Privacy Policy
Dehaati Restaurant (“Dehaati,” “we,” “us,” or “our”) operates the website dehaatiusa.net and the online waitlist service. This Privacy Policy explains how we collect, use, share, and protect personal information when you visit our website, join our waitlist, or interact with us.
1. Scope of This Policy
This policy applies to:
- All pages and features at dehaatiusa.net
- Our online waitlist at dehaatiusa.net/waitlist
- SMS/text message notifications we send you
- Any future contact or ordering features on the site
This policy does not apply to third-party websites linked from our site (e.g., Google Maps, delivery platforms, social media). Those services have their own privacy policies.
2. Information We Collect
A. Information You Provide
| Category | Data Collected | When |
|---|---|---|
| Identity | First name | Joining waitlist |
| Contact | Mobile phone number | Waitlist identification and SMS notifications only when the customer separately opts in |
| Party details | Number of adults, number of children | Joining waitlist |
| Preferences | Special requests / accessibility needs (optional) | Joining waitlist |
We do not collect email addresses, payment information, or government-issued identification through this website.
B. Information Collected Automatically
When you visit our website, our hosting infrastructure (Cloudflare) may automatically collect:
- IP address (used for security and bot protection; not linked to waitlist data)
- Browser type and operating system
- Pages visited and time of visit
- Referring URL
We do not use Google Analytics, Facebook Pixel, or other third-party tracking scripts on this website. We do not set advertising cookies.
C. Cookies and Similar Technologies
Our website uses only the minimal cookies required for the site to function. We do not use cookies for advertising or cross-site tracking. Cloudflare may set a security cookie (__cf_bm) to protect the site from automated traffic. This cookie does not track you across websites.
3. How We Use Your Information
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Manage your waitlist position and estimated wait time | Name, party size, special requests | Contract / Legitimate interest |
| Send SMS notifications about your waitlist status | Phone number | Your explicit consent |
| Display your queue position on the waitlist page | Waitlist entry data | Contract |
| Operate and protect the website (security, fraud prevention) | IP address, technical logs | Legitimate interest |
We do not use your information for marketing, advertising, profiling, or any purpose not listed above. We will not use your waitlist phone number to send promotional messages.
4. SMS / Text Messaging
Customers may optionally opt in to receive SMS text messages from Dehaati Restaurant regarding their waitlist status.
Customers can access the waitlist by scanning a QR code displayed at Dehaati Restaurant or by visiting dehaatiusa.net/waitlist. On the waitlist page, customers enter their waitlist information and may choose to select a separate SMS consent checkbox.
The SMS consent checkbox is unchecked by default. Selecting the checkbox is optional and is not required to join or use the restaurant waitlist. Customers who do not select the checkbox may still join the waitlist and monitor their queue position through the waitlist webpage. Providing a mobile phone number or joining the waitlist does not by itself constitute consent to receive SMS messages.
Dehaati Restaurant sends SMS messages only to customers who affirmatively select the SMS consent checkbox. Customers who opt in may receive:
- Confirmation that they have joined the waitlist
- Updates concerning their waitlist position
- A notification that their table will be ready soon
- A notification that their table is ready
Message frequency varies, typically 1–3 messages per waitlist visit. Message and data rates may apply depending on the customer’s mobile carrier and service plan.
Customers may opt out at any time by replying STOP. After opting out, the customer may receive one final message confirming the opt-out. For assistance, reply HELP or contact Dehaati Restaurant using the contact information provided in this Privacy Policy.
Our SMS service is provided by Twilio, Inc. Twilio processes mobile phone numbers and messaging information only as necessary to provide SMS delivery services on our behalf. For Twilio’s data practices, see twilio.com/legal/privacy.
No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties, except service providers acting on our behalf solely to provide the messaging service.
Supported mobile carriers are not responsible for delayed or undelivered messages.
5. How We Share Your Information
We do not sell, rent, or trade your personal information. We share only what is necessary with the following service providers:
| Vendor | Role | Data Shared |
|---|---|---|
| Twilio, Inc. | SMS delivery | Phone number |
| Cloudflare, Inc. | Hosting, CDN, security (DDoS protection, bot filtering) | IP address, technical request data |
We may also disclose information if required by law, court order, or to protect the safety of our customers and staff.
No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. All categories of data above exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.
6. Data Retention
- Active waitlist entries — stored while your party is waiting; automatically removed after 3 hours.
- SMS logs — Twilio may retain message delivery records per their retention policy.
- Cloudflare logs — typically retained for up to 7 days for security purposes.
- Aggregate statistics — anonymized data (e.g., average wait times) may be kept for operational improvement and cannot be linked back to you.
7. California Privacy Disclosures
This section applies to California residents and is provided pursuant to the California Online Privacy Protection Act (CalOPPA) and in the spirit of the California Consumer Privacy Act (CCPA/CPRA).
Categories of Personal Information Collected (CalOPPA)
- Identifiers (name, phone number, IP address)
- Internet or network activity (pages visited, browser type)
- Inferences about preferences (party size, special requests)
We Do Not Sell Personal Information
We do not sell personal information to third parties, as defined under California law.
CCPA/CPRA Applicability
The CCPA/CPRA applies to businesses that meet specific revenue or data-volume thresholds. We may not meet those thresholds as a small restaurant. However, even if the CCPA/CPRA does not legally apply to us, we believe in privacy as a right. California residents (and anyone else) may contact us to:
- Request access to the personal information we hold about them
- Request correction of inaccurate information
- Request deletion of their personal information
Contact us at: dehaatiusa@gmail.com or call +1 (408) 685-2054. We will respond within a reasonable time.
Do Not Track / Global Privacy Control
Some browsers send a “Do Not Track” (DNT) signal or Global Privacy Control (GPC) signal. Because we do not use behavioral tracking cookies or analytics scripts, your browsing experience on our site is the same regardless of your DNT or GPC setting. We do not track you across third-party sites.
Shine the Light
California Civil Code §1798.83 allows California residents to request information about disclosure of personal information to third parties for direct marketing purposes. We do not share personal information for direct marketing purposes.
8. Your Rights and Choices
- Opt out of SMS: Reply STOP to any message we send you.
- Cancel your waitlist entry: Use the waitlist page at any time before your table is called.
- Request deletion: Email dehaatiusa@gmail.com and we will delete your personal data.
- Request access or correction: Contact us using the information in Section 10.
9. Security
We use industry-standard protections including HTTPS encryption, access-controlled databases hosted on Cloudflare’s infrastructure, and limited data retention. No method of internet transmission is 100% secure, and we cannot guarantee absolute security. If you have concerns about data security, please contact us.
10. Contact Us
For privacy questions, requests, or to opt out of SMS, contact us:
Dehaati Restaurant954 E El Camino Real, Sunnyvale, CA 94087
Phone: +1 (408) 685-2054
Email: dehaatiusa@gmail.com
Website: dehaatiusa.net
11. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the “Last Updated” date above. Significant changes will be noted prominently. Continued use of our website or waitlist after changes are posted constitutes acceptance of the updated policy.
This Privacy Policy applies to dehaatiusa.net and our waitlist service. It does not apply to third-party sites or services linked from our website.