
Event or offer recommendations may reflect operational availability and venue programming rather than individual profiling on our own systems.​

Industry regulatory disclosures

Thunder Hospitality operates hospitality venues in Bengaluru and maintains corporate registrations and identifiers as noted above for compliance and transparency.​
Brand units such as Mithai Mahal operate under Thunder Hospitality with publicly listed addresses in Arekere, Bengaluru for guest awareness and local compliance.​