Privacy policy

Last updated: [Date]

This policy explains how [Registered legal entity name] ("FreshDealShop", "we") handles personal data when you use our apps and websites. It is intended to comply with the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000 and its rules. [To be reviewed by legal counsel before publication.]

1. Data we collect

  • Account: name, email, mobile number, and a password (stored only as a salted hash).
  • Orders: delivery addresses, items, order history, returns.
  • Business buyers: business name, owner name, GSTIN, PAN, business address.
  • Sellers: store details, GSTIN, KYC documents, and payout bank details (we store only the last 4 digits of the account number in our marketplace database).
  • Payments: processed by our payment gateway partner. We do not store card numbers.
  • Technical: IP address and request logs, for security and fraud prevention.

2. How we use it

To create and secure your account, process and deliver orders, verify sellers and business buyers, handle returns, refunds and support, meet legal and tax obligations, and prevent fraud.

3. Sharing

  • Sellers receive your name, delivery address and phone number only for orders they fulfil. They do not receive your email.
  • Courier and payment partners receive what they need to deliver and process payments.
  • Authorities, where required by law.
  • We do not sell personal data.

4. Retention

[Retention periods per data type, e.g. order and tax records as required by GST law.]

5. Security

Passwords are hashed, access to personal data is limited by role, and identity numbers are masked in internal tools.

6. Your rights

You can request access, correction or erasure of your personal data, withdraw consent, and nominate another person, by contacting our grievance officer listed on the contact page.

7. Changes

We will post updates on this page and change the "last updated" date.