Privacy policy

Last updated 3 November 2026

This policy covers bongfish.co.in, run by Bong Fish, Rajiv Gandhi Path, Udaynagar, Koinadhara, Khanapara, Guwahati 781022, Assam. It explains what we collect when you use the site, why, and what you can ask us to do with it. We follow India's Digital Personal Data Protection Act, 2023.

What we collect

• Table bookings. Your name, phone number, date, time, number of guests, occasion and any note you add, whether you use the booking form or ask Ilish, our chat assistant.
• Chats with Ilish. The messages you type, so Ilish can answer about the menu, prices and tables. We do not keep the chat after it ends, except for a booking you ask Ilish to make.
• WhatsApp orders and messages. When you send an order or message us on WhatsApp, we see your WhatsApp name, number and the message, like any WhatsApp chat.
• Basic technical data. Your IP address is used for a short time to stop spam and abuse (for example, too many bookings from one place). These counters expire within a day.

We do not ask for payment details on this site, and we do not sell or rent your details to anyone.

Why we use it

• To hold your table and call or WhatsApp you to confirm or change it.
• To send booking updates on WhatsApp, such as "we received your request".
• To answer your questions and take your order.
• To keep the site safe from spam and misuse.

We do not send marketing messages unless you ask us to.

Who helps us run the site

• Cloudflare hosts the site, stores bookings, checks that requests come from real people, and its Workers AI finds the menu items that match a question you type to Ilish. Ilish may keep the reply to a one-question chat for a few hours so the same question is answered faster; these saved replies hold no name or phone number.
• OpenRouter and the AI model providers it connects to process your chat messages so Ilish can reply. Don't share sensitive details in the chat.
• Meta (WhatsApp) carries WhatsApp messages between you and us.
• Google Fonts serves the fonts on the page, which shares your IP address with Google.

These services handle data only to provide their service to us.

Cookies and storage

We use no advertising or tracking cookies. The site uses a short-lived security cookie after the spam check, a login cookie for our staff only, and your browser's session storage to remember the dishes in your order until you close the tab.

How long we keep it

Booking details are deleted automatically 12 months after the booking was made. Spam-check counters expire within a day. WhatsApp chats stay in our WhatsApp until we delete them.

Your rights

You can ask us to show, correct or delete the details we hold about you, or withdraw your consent to being contacted. Call or WhatsApp us on 91810 64600, or tell us at the restaurant. We reply within 7 days. If you are not happy with our answer, you can complain to the Data Protection Board of India.

Children

Bookings should be made by someone aged 18 or over.

Changes

If we change this policy, we update it here and change the date at the top.