Privacy Policy

Privacy Policy

This is a starter / template privacy policy provided for our initial launch. It is not legal advice. Please have it reviewed by a qualified lawyer before relying on it for your business.

Effective date: 27 June 2026

Introduction — Who We Are

Khana Bazaar ("Khana Bazaar", "we", "us", or "our") operates a multi-vendor, hyperlocal e-commerce marketplace that connects customers in India with local sellers and stores offering services such as Grocery, Food, and Pharmacy. We are a marketplace and intermediary: sellers list their own inventory and pricing, and sellers are responsible for fulfilling and delivering the orders you place.

This Privacy Policy explains what personal data we collect, why we collect it, how we use and share it, and the rights you have over your information. It is written to be consistent with India's Digital Personal Data Protection Act, 2023 (the "DPDP Act") and applies to customers, sellers, and visitors who use our website, app, or related services.

By using Khana Bazaar, you agree to the practices described in this policy.

Information We Collect

We collect only the information we need to run the marketplace and deliver your orders.

Account information

  • Name
  • Email address (used as your primary identifier and for sign-in)
  • Phone number (required for sellers, and for customers who choose to add one)

Location and delivery details

  • Delivery addresses you save
  • Precise geolocation coordinates (latitude and longitude) tied to your delivery address, which we use to find stores near you and to confirm that a seller can deliver to your location within their delivery radius

Order and transaction history

  • Items you browse, add to your cart, and order
  • Order status, amounts, delivery details, and payment method used (payments are made through your chosen UPI app)

Device and usage data

  • Device, browser, and app information
  • Log data such as actions taken, pages viewed, search terms, approximate location derived from your network, and timestamps

Seller business and settlement details (sellers only)

  • Business name
  • GST number
  • FSSAI licence details
  • Bank account details, which we use to settle payments owed to you for completed orders

We do not store your UPI PIN, passwords, or full payment credentials. Authentication on Khana Bazaar is passwordless: we send a one-time passcode (OTP) to your email (and, for sellers, also to your phone) and issue a secure sign-in token. We never ask you for a password.

How We Use Your Information

We use your information to:

  • Create and manage your account and verify your identity through OTP
  • Show you nearby stores and products, and confirm delivery serviceability for your address
  • Process, route, and fulfil your orders, and keep you updated on their status
  • Enable payments through UPI and, for sellers, calculate and pay out settlements
  • Send you transactional and service notifications by email, SMS, WhatsApp, and web push (browser) notifications
  • Provide customer and seller support, and handle grievances
  • Detect, prevent, and investigate fraud, abuse, and security incidents
  • Maintain, improve, and analyse the performance of our platform
  • Comply with applicable laws and respond to lawful requests

You can opt in or out of web push notifications on a per-device basis at any time through your account settings or your browser.

Legal Bases / Lawful Purposes

Under the DPDP Act, we process your personal data for lawful purposes, relying on:

  • Your consent, which you give when you create an account, save an address, or opt in to optional notifications. You may withdraw consent at any time (see "Your Rights").
  • Performance of the service you request, such as placing and delivering an order or settling seller payments.
  • Legitimate and legal obligations, such as tax, accounting, regulatory, and fraud-prevention requirements.

Where we rely on your consent, withdrawing it will not affect processing already carried out, but may limit your ability to use certain features.

Sharing & Disclosure

We share personal data only as needed to operate the marketplace:

  • With sellers, to fulfil your orders. When you place an order, we share the relevant details (such as your name, delivery address, contact number, and order contents) with the seller so they can prepare and deliver it.
  • With service providers (data processors) who help us run the platform under our instructions, including:
    • an email provider (for OTPs and order emails),
    • an SMS and WhatsApp provider (for OTPs and order updates), and
    • Google Maps Platform (for address autocomplete, maps, and reverse-geocoding of coordinates). These providers may process your data only to provide their service to us.
  • Payment via UPI. Payments are completed through your chosen UPI application; your interaction with that app is governed by its own terms and privacy policy.
  • For legal compliance, where required to comply with applicable law, a valid legal request, or a court or regulatory order, or to protect the rights, safety, and property of Khana Bazaar, our users, or the public.
  • In a business transfer, such as a merger, acquisition, or reorganisation, in which case we will require the recipient to honour this policy.

We do not sell your personal data.

Cookies & Similar Technologies

We use cookies, local storage, and similar technologies to:

  • keep you signed in and remember your session and cart,
  • remember your delivery location and preferences, and
  • understand how the platform is used so we can improve it.

You can control or clear cookies and local storage through your browser settings. Some features (such as staying signed in or keeping your cart) may not work properly if you disable them.

Data Retention

We keep personal data only for as long as it is needed for the purposes described in this policy, or for as long as required by law. For example:

  • account information is retained while your account is active;
  • order and transaction records, and seller settlement and tax records, are retained for the period required by accounting and tax laws; and
  • data tied solely to optional features (such as a saved address or push subscription) is removed when you delete it.

When data is no longer needed, we delete or anonymise it.

Data Security

We take reasonable technical and organisational measures to protect your personal data, including encrypted transport (HTTPS), passwordless OTP-based sign-in, access controls, and restricted handling of sensitive seller details such as bank account information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security; please help us by keeping access to your email and devices secure.

Your Rights

Subject to applicable law, you have the right to:

  • Access the personal data we hold about you and obtain a summary of how it is processed;
  • Correct or update inaccurate or incomplete data;
  • Erase your personal data where it is no longer required (some data may be retained where the law requires);
  • Withdraw consent for optional processing, such as notifications;
  • Nominate another person to exercise your rights in the event of your death or incapacity, as provided under the DPDP Act; and
  • Grievance redressal — raise a complaint about how your data is handled.

To exercise any of these rights, contact us using the details below. We may need to verify your identity before acting on a request, and we will respond within the timelines required by applicable law. If you are not satisfied with our response, you may escalate to the Data Protection Board of India.

Children

Khana Bazaar is not directed at children. We do not knowingly offer our services to, or knowingly collect personal data from, anyone under the age of 18. If you believe a minor has provided us personal data, please contact us so we can remove it.

Third-Party Services

Our platform relies on the third-party processors described in "Sharing & Disclosure" (email, SMS/WhatsApp, and Google Maps Platform), and payments are completed through external UPI apps. Links to seller stores or other third-party sites may also appear within the platform. These third parties operate under their own privacy policies, and we are not responsible for their practices. We encourage you to review them.

Where Your Data Is Processed

Khana Bazaar primarily serves customers and sellers in India. Some of our service providers (for example, email, messaging, or maps providers) may process or store data on infrastructure located outside India. Where this happens, we take steps to ensure such transfers comply with applicable Indian law and that your data continues to be protected.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will update the "Effective date" above and, where appropriate, notify you through the platform or by email. Your continued use of Khana Bazaar after an update means you accept the revised policy.

Contact Us

If you have questions, requests, or complaints about this policy or your personal data, please contact us:

  • Email: support@khanabazaar.example
  • Grievance Officer: [Grievance Officer name], reachable at support@khanabazaar.example
  • Registered address: [Company registered address]

For data protection and grievance matters, please mark your message for the attention of the Grievance Officer. We will acknowledge and address your concern within the timelines required under the DPDP Act and applicable rules.