Privacy policy

What we collect when you use this site, why, who it is shared with, and how long it is kept.

This page is a draft. The bracketed sections still need to be written and reviewed before launch.

Who we are

This site is operated by Infratechcorp Solution LLP, 109, Vaijnath, Borisana 5, Borisana, Kalol, Gandhinagar, Gujarat 382721. We decide how your personal data is used, and we answer for it.

What we collect

Your account — name, mobile number, email address if you give one, and your password stored only as a one-way hash. If you sign in with Google, we receive your name, email address and Google account id; we do not receive your Google password.
Addresses you save for delivery, and the delivery area you choose while browsing.
Orders — what you bought, from which shop, what you paid, and the invoices issued. Card and UPI details are handled by the payment gateway; we never see or store them.
Reviews you write, with any photos you add.
How you use the shop — searches and how many results they found, products you view, items you add to or remove from your cart or wish list, checkout and payment steps, coupon codes that did not apply (the fact, not the code), and the delivery area and device type (website or app) at the time. This is linked to your account when you are signed in, and to a random browser id when you are not.
Where you arrived from — if you first reached the site through a link carrying a campaign tag or a referral code, that label, recorded once with your sign-up.
Technical logs — your IP address and requests, kept by our servers for security and to fix faults.

Why we use it

To take, deliver, invoice and support your orders, and handle returns and refunds.
To keep your account secure and stop fraud and abuse.
To send the one-time codes you ask for, and messages about your orders.
To understand, in aggregate, how the shop is used — what people look for and cannot find, where checkouts stop, which areas we serve well — and to improve the range and the site.
To meet our tax, accounting and legal obligations.

We do not sell your personal data, and we do not use it to show you advertising on other websites.

[State the legal basis relied on for each purpose, and whether any use needs your separate consent]

Who it is shared with

The shop that fulfils your order receives your name, delivery address, contact number and the items ordered, so it can deliver. Shops also see totals for their own products — how often they were viewed, added to carts and bought — but never who viewed them, and never your searches.
Razorpay, to process online payments and refunds.
Google, if you choose Sign in with Google.
SMS and WhatsApp messaging providers, to deliver one-time codes and order messages to your number.
Location lookup services (OpenStreetMap and postalpincode.in) receive the pincode or map point you choose, so we can find the area and the shops that serve it. They are asked by our servers, with no name or account attached.
Our hosting provider, whose servers in India store and run the site.
An error-reporting channel used by our team, which may receive your account number and the page involved when something fails on our side — never your password or payment details.
Authorities, where the law requires us to.

We do not use third-party analytics or advertising trackers: usage is recorded on our own servers.

What is stored in your browser

A sign-in cookie that keeps you signed in, and your language choice.
The delivery area you chose, and a cart id if you shop before signing in.
A random browser id, used only to count your visit as one visit, and the campaign label you first arrived by, if any.

Clearing your browser's storage for this site removes all of these.

How long we keep it

Browsing and shopping activity is kept item by item for 90 days, then deleted. Only totals that no longer identify you are kept after that.
Orders and invoices are kept for as long as tax and accounting law requires. [state the period]
Your account is kept while you use it. [state what happens to an account that is closed or unused]

Your rights

You can ask to see the personal data we hold about you, to have it corrected or completed, and to have it erased where we are not required to keep it. You can also withdraw a consent you have given, and name someone to act for you. Write to us at the address below.

[State how requests are verified and how long a reply takes]

Children

This shop is for adults. [Confirm the minimum age, and what happens if a child's account is found]

Contact and grievances

Privacy questions and requests: [privacy contact email].

Grievance officer: [name, designation and contact of the grievance officer]

[Date this policy took effect, and how customers are told of changes]