Dutch Fries ← Back to site
Legal

Privacy Policy

Last updated: 2 August 2026

This Privacy Policy explains how Dutch Fries ("we", "us", "our") collects, uses, stores and protects your personal data when you visit dutchfries.com (the "Site").

We are committed to handling your data lawfully and transparently, in line with India's Digital Personal Data Protection Act, 2023 (DPDP Act) and applicable rules.

1. Who we are

Dutch Fries is a quick-service restaurant brand bringing Dutch-style street fries to India, founded by a Dutch and Indian team.

2. What data we collect

We deliberately collect as little as possible. At present the Site collects data in two places, and only if you choose to submit it:

We do not use cookies, advertising trackers or website analytics on this Site. Beyond the above we do not collect your phone number, payment details or location.

3. Why we use it, and on what basis

We use your e-mail address from the launch form for one purpose only: to notify you when Dutch Fries launches and to share related launch news.

We use the data from a job application only to assess your application, to contact you about it, and to run our interview process. We do not use it for marketing, and we will not add you to our launch mailing list because you applied.

We process both on the basis of your consent, which you give by submitting the relevant form. You may withdraw your consent at any time (see section 7).

We will not sell your data, and we will not use it for unrelated marketing.

4. Who we share it with

Launch sign-ups are processed by Formspree, Inc., our form-handling provider, which stores submissions and forwards them to our e-mail address. Formspree acts as a Data Processor on our behalf. See Formspree's privacy policy. Because Formspree operates outside India, your e-mail address may be transferred and stored outside India. By submitting the form you consent to this transfer.

Job applications, including your CV and any work sample, are stored in our own private business cloud storage, hosted by TransIP B.V. in the Netherlands, which acts as a Data Processor on our behalf. The storage is private: files are not published, not indexed and not visible to other applicants. Your application is not uploaded to any recruitment platform, job board or CV database, and it is never used to train any system.

Because that storage is located in the Netherlands, the data in your application is transferred to and stored outside India. By submitting the application form you consent to this transfer. The Netherlands applies the European Union's data protection regime (GDPR).

When an application arrives we send ourselves a short notification through Formspree. That notification contains your name, e-mail address and the links you gave us, but your CV and work sample are never sent to Formspree.

We share your data with no one else, except where required by law.

5. How long we keep it

We keep your launch sign-up e-mail address until our launch communications are complete, or until you ask us to delete it — whichever comes first. After that it is deleted from our records and from Formspree.

We keep a job application, including the CV and any work sample, for as long as we are considering you for the role, and for up to six months after the position is filled in case a similar role opens. After that it is deleted. You can ask us to delete your application sooner at any time, and we will.

6. How we protect it

The Site is served over encrypted HTTPS. Form submissions are transmitted securely and access to them is limited to the founders.

Your application never stays on this website: the files pass straight through to our private cloud storage and nothing is kept on the web server. That storage is not public — its contents cannot be browsed, guessed or downloaded by visitors, and other applicants cannot see your files or even your file names. Each file is renamed on arrival, so the name you gave it is not reused.

We accept a CV as a PDF or Word document, and an optional work sample as a PDF, image, Word document or ZIP archive. Every upload is checked on its actual content, not just its file name, so nothing else can be smuggled in. No method of transmission over the internet is completely secure, but we take reasonable measures to protect your data.

7. Your rights

Under the DPDP Act you have the right to:

To exercise any of these rights, e-mail kushagra.shukla@dutchfries.com with the subject "Data request". We aim to respond within 30 days.

8. Grievance redressal

If you are unhappy with how we handle your data, please contact our grievance contact:

If your concern is not resolved, you may escalate it to the Data Protection Board of India.

9. Children

The Site is not directed at children under 18, and we do not knowingly collect data from children. If you believe a child has submitted data to us, contact us and we will delete it.

10. Third-party links

The Site links to our profiles on Instagram and LinkedIn. Those platforms have their own privacy policies, and we are not responsible for how they handle your data.

11. Changes to this policy

We may update this policy as our business grows — for example when we start taking online orders. The "last updated" date at the top will always show the current version.

12. Contact

Questions about this policy? E-mail kushagra.shukla@dutchfries.com.