Privacy Policy

1. Introduction

GrabBaskets ("we," "us," "our," or "Company") is committed to protecting your privacy and ensuring transparency about how we collect, use, and process your personal data. This Privacy Policy explains our data practices and your privacy rights.

Please read this Privacy Policy carefully. By using GrabBaskets, you acknowledge that you have read and understood our privacy practices.

2. Information We Collect

2.1 Information You Provide Directly

• Account Registration: Name, email address, phone number, date of birth, gender, address
• Profile Information: Profile photo, avatar, preferences, dietary restrictions
• Payment Information: Card details, bank account, UPI information (processed securely)
• Delivery Address: Home/office address, building details, landmarks
• Communications: Messages, customer support interactions, feedback, reviews
• Identity Verification: Government ID, proof of address (for sellers)

2.2 Information Collected Automatically

• Device Information: Device type, OS, browser type, IP address, device ID
• Usage Data: Pages visited, products viewed, search queries, click patterns
• Location Data: GPS coordinates (with your permission), delivery location
• Cookies and Tracking: Session data, preferences, analytics
• Transaction Data: Order history, payment history, delivery details

2.3 Information from Third Parties

• Payment processors and financial institutions
• Delivery partners and logistics providers
• Social media platforms (if you link accounts)
• Third-party analytics providers
• Government and regulatory bodies

3. How We Use Your Information

3.1 Service Delivery

• Process orders and payments
• Arrange delivery of products
• Send order confirmations and updates
• Manage customer support and complaints
• Verify customer identity and prevent fraud

3.2 Communication

• Send promotional emails and offers (with consent)
• Notify about order status and updates
• Respond to inquiries and feedback
• Send important service announcements
• SMS/WhatsApp notifications (where applicable)

3.3 Personalization and Improvement

• Personalize your shopping experience
• Recommend products based on preferences
• Improve app/website functionality
• Conduct user research and analytics
• Optimize performance and troubleshoot issues

3.4 Legal and Compliance

• Comply with laws and regulations
• Enforce our Terms and Conditions
• Protect against fraud and abuse
• Respond to legal requests from authorities
• Maintain records for regulatory compliance

4. Legal Basis for Processing

We process your personal data based on:

• Contractual Necessity: Data required to provide our services
• Consent: Your explicit permission for certain uses (marketing, tracking)
• Legal Obligation: Data required by Indian laws and regulations
• Legitimate Interests: Business purposes like fraud prevention and service improvement

5. Data Sharing and Third Parties

5.1 We Share Data With

• Delivery Partners: Name, phone, address, order details
• Sellers/Merchants: Order information and customer feedback
• Payment Processors: Payment and billing information
• Service Providers: Analytics, hosting, customer support
• Government Agencies: As required by law

5.2 We Do NOT Share

• Your password or security credentials
• Full payment card details (only last 4 digits stored)
• Data with third parties for marketing without consent
• Data for sale or commercial purposes

6. International Data Transfers

GrabBaskets is based in India. Your data may be stored and processed in India or transferred to other countries for our operations. All transfers comply with applicable data protection laws. By using our services, you consent to data transfer to other jurisdictions.

7. Data Security

7.1 Security Measures

• SSL/TLS encryption for data in transit
• AES encryption for sensitive data at rest
• Secure payment gateway integration
• Regular security audits and assessments
• Access controls and authentication
• Firewall and intrusion detection systems

8. Your Privacy Rights

8.1 Right to Access

You have the right to access your personal data and receive a copy in a structured format.

8.2 Right to Rectification

You can request correction of inaccurate or incomplete data.

8.3 Right to Erasure

You may request deletion of your data, subject to legal retention requirements.

8.4 Right to Restrict Processing

You can request restrictions on how we process your data.

8.5 Right to Data Portability

You can request your data in machine-readable format for transfer to other services.

8.6 Right to Object

You can opt-out of marketing communications and certain processing activities.

8.7 Right to Withdraw Consent

You can withdraw consent for any processing at any time.

To exercise these rights, contact: privacy@grabbaskets.com

9. Cookies and Tracking Technologies

9.1 What Are Cookies

Cookies are small text files stored on your device to remember information about you and your preferences.

9.2 Types of Cookies We Use

• Essential Cookies: Required for site functionality (login, checkout)
• Performance Cookies: Collect anonymous analytics data
• Functional Cookies: Remember your preferences and settings
• Marketing Cookies: Track behavior for personalized advertising

9.3 Cookie Management

You can control cookies through your browser settings. Disabling cookies may affect site functionality.

9.4 Other Tracking Technologies

• Web beacons and pixels
• Unique identifiers
• Analytics tools (Google Analytics)
• Heatmap and session recording tools

10. Children's Privacy

GrabBaskets is not intended for children under 18 years old. We do not knowingly collect data from children. If we discover we've collected data from a child, we will delete it immediately. Parents/guardians concerned about data collection can contact us at privacy@grabbaskets.com

11. Data Retention

We retain personal data for as long as necessary to provide our services and comply with legal obligations:

• Active Users: Data retained while account is active
• Inactive Accounts: Retained for 2 years after last activity
• Financial Records: Retained for 7 years per tax regulations
• Legal Cases: Retained as long as disputes are pending

You can request account deletion through your account settings or by contacting support.

12. Third-Party Links and Services

GrabBaskets may contain links to third-party websites and services. We are not responsible for their privacy practices. Please review their privacy policies before providing personal information. Third-party payment gateways and analytics services have their own privacy policies.

13. Marketing and Communications

13.1 Promotional Communications

We send promotional emails, SMS, and push notifications about products, offers, and services. You can opt-out through:

• "Unsubscribe" link in emails
• Notification settings in your account
• SMS opt-out commands
• Contact privacy@grabbaskets.com

13.2 Transactional Communications

We will always send order confirmations, delivery updates, and other essential service notifications regardless of communication preferences.

14. Complaints and Grievances

If you have privacy concerns or believe we've violated your privacy rights, you can:

• Contact us at privacy@grabbaskets.com
• File a complaint with the Data Protection Authority (if applicable)
• Contact the Ministry of Electronics and Information Technology (MeitY) in India

15. Policy Updates

We may update this Privacy Policy to reflect changes in our practices or legal requirements. We will notify you of material changes via email or prominent notice on our website. Your continued use constitutes acceptance of the updated policy.

16. Contact Information

For privacy-related inquiries, questions, or requests:

• Email:grabbaskets@gmail.com
• Support: grabbaskets@gmail.com
• Phone: +91-8438074230
• Address: GrabBaskets, India

17. GRIEVANCE REDRESSAL OFFICER

As per E-Commerce Rules, 2020, our Grievance Redressal Officer is available to address your concerns:

• Email: grievance@grabbaskets.com
• Response Time: Within 48 hours