1. Introduction
Welcome to Kedia Super Bazar ("we", "us", or "our"). We operate a grocery delivery application serving customers in Pandharkawada and surrounding areas. This Privacy Policy explains what personal information we collect, why we collect it, how we use and protect it, and the choices available to you.
By using the Kedia Super Bazar app or website, you agree to the practices described in this policy. If you do not agree, please do not use our services.
2. Information We Collect
A. Information You Provide Directly
- Account details: Name, mobile phone number, and delivery address when you register or place an order.
- Order information: Items you purchase, quantities, special instructions, and order history.
- Payment information: Transaction identifiers from our payment gateway (Razorpay). We do not store raw card numbers or CVV codes on our servers.
- Communications: Messages or feedback you send us through the app or by phone/WhatsApp.
B. Information Collected Automatically
- Device & browser data: Device type, operating system, browser version, and unique device identifiers.
- Usage data: Pages viewed, features used, tap/click events, session duration, and error logs.
- Location data: Approximate location (city/district level) inferred from your IP address to determine delivery eligibility. We do not collect GPS coordinates unless you explicitly share your location to set a delivery address.
- Push notification tokens: A device token used to send you order status notifications. You may revoke this permission at any time in your device settings.
C. Information from Third Parties
- Payment processors (Razorpay): Payment status and transaction references.
- Database provider (Supabase): Hosts our order and user data under strict data processing agreements.
- Analytics (if enabled): Aggregated, anonymised usage statistics. No individual-level profiling is shared with third parties for advertising purposes.
3. How We Use Your Information
We use the information we collect exclusively for the following purposes:
- Order fulfilment: Process, confirm, and deliver your grocery orders.
- Customer communication: Send order confirmations, delivery updates, and service alerts via SMS, WhatsApp, or push notifications.
- Account management: Maintain your account, order history, and preferences.
- Payments: Process transactions securely through Razorpay and handle refunds if required.
- Service improvement: Analyse usage patterns (in aggregate) to improve the app's performance, layout, and product catalogue.
- Legal & safety obligations: Comply with applicable Indian laws, respond to lawful requests, and protect the rights and safety of our users and staff.
We do not sell, rent, or trade your personal information to third parties for marketing purposes.
4. Legal Basis for Processing
We process your personal data under the following legal bases:
- Contract performance: Processing is necessary to fulfil your grocery orders.
- Legitimate interests: Improving our service, preventing fraud, and ensuring platform security.
- Consent: Sending promotional communications or enabling optional features (e.g., location-based delivery suggestions). You may withdraw consent at any time.
- Legal obligation: Where required by Indian law, including the Information Technology Act 2000 and applicable rules.
5. Sharing of Information
We share your information only as described below:
- Delivery staff: Your name, phone number, and delivery address are shared with the delivery person assigned to your order — solely to complete the delivery.
- Payment processor (Razorpay): Payment details are processed by Razorpay under their own Privacy Policy.
- Infrastructure providers (Supabase, Vercel): Your data is stored and served via these cloud platforms under binding data-processing agreements.
- Legal authorities: We may disclose information if required by a court order, government authority, or to protect the rights and safety of our users or the public.
- Business transfers: In the event of a merger or acquisition, user data may be transferred to the successor entity, which will be bound by this Privacy Policy.
6. Data Retention
We retain your personal data for as long as necessary to provide our services and comply with legal obligations:
- Active accounts: Data is retained for the lifetime of your account.
- Order records: Retained for a minimum of 5 years for accounting and tax compliance under Indian law.
- Deleted accounts: Personal identifiers are anonymised within 90 days of account deletion; aggregated order data may be retained for analytics.
- Push notification tokens: Removed when you uninstall the app or revoke notification permissions.
7. Data Security
We implement industry-standard safeguards to protect your information:
- All data in transit is encrypted using TLS 1.2 or higher (HTTPS).
- Database access is restricted by role-based permissions and row-level security policies.
- Payment data is handled entirely by PCI-DSS-compliant Razorpay infrastructure.
- Access to production systems is limited to authorised personnel only.
No system is completely immune to breaches. In the unlikely event of a data breach affecting your rights, we will notify affected users promptly and take corrective action.
8. Your Rights
You have the following rights regarding your personal data:
- Access: Request a copy of the personal data we hold about you.
- Correction: Ask us to correct inaccurate or incomplete data.
- Deletion: Request deletion of your account and personal data ("right to be forgotten"), subject to our legal retention obligations.
- Portability: Receive your data in a structured, commonly used format.
- Opt-out of communications: Unsubscribe from promotional messages at any time by replying "STOP" to any message or contacting us directly.
- Withdraw consent: Where processing is based on consent, you may withdraw it at any time without affecting prior processing.
To exercise any of these rights, please contact us using the details in Section 12 below. We will respond within 30 days.
9. Children's Privacy
Our services are not directed to individuals under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.
10. Third-Party Links and Services
Our app may contain links to third-party websites or integrate with external services (e.g., payment gateways, maps). We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies before sharing any personal information with them.
11. Tax Invoices & Receipts
The order summaries and digital receipts generated by the Kedia Super Bazar application are provided for informational and reference purposes only and do not constitute an official Tax Invoice under the Goods and Services Tax (GST) Act, 2017, or any other applicable Indian taxation statute.
Customers requiring a formal GST Tax Invoice for business reimbursement, input tax credit, or any other statutory purpose must visit the Kedia Super Bazar store in Pandharkawada in person and request the invoice at the time of, or within a reasonable period after, finalisation of their purchase. Kedia Super Bazar reserves the right to issue such invoices subject to applicable GST registration thresholds and statutory obligations.
12. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we make material changes, we will:
- Update the "Last Updated" date at the top of this page.
- Notify active users via in-app notification or SMS where required.
Continued use of the app after the effective date of changes constitutes acceptance of the updated policy.
13. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please reach out to us:
Kedia Super Bazar
📍 Pandharkawada, Yavatmal District, Maharashtra, India
📱 Available via the app's in-built contact / WhatsApp feature
🌐 kedia-super-bazar.vercel.app
We aim to respond to all privacy-related inquiries within 30 business days.