Privacy

Your data, handled with care.

How we collect, use and protect your personal data. Last updated 21 October 2026.

Who we are

Sri Kumbhakarna (“we”, “us”) runs the Sri Kumbhakarna restaurant at 77 Syed Alwi Road and our food-court stalls in Singapore. This policy explains how we handle personal data collected through srikumbhakarna.com, in line with Singapore’s Personal Data Protection Act 2012 (PDPA).

What we collect

  • Table reservations: your mobile number, name, the date, time and number of guests, and any special requests.
  • Party orders: your mobile number, and — only if you choose to give them — your name, email, party date, guest numbers, venue, budget and notes.
  • Messages you send us by WhatsApp, phone or email.

What we don’t collect

We don’t ask for your NRIC or passport number, and we never take card payments on this website. Online food orders are placed on GrabFood, under Grab’s own privacy policy. We don’t use advertising or tracking cookies.

Why we use it

  • To confirm, manage and remind you about your table booking.
  • To call or message you about a party order — the menu, quote and arrangements.
  • To answer your questions and improve our service.

Consent and messages

By submitting a form you consent to us using your details for that request. We send booking confirmations and updates by WhatsApp and, if you give an email, by email. We won’t send you marketing messages unless you separately agree to receive them, and we respect the Do Not Call Registry. You can withdraw consent at any time by contacting us; we’ll tell you how that affects any booking in progress.

Who we share it with

Only with service providers who help us run the booking system, under contract and only for that purpose:

  • Vercel and Neon — website hosting and database, located in Singapore.
  • Meta (WhatsApp Business) — to send WhatsApp confirmations and updates.
  • Our email provider — to send email confirmations.
  • Cloudflare Turnstile — to protect our forms from bots.

Some of these providers may process messages outside Singapore. Where that happens we require them to protect your data to a standard comparable to the PDPA. We never sell your personal data.

How long we keep it

We keep booking and party-order details for up to 12 months after your visit or event, then delete or anonymise them — unless we need them longer for a dispute or to meet legal and tax record-keeping requirements.

How we protect it

Your data is stored in Singapore and encrypted in transit and at rest. Only authorised staff can see bookings, using individual password-protected accounts. If a data breach is likely to cause you significant harm, we will notify you and the Personal Data Protection Commission as the PDPA requires.

Your rights

You can ask to see the personal data we hold about you, how it has been used, or ask us to correct it. Contact our Data Protection Officer below — we aim to reply within 30 days.

Contact our Data Protection Officer

Email info@srikumbhakarna.com with the subject “Personal data request”, or write to us at 77 Syed Alwi Road, Singapore 207656.