Website Launch Checklist for Pune Restaurants Complying with GST and FSSAI Regulations

Overview – A restaurant website must be functional, GST‑ready and display the FSSAI licence before it goes live.

A launch checklist helps you verify that every technical, legal and user‑experience element is in place, so you avoid costly rework after the site is public.

Govindani Infotech Pvt. Ltd. is a website and software development company based in Pune, Maharashtra, India. For restaurants that need a reliable partner, we often start with a clear, step‑by‑step plan that covers everything from domain registration to compliance banners. Below is a detailed checklist designed for Pune‑based eateries that must comply with GST and FSSAI regulations while offering smooth digital payments such as UPI.

Why a checklist matters for Indian restaurants

A checklist reduces the risk of missing a legal requirement (e.g., displaying the FSSAI licence) or a technical detail (e.g., GST‑compliant invoice generation). Missing any of these can lead to GST penalties, FSSAI notices, or loss of customer trust.

Domain and Hosting – Secure a reliable address and server before you start building.

Choosing the right domain name and hosting plan sets the foundation for performance, SEO and compliance.

1. Choose a domain that reflects your brand and is easy to type

• Keep it short, preferably .in or .com.
• Include the restaurant name; avoid hyphens and numbers that can be misread.
• Register the domain through an accredited Indian registrar (e.g., GoDaddy India, BigRock) to ensure local support and GST invoicing.

2. Select a hosting provider that offers Indian data centre locations

• A server in Mumbai or Pune reduces latency for local users.
• Look for providers that support SSL certificates, daily backups and 24 × 7 support.
• Ensure the hosting plan includes enough bandwidth for image‑heavy menus and occasional traffic spikes during festivals.

3. Enable HTTPS with a valid SSL certificate

• HTTPS encrypts data, which is mandatory for any site that collects payment information.
• Most hosts include a free Let’s Encrypt certificate; you can also purchase an EV SSL for added brand trust.

4. Set up DNS and point it to your hosting IP

• Use the registrar’s DNS management panel to add A records (for the main domain) and CNAME records (for www).
• Add a TXT record for SPF/DKIM if you plan to send newsletters from the same domain.

Design and Content – Build a user‑friendly site that showcases the menu and brand identity.

A well‑structured site improves conversion and makes compliance elements easier to place.

1. Define the site architecture

• Typical pages: Home, About, Menu, Order Online, Gallery, Contact, Legal (GST & FSSAI).
• Use a flat hierarchy (no more than three clicks to any page) to aid both users and search engines.

2. Upload a high‑quality, searchable menu

• Use structured data (Schema.org Menu markup) so Google can display dishes in search results.
• Include dish names, descriptions, allergens, and prices in INR.
• Keep the menu in a CMS (e.g., WordPress, Strapi) so you can update it without developer help.

3. Ensure mobile‑first responsiveness

• Over 70 % of restaurant searches in India happen on mobile devices.
• Test breakpoints for 320 px, 480 px, and 768 px using Chrome DevTools.

4. Add brand elements and local SEO signals

• Include the restaurant’s name, address, and phone number in the footer using LocalBusiness schema.
• Embed a Google Map of the Pune location; this helps with “near me” searches.

5. Write clear call‑to‑actions (CTAs) for ordering and reservations

• Use action verbs (“Order Now”, “Book a Table”) and place them above the fold.
• Link CTAs to the payment gateway or reservation system with UPI integration (see next section).

Payment Integration – Enable UPI, cards and wallets while keeping GST compliance.

A seamless checkout reduces cart abandonment and ensures every transaction is recorded for tax purposes.

1. Choose a payment gateway that supports UPI and Indian cards

• All three gateways are PCI‑DSS compliant, which satisfies card‑payment security requirements.
• For restaurants that want the simplest integration, Razorpay’s SDK works well with most CMS platforms.

2. Implement the gateway’s SDK or API

• Follow the provider’s documentation to embed the checkout widget on the “Order Online” page.
• Test in sandbox mode before switching to live credentials.

3. Capture the payer’s name, phone number and email

• These fields are required for GST invoicing and for sending order confirmations.
• Store the data securely (see Security section).

4. Configure automatic GST‑ready invoices

• Enable the gateway’s “tax” module and set the GST rate (currently 5 % or 12 % for restaurant services, depending on the menu).
• The generated PDF should display the restaurant’s GSTIN, invoice number, and taxable value.

5. Display a “Pay via UPI” QR code for dine‑in orders (optional)

• Generate a static UPI QR using your VPA (e.g., restaurant@upi).
• Place the QR on the checkout page and optionally on printed receipts.

GST‑Ready Billing – Ensure every online sale produces a compliant invoice.

GST compliance is mandatory for any restaurant with annual turnover above the exemption limit; even small eateries benefit from proper invoicing.

1. Register for GST and obtain a GSTIN

• Apply through the GST portal (https://www.gst.gov.in).
• Keep the GST registration certificate handy; you’ll need to display the GSTIN on the site.

2. Add GST details to the website footer and checkout pages

• Example footer line: “GSTIN: 27AAEPM1234F1Z5”.
• Show the applicable tax rate next to each menu price (e.g., “₹250 + GST”).

3. Choose an invoicing method that integrates with your payment gateway

• Options: built‑in gateway invoicing, third‑party API (e.g., ClearTax, Zoho Books), or custom PDF generation.
• The invoice must contain: GSTIN of the restaurant, GSTIN of the buyer (if B2B), invoice number, date, itemised list, tax amount, and total.

4. Store invoices for the statutory period (minimum 6 years)

• Use a cloud storage bucket (e.g., AWS S3, Google Cloud) with proper folder naming (year/month).
• Ensure backups are encrypted and comply with Indian data‑privacy norms.

5. Enable “Download Invoice” for customers after payment

• Provide a secure link that expires after 30 days for security.
• Include a “Print” button that triggers the PDF view.

FSSAI Licence Display – Show the food‑safety licence prominently to satisfy regulators.

FSSAI compliance is a legal requirement for any restaurant that sells food, and the licence must be visible to customers.

1. Locate your FSSAI licence number and certificate

• The licence number appears on the certificate (e.g., “FSSAI/1234/2022”).
• Keep a digital copy (PDF) for uploading to the website.

2. Add a “Food Safety” badge in the footer or on the “About” page

• Use the official FSSAI logo (available on the FSSAI website) and link it to the licence PDF.
• Example text: “FSSAI Licence No. 1234‑2022 – Valid till 31 Dec 2025”.

3. Include the licence information in the website’s “Legal” page

• Provide the full address of the registered kitchen, the licence number, and the expiry date.
• This page can be linked from the footer with anchor text “Legal & Compliance”.

4. Keep the licence PDF updated before expiry

• Set a calendar reminder three months before the licence renewal date.
• Replace the PDF and update the expiry date on the site to avoid non‑compliance notices.

Analytics, SEO and Performance – Track visitors, rank locally and keep the site fast.

Performance and discoverability directly affect online orders, especially for new restaurants in Pune.

1. Install Google Analytics 4 (GA4) with consent mode

• Add the GA4 tag via Google Tag Manager for easier management.
• Enable consent mode to respect Indian privacy expectations (no intrusive tracking before user consent).

2. Set up Google Search Console for the domain

• Verify ownership using the DNS TXT record.
• Submit the XML sitemap (generated by your CMS) to help Google crawl menu pages.

3. Implement local SEO best practices

• Use LocalBusiness schema with fields: name, address, telephone, opening hours, cuisine type.
• Register the restaurant on Google My Business (now “Google Business Profile”) with accurate address, photos and operating hours.

4. Optimize images for speed

• Compress menu photos using WebP format (target < 150 KB per image).
• Serve images via a CDN that has PoPs in India (e.g., Cloudflare, Akamai).

5. Test page load time with Google PageSpeed Insights

• Aim for a First Contentful Paint (FCP) under 2 seconds on a 4G connection typical in Pune.
• Address suggestions such as “Eliminate render‑blocking resources” and “Serve images in next‑gen format”.

Security, Backups and Privacy – Protect customer data and stay within Indian regulations.

A breach can damage reputation and attract penalties under the Information Technology (IT) Act.

1. Harden the CMS and plugins

• Keep core, themes and plugins updated; remove any unused extensions.
• Use a security plugin that limits login attempts and monitors file changes.

2. Implement a Web Application Firewall (WAF)

• Many Indian hosts provide a built‑in WAF; enable rules for SQL injection, XSS and bad bots.

3. Encrypt data at rest and in transit

• SSL/TLS already covers data in transit.
• For stored customer details (phone, email, order history), enable server‑side encryption (e.g., AES‑256).

4. Draft a privacy policy compliant with Indian law

• Mention data collection purposes (order processing, marketing), retention period, and user rights.
• Include a link to the policy in the footer and on the checkout page.

5. Schedule automated backups

• Daily incremental backups and weekly full backups stored in a separate region (e.g., Mumbai → Singapore) protect against ransomware.
• Test restoration at least once a quarter.

Launch Checklist – Verify every item before you point the domain to production.

A final verification step saves you from post‑launch firefighting.

Walk through the table row by row, marking each checkbox only after you have verified the corresponding item on a staging environment.

Frequently Asked Questions

How do I display my GSTIN on the website without violating privacy?

Place the GSTIN in the site footer and on the checkout page where tax calculations occur. It is a public identifier, so no privacy concern arises, but avoid exposing the full PAN of the business.

Which payment gateway offers the simplest UPI integration for a small restaurant?

Razorpay provides a ready‑to‑use UPI button and a JavaScript SDK that works with most Indian CMS platforms. Its sandbox environment lets you test transactions without a live account.

Do I need a separate SSL certificate for each sub‑domain (e.g., order.restaurant.com)?

A single wildcard SSL (e.g., *.restaurant.com) covers all sub‑domains and is cheaper than buying individual certificates. Ensure the wildcard is issued by a reputable CA.

How often should I update my menu on the website?

Update the menu whenever there is a price change, new dish addition, or seasonal item removal. Using a CMS allows you to edit content instantly without developer involvement.

What are the penalties for not showing the FSSAI licence on the site?

The FSSAI can issue a show‑cause notice, and repeated non‑compliance may lead to fines ranging from ₹10,000 to ₹50,000, depending on the severity and duration of the violation.

Can I use a free website builder for my restaurant and still stay GST‑compliant?

Free builders may lack integration with GST‑ready invoicing APIs. If you need automatic tax calculations and downloadable invoices, choose a platform that supports custom code or a paid plan that offers these features.

Where to Start

1. Register your domain and set up a reliable Indian host with SSL.
2. Obtain GST registration and FSSAI licence if not already done.
3. Choose a payment gateway (Razorpay, PayU or Instamojo) and configure UPI.
4. Install a CMS, upload the menu with structured data, and add GST/FSSAI details.
5. Run the launch checklist table, fix any red flags, and go live.

If you need a partner to handle the technical implementation, talk to our team on WhatsApp.