1. Information We Collect

To facilitate your grocery orders and deliveries, we collect the following categories of information:

• Directly Provided Data: Name, phone number, email address, and precise delivery addresses.
• Transaction Information: Details of the items ordered, billing information, and payment confirmation (processed through secure third-party gateways).
• Location Data: We collect your GPS location to provide accurate delivery tracking and to show available stores in your area.
• Device Data: IP address, device type, and app usage statistics to improve our platform performance.

2. Legal Basis and Purpose of Processing

In accordance with Section 4 of the DPDPA 2023, we process your data for the following lawful purposes:

• Service Fulfillment: To process your orders, manage payments, and enable delivery partners to reach your location.
• Customer Support: To resolve issues related to your orders or account.
• Safety & Security: To prevent fraud and ensure a secure transaction environment.
• Legitimate Uses: For internal audits, debt recovery, and compliance with legal mandates (Section 7, DPDPA 2023).

3. Data Sharing and Disclosure

We do not sell your personal data. We share your information only with:

• Delivery Partners: Limited to your name, address, and contact number to facilitate the delivery of your groceries.
• Payment Processors: Your payment details are handled directly by PCI-DSS compliant partners. Pujan Sathi does not store full card numbers or CVVs.
• Legal Authorities: When mandated by law or court order to comply with statutory requirements.

4. Data Storage and Retention

Your personal data is stored within servers located in India. We retain your information only for as long as necessary to fulfill the purposes outlined in this policy or to comply with tax and legal record-keeping obligations.

5. Your Rights as a Data Principal

Under the DPDPA 2023, you have the following rights:

• Right to Access: You can request a summary of the personal data we hold about you.
• Right to Correction & Erasure: You may update inaccurate data or request deletion of your account and associated data.
• Right to Withdraw Consent: You may withdraw your consent for data processing at any time through the app settings, though this may limit your ability to use our services.
• Right to Grievance Redressal: You have the right to file a complaint regarding our data practices.

6. Security Measures

We implement "Reasonable Security Practices and Procedures" as defined by the IT Act, 2000. This includes data encryption, secure socket layers (SSL), and restricted access protocols to prevent unauthorized access or data breaches.

7. Children's Privacy

Pujan Sathi does not knowingly collect data from individuals under the age of 18 without verifiable parental consent. If we discover such data has been collected, it will be deleted immediately.

8. Contact Us

If you have questions about this policy or wish to exercise your rights, please contact our Grievance Officer: