OneConsent
Industries · Food & Beverage

DPDP compliance for Food & Beverage

From QR menus to delivery apps, govern every guest's notice, consent and request in one place. Every opt-in, opt-out and data request is recorded, synced and ready for audit.

Restaurant guests and staff
9:415G

Checkout

Join Rewards?

Mobile+91 98••• ••521
Earn today32 points

Loyalty program

Rewards & tier benefits

Offers on WhatsApp

Optional

Continue

Consent recorded

notice v3.2 · 12:04:31

Preference synced to 4 systems

Table reservationsQR menusOnline orderingPaymentsDeliveryLoyalty programsDigital receiptsFeedbackPromotional offersCustomer supportTable reservationsQR menusOnline orderingPaymentsDeliveryLoyalty programsDigital receiptsFeedbackPromotional offersCustomer support
The F&B privacy problem

One mobile number.
Many purposes.

A number taken to fulfil an order often goes on to power loyalty and promotions. Each purpose needs its own legal basis. Consent isn't required for every one, but where you rely on it, withdrawal has to work.

+91 98••• ••521

Collected at checkout · Outlet 14

Order & delivery

Fulfil the order and coordinate delivery

Order basis

Loyalty rewards

Points, tiers and reward redemption

Promotional offers

Coupons and birthday offers on WhatsApp

POS & billingDelivery partnerLoyalty platformWhatsApp campaigns
13:05:11loyalty → withdrawn · synced
13:05:14loyalty → consent given
13:05:17promotions → consent given
Personal data landscape

Who's in your data

Map what you collect, from whom, through which channel, and why.

Diners & guests

01
NameMobileEmail

For service and account management

Online customers

02
Delivery addressOrder history

For order processing and delivery

Loyalty members

03
Member IDPointsTier

For rewards and loyalty administration

Marketing audiences

04
PreferencesCampaign activity

For promotions and engagement

Delivery recipients

05
PhoneAddressInstructions

For food delivery and fulfilment

Staff, franchisees & vendors

06
EmploymentPayrollContracts

For workforce, franchise and vendor management

Industry challenges

Where F&B privacy breaks down

Same guest, 5 systems

POSOpted inLoyalty appOpted inAggregatorUnknownCRMOpted outWhatsApp toolOpted in
F&B challengeOneConsent capability

Fragmented customer data

POS, loyalty, aggregators and CRM each hold a piece of the guest.

Consent Governance Platform

One governance layer for consent-related workflows across POS, loyalty, ordering and CRM touchpoints.

Purpose creep

Order data gets reused for loyalty and marketing without a separate legal basis.

Purpose and Sub-purpose Mapping

Maps each purpose and its data fields to a defined activity, so ordering, loyalty and promotions stay separate.

Preferences out of sync

An opt-out at the outlet never reaches the WhatsApp campaign.

Consent and Preference Workflows

Communicates preference changes and withdrawals to connected systems via configured integrations.

Franchise gaps

Outlets run different POS systems, notices and practices.

Notice Management

Version-controlled notices with outlet- and channel-specific configurations across company-owned and franchise outlets.

Aggregator ambiguity

Unclear roles when delivery partners receive customer and order data.

Third-Party Risk Management

Documents Data Fiduciary and Data Processor roles for delivery and aggregator partners, and the data each receives.

No audit trail

No proof of which notice was shown or how a request was handled.

Audit and Recordkeeping

Notice versions, consent records, request history and timestamps, according to the implementation.

DPDP Act, 2023 at a glance

The Act, mapped to your operations

Section 4

Grounds for processing

Map purposes across ordering, loyalty, reservations, delivery and marketing.

Section 5

Notice

Review notices at POS, QR forms, apps, websites and loyalty journeys.

Section 6

Consent

Where consent is relied on, keep records and make withdrawal work.

Section 8

Fiduciary obligations

Security, retention, breach response and Data Processor contracts.

Sections 11–14

Data principal rights

Intake, verification and tracking for access, correction, erasure and grievances.

Sections 9–10

Children's data & SDF

Assess child-focused services and Significant Data Fiduciary status.

A practical, non-exhaustive mapping, not a legal opinion. Verify applicability, exemptions and commencement dates against the current Act, notified Rules and official notifications.

Use cases

Consent in action, from table to delivery

Use case 01

Loyalty enrolment at POS

Outlet counter
Scenario

A guest joins rewards at checkout. Loyalty and promotions are offered as separate choices.

Outcome

Two purposes, recorded separately

With OneConsent

POS · Counter 2

Join Rewards

Mobile+91 98••• ••521
Bill₹1,240

Loyalty program

Loyalty administration

Promotional offers

Optional

Enrol guest
Application ecosystem

Where OneConsent fits

Connect through APIs, Web SDK and Mobile SDK. Preferences flow to every system that needs them.

Upstream · collection
POS & billing
Websites & ordering apps
QR menus & feedback forms
Reservations & queues
Loyalty enrolment
Aggregator channels
OneConsent
OneConsent capabilities
Notice management
Consent & preferences
Purpose mapping
Rights requests
Downstream · usage & sharing
Email, SMS & WhatsApp
Marketing automation
Delivery partners
Payment providers
Analytics & personalisation
Franchise partners

OneConsent is not a replacement for POS, order management, payments or delivery operations. Connected systems still need integrations to honour preferences and fulfil requests.

60-second self-check

How ready is your brand?

An initial assessment tool, not a certification or guarantee of compliance.

0of 6

Getting started

Begin with a data inventory and clear ownership.

Assess your F&B data ecosystem

Find your privacy governance gaps and build a more transparent approach to customer data.