1. TYPE OF INFORMATION COVERED UNDER THIS PRIVACY POLICY
This Privacy Policy applies to information collected and processed by the Company, including the following:
1.1 Personal Information
Personal information refers to information relating to a visitor, or a combination of information that could reasonably be used to identify the visitor.
Personal information may include the visitor’s full name, personal contact numbers, residential address, email address, gender, or date of birth.
While information such as date of birth, when provided in isolation, may not be sufficient to uniquely identify a visitor, a combination of the full name, date of birth, address, and personal contact number may be sufficient to identify the visitor.
1.2 Sensitive Personal Data or Information
Sensitive personal data or information refers to personal information of a User that is collected, received, stored, transmitted, or processed by the Company and may include:
- Passwords.
- Financial information such as bank account details, credit card details, debit card details, Unified Payments Interface (UPI) details, or other payment instrument details required for the User’s chosen mode of payment.
- Biometric information, if provided or used by the User while accessing and using the Platform.
- Any special information received from the User relating to his/her personal preferences, likes, dislikes, or usual purchasing choices made periodically.
- Any details relating to the above categories of personal information provided to the Company for providing a designated service.
- Any information received under the above personal information categories by the Company for processing, storage, or processing under a lawful contract or otherwise.
- The User’s IP address, age, location, address, email address, content of reviews, comments and emails, personal description, photographs, voice recordings, information relating to identity and address documents, credit history information, purchase history, purchasing patterns, products of interest, card details, phone numbers, and email IDs used by the User to connect with customer care or the Grievance Officer, as provided by the User or automatically collected by the Platform and its embedded software through the User’s access to and use of the Platform.
- Any other information that the User may provide, use, furnish, or submit while accessing and using the Platform.
1.3 Publicly Available Information
Please note that any information that is freely available or accessible in the public domain, or provided under the Right to Information Act, 2005, or any other law applicable from time to time, shall not be considered sensitive personal information and shall not be governed by this Privacy Policy.
2. NOTICE FOR USERS
2.1 Acceptance of the Privacy Policy
A condition of each User’s access to and use of the Platforms and other services provided by the Company to Users (collectively referred to as the “Services”) is acceptance of the Terms of Use, which also includes acceptance of this Privacy Policy.
Any User who does not agree with any provision of the Terms of Use or this Privacy Policy is advised not to accept the Terms of Use and should leave the Platforms.
2.2 Voluntary Provision of Information
While browsing the Platforms, a User is not required to provide the personal information described under Sections 1.1 and 1.2 unless the User chooses to avail of or sign up for any of the Services.
All information provided to the Company by a User, including personal information and personally identifiable information, is voluntary and provided solely at the User’s own will and choice, without any force or coercion by the Company.
The User has the right to request withdrawal of his/her/its consent at any time, in accordance with this Privacy Policy and the Terms of Use.
It is the User’s responsibility to exercise caution when providing personally identifiable information about himself/herself/itself or family members while using any of the Services.
The Company does not endorse the content, messages, or information found in any Services and therefore specifically disclaims any liability relating to the Services or any actions resulting from the User’s participation in any Services.
As a condition of using the Services, the User agrees to waive any claims against the Company relating to the same. To the extent that such waiver may be ineffective, the User agrees to release any claims against the Company relating to the information or personal details provided.
2.3 Access, Modification, Correction and Deletion
Users may access, modify, correct, and delete the data about themselves that has been collected pursuant to their decision to become a User.
Any grievances relating to information shared by a User with the Company may be brought to the attention of the Grievance Officer in accordance with the “Feedback or Grievance” section of this Privacy Policy.
2.4 Financial Information and Payment Processing
For the use of Services and purchase of Products, a User may be required to make payments to the Company using a credit card, debit card, wire transfer, net banking, or UPI through the Company’s third-party payment gateway provider.
Such third-party payment gateway providers may be required to collect certain financial information from the User, including, but not limited to, credit card details, debit card numbers, or bank account details (collectively referred to as “Financial Information”).
All Financial Information collected from Users by the Company’s third-party payment gateway providers shall be used only for billing and payment processing.
Verification of Financial Information shall be carried out by the User through an authentication process in which the Company shall have no role and, therefore, shall not be liable for issues relating to the payment process.
2.5 Purpose of Collection and Use of Information
Personal information, personally identifiable information, and/or Financial Information may be collected by the Company on an ongoing basis, without the need for further separate consent from the User, apart from acceptance of this Privacy Policy as provided under Section 2.1, for one or more of the following purposes:
- To identify the User, understand his/her/its needs, and resolve disputes, if any.
- To set up, manage, and offer Products and enhance the Services to meet the User’s requirements.
- To provide ongoing Services.
- To meet legal and regulatory requirements.
- To resolve technical issues and troubleshoot problems.
- To assist the Company in collecting monies from Users for transactions carried out on the Platforms.
- To keep Users informed about the Company’s or third parties’ promotions and offers.
- To customise the User experience.
- To detect and protect the Company against errors, fraud, cybercrimes, and other criminal activities.
- To identify the User and enforce the Terms of Use.
- For any other specific reasons which, before being implemented, shall be communicated to Users through an update to this Privacy Policy.
2.6 Security of Financial and Personal Information
Financial Information collected from Users is processed through secure digital platforms of approved payment gateways that use encryption and comply with reasonably expected technology standards.
While the Company shall make reasonable efforts to ensure that the User’s personal information and Financial Information are adequately protected through security measures prescribed under applicable laws, Users are strongly advised to exercise discretion when providing personal or Financial Information while using the Services, as the Internet may be susceptible to security breaches.
2.7 Cookies and Non-Personally Identifiable Information
The Platforms use temporary cookies to store certain data. The Company does not store personally identifiable information in cookies.
Information collected by the Company, by any means whatsoever, that does not personally identify the User as an individual, such as usage patterns described above, is exclusively owned by the Company.
Such information may be used by the Company and third-party service providers for technical administration of the Platforms, user administration, research, development, and other purposes.
Additionally, the Company may sell or otherwise transfer such research, statistical, or intelligence data in an aggregated or non-personally identifiable form to its parent company, group companies, subsidiaries, associates, affiliates, suppliers, vendors, sister concerns, service providers, service partners, and other third parties (collectively referred to as “Other Parties”).
2.8 Managing Cookies
A User may configure or modify his/her/its web browser settings to delete or disable cookies.
If a User chooses to disable cookies on his/her/its computer or mobile telecommunications device, this may impair, degrade, or restrict access to certain areas of the Platforms.
Merely closing the web browser should ordinarily clear temporary cookies installed by the Company. However, Users are encouraged to use the “clear cookies” functionality of their browsers to ensure deletion, as the Company cannot guarantee, predict, or control the behaviour of all Users’ devices and equipment.
2.9 Advertising
The Company may allow other companies or entities to serve advertisements to Users. These may include third-party advertisement servers, advertising agencies, advertising technology vendors, and research firms.
The Company may target certain advertisements to Users who fit a particular general profile. The Company does not use personally identifiable information to target advertisements to specific Users.
While serving advertisements or optimising the Services for Users, the Company may allow authorised third parties to place or recognise a unique cookie on the User’s browser.
2.10 Location Information
When a User visits or uses the Platforms, the Company may access, collect, monitor, and/or remotely store information relating to the User’s location.
This may include Global Positioning System (GPS) coordinates or similar information relating to the location of the device used by the User to access or use the Platforms.
The location data does not collect or share any personally identifiable information about the User.
2.11 Telephone Call Records
The Company may maintain records of telephone calls received from and made to Users for purposes including administration of Services, research and development, training, business intelligence, business development, and User administration.
The Company may share telephone records with third parties where required by law or where necessary to provide or facilitate Services for the User.
2.12 Surveys and Contests
The Company may conduct contests and surveys from time to time to collect relevant information regarding Users’ preferences.
Participation in such surveys and contests is optional. If a User chooses to participate, his/her/its responses will be kept anonymous.
Demographic information provided by the User while availing of or signing up for Services, or through surveys or contests, may be used to help the Company improve its Services and better meet the needs and preferences of Users.
2.13 Children
The Company does not knowingly collect personal data from children. Only persons above the age of 18 shall be permitted to use the Services, as provided in the Terms of Use.
If, in contravention of the Terms of Use, a person below the age of 18 uses the Services, the Company shall not be held liable or responsible for any damage or injury suffered by such person while logging into the Platforms, using the Services, or entering into any transaction for the purchase of Products through the Platforms.
2.14 Security Measures
The Company has implemented security policies, rules, and technical measures, as required under applicable law, including firewalls, Transport Layer Security (TLS), and other physical and electronic security measures to protect Financial Information and personal information under its control from unauthorised access, improper use or disclosure, unauthorised modification, unlawful destruction, or accidental loss.
The Company shall not be responsible for any breach of security or for any action by third parties that receive Users’ personal data, or for events beyond the Company’s reasonable control, including acts of government, computer hacking, unauthorised access to computer data and storage devices, computer crashes, breaches of security or encryption, and similar events.
2.15 Disclosure Required by Law
The Company may be required to disclose personal information or Financial Information to governmental institutions or authorities where such disclosure is required under any law or judicial decree.
The Company may also disclose such information, in its sole discretion, where it considers such disclosure necessary to:
- Protect its rights or the rights of others.
- Prevent harm to persons or property.
- Combat fraud and credit risk.
- Enforce or appropriately apply the Terms of Use.
2.16 Merger or Acquisition
The Company or any of the Other Parties may merge with or be acquired by another business entity.
In such circumstances, the Company and/or Other Parties may be required to transfer personal information to the relevant merging or acquiring party.
While sharing such personal information with the acquiring or merging entity, the Company and Other Parties shall make reasonable efforts to ensure that the User’s personal information is adequately protected by the acquiring or merging entity through security measures prescribed under applicable laws.
2.17 Reorganisation or Sale of Assets
The Company may also disclose or transfer personal and other information provided by Users to a third party as part of a reorganisation, sale of assets, division, or transfer of part or all of the Company.
Any third party to which the Company transfers or sells its assets may have the right to continue using the personal and other information provided by Users to the Company while using the Platforms for purchasing Products.
2.18 Confidentiality
All Company employees and data processors who have access to or are involved in the processing of personal information or Financial Information provided by Users are required to respect the confidentiality of every User’s personal information and Financial Information.
2.19 Storage of Information
All information collected from Users by the Company is maintained electronically on servers and/or cloud systems and may be accessible to certain employees of the Company.
User information may also be converted into physical form from time to time for effective storage and maintenance.
Regardless of the form in which the information is stored, the Company shall make commercially reasonable efforts to maintain the confidentiality of User information and shall disclose such information only in accordance with the terms of this Privacy Policy.
