Privacy policy

PRIVACY POLICY

FoodKarts — Online Food Delivery Platform

Effective Date: June 6, 2025
Last Updated: June 6, 2025
Owner: Pradip Sah
Brand & Marketing: Unidive Group
Website: foodkarts.in
Service Areas: Oodlabari, Damdim, Bagrakote, Wasabari (West Bengal, India)

1. INTRODUCTION

FoodKarts ("we", "us", "our", "Platform") is committed to protecting the privacy and personal data of its users ("you", "your", "User"). This Privacy Policy explains how we collect, use, store, share, and protect your personal information when you access or use the FoodKarts website at foodkarts.in.

This Privacy Policy is published in compliance with:

The Information Technology Act, 2000
The Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 ("SPDI Rules")
The Digital Personal Data Protection Act, 2023 ("DPDPA")
The Consumer Protection (E-Commerce) Rules, 2020
All other applicable laws of the Republic of India

By using the FoodKarts platform, you consent to the collection and use of your personal data as described in this Privacy Policy. If you do not agree, please discontinue use of the platform immediately.

2. INFORMATION WE COLLECT

We collect the following categories of information from you:

2.1 Information You Provide Directly

Full name
Mobile number
Email address (if provided)
Delivery address and location details
Payment information (processed securely through third-party gateways; we do not store card or UPI details)
Order history and preferences
Feedback, ratings, and reviews you submit
Communications you send to our support team

2.2 Information Collected Automatically

IP address and browser type
Device information (device model, operating system)
Pages visited, time spent on the platform, and clickstream data
Cookies and similar tracking technologies
Approximate location data based on IP address or GPS (if permission is granted)

2.3 Information from Third Parties

Payment confirmation data from payment gateway providers
Delivery status updates from our delivery partners
Information from social login providers if you choose to sign in via Google or similar services

3. HOW WE USE YOUR INFORMATION

FoodKarts uses your personal data for the following purposes:

3.1 To Provide Our Services

Processing and fulfilling your food orders
Communicating order confirmations, updates, and delivery status via SMS or WhatsApp
Sharing your delivery address and contact number with Restaurant Partners and delivery personnel solely to complete your order

3.2 To Improve Our Platform

Analysing usage patterns to improve the website experience
Identifying and fixing technical issues
Developing new features and services

3.3 To Process Payments

Facilitating secure payment transactions
Processing refunds where applicable
Maintaining transaction records as required under Indian financial regulations

3.4 To Communicate With You

Sending order-related notifications and updates
Responding to your queries, complaints, and grievances
Sending promotional offers, discounts, or updates about FoodKarts (you may opt out at any time)

3.5 For Legal and Compliance Purposes

Complying with applicable Indian laws and regulations
Responding to lawful requests from government authorities or courts
Preventing fraud, misuse, or unauthorized access to the platform
Enforcing our Terms of Service

4. LEGAL BASIS FOR PROCESSING YOUR DATA

Under the Digital Personal Data Protection Act, 2023, we process your personal data on the following legal bases:

4.1 Consent — You have given explicit consent for the collection and processing of your personal data by using our platform and accepting these policies.

4.2 Contractual Necessity — Processing is necessary to fulfill the contract between you and FoodKarts, i.e., to deliver your food order.

4.3 Legal Obligation — Processing is required to comply with applicable Indian laws, including tax laws, consumer protection laws, and food safety regulations.

4.4 Legitimate Interests — Processing is necessary for the legitimate interests of FoodKarts, such as improving the platform, preventing fraud, and ensuring platform security, provided such interests do not override your rights.

5. SHARING OF YOUR INFORMATION

FoodKarts does not sell your personal data to any third party. However, we may share your data in the following limited circumstances:

5.1 With Restaurant Partners

Your name, contact number, and delivery address are shared with the Restaurant Partner who prepares your order, solely for order fulfillment purposes.

5.2 With Delivery Personnel

Your name, contact number, and delivery address are shared with our delivery partners or in-house delivery staff solely to complete the delivery of your order.

5.3 With Payment Gateway Providers

Your payment information is processed by our third-party payment gateway providers who are bound by their own privacy policies and are compliant with RBI guidelines and PCI-DSS standards.

5.4 With Technology Service Providers

We may share data with trusted technology vendors, hosting providers, analytics tools, and customer support platforms who process data on our behalf under strict confidentiality agreements.

5.5 For Legal Compliance

We may disclose your information to law enforcement agencies, courts, government bodies, or regulatory authorities when required by law, court order, or to protect the rights and safety of FoodKarts, its users, or the public.

5.6 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of assets of FoodKarts, your data may be transferred to the acquiring entity, subject to the same privacy protections described in this policy. You will be notified of any such change.

6. COOKIES AND TRACKING TECHNOLOGIES

6.1 FoodKarts uses cookies and similar tracking technologies to enhance your experience on the platform.

6.2 Types of cookies we use:

Essential Cookies — Necessary for the platform to function properly, including session management and cart functionality
Analytics Cookies — Help us understand how users interact with the platform so we can improve it
Preference Cookies — Remember your location, language, and order preferences
Marketing Cookies — Used to show you relevant promotional content (only with your consent)

6.3 You can control or disable cookies through your browser settings. However, disabling essential cookies may affect the functionality of the platform.

6.4 We do not use cookies to collect sensitive personal information such as financial data or passwords.

7. DATA RETENTION

7.1 FoodKarts retains your personal data only for as long as necessary to fulfill the purposes described in this Privacy Policy, or as required by applicable Indian laws.

7.2 Retention periods:

Account data — Retained for the duration of your account and up to 3 years after account closure
Order data — Retained for 7 years as required under tax and financial record-keeping laws in India
Payment transaction records — Retained for 8 years as per RBI guidelines
Support communications — Retained for 2 years
Marketing preferences — Retained until you withdraw consent

7.3 After the applicable retention period, your data will be securely deleted or anonymized.

8. DATA SECURITY

8.1 FoodKarts implements reasonable and appropriate technical and organizational security measures to protect your personal data from unauthorized access, disclosure, alteration, loss, or destruction.

8.2 Security measures we employ include:

SSL/TLS encryption for all data transmitted between your device and our platform
Secure, encrypted storage of personal data on our servers
Access controls ensuring only authorized personnel can access personal data
Regular security audits and vulnerability assessments
Two-factor authentication for administrative access

8.3 While we take all reasonable steps to protect your data, no method of transmission over the internet or method of electronic storage is 100% secure. FoodKarts cannot guarantee absolute security of your data.

8.4 In the event of a data breach that is likely to result in a risk to your rights and freedoms, FoodKarts will notify the affected users and the relevant authorities as required under the Digital Personal Data Protection Act, 2023.

9. YOUR RIGHTS AS A DATA PRINCIPAL

Under the Digital Personal Data Protection Act, 2023, you have the following rights with respect to your personal data:

9.1 Right to Access

You have the right to obtain confirmation of whether FoodKarts processes your personal data and to access a summary of the personal data held about you.

9.2 Right to Correction

You have the right to request correction of inaccurate or incomplete personal data held by FoodKarts.

9.3 Right to Erasure

You have the right to request deletion of your personal data where it is no longer necessary for the purpose it was collected, subject to our legal obligations to retain certain data.

9.4 Right to Grievance Redressal

You have the right to have your privacy-related grievances addressed by our designated Grievance Officer within the timelines specified under applicable law.

9.5 Right to Withdraw Consent

Where processing is based on consent, you have the right to withdraw your consent at any time. Withdrawal of consent will not affect the lawfulness of processing carried out prior to withdrawal.

9.6 Right to Nominate

Under the DPDPA, 2023, you have the right to nominate another individual to exercise your rights in the event of your death or incapacity.

To exercise any of the above rights, please contact our Grievance Officer using the details provided in Section 12 of this policy.

10. CHILDREN'S PRIVACY

10.1 FoodKarts is not intended for use by children under the age of 18 years.

10.2 We do not knowingly collect personal data from individuals under 18. If you are a parent or guardian and believe that your child has provided personal data to FoodKarts without your consent, please contact us immediately.

10.3 Upon receiving such a request, FoodKarts will take prompt steps to delete the relevant personal data from our systems.

11. THIRD-PARTY LINKS AND SERVICES

11.1 The FoodKarts platform may contain links to third-party websites, services, or payment gateways. This Privacy Policy does not apply to those third-party platforms.

11.2 FoodKarts is not responsible for the privacy practices or content of any third-party websites. We encourage you to read the privacy policies of any third-party services you access through our platform.

12. GRIEVANCE OFFICER

In accordance with the Information Technology Act, 2000, the SPDI Rules, 2011, and the Digital Personal Data Protection Act, 2023, FoodKarts has appointed a Grievance Officer to address privacy-related concerns:

Grievance Officer Name: Pradeep Sah Designation: Owner & Grievance Officer Platform: FoodKarts Website: foodkarts.in Service Area: Oodlabari, Damdim, Bagrakote, Wasabari, West Bengal, India

You may submit your grievance in writing through the platform's contact page. We shall acknowledge your grievance within 48 hours and endeavour to resolve it within 30 days of receipt.

If your grievance is not resolved to your satisfaction, you may escalate it to:

The Data Protection Board of India (once constituted under the DPDPA, 2023)
The National Consumer Helpline at 1800-11-4000
The appropriate Consumer Disputes Redressal Forum under the Consumer Protection Act, 2019

13. CHANGES TO THIS PRIVACY POLICY

13.1 FoodKarts reserves the right to update or modify this Privacy Policy at any time to reflect changes in our practices, legal requirements, or business operations.

13.2 Any changes will be effective immediately upon posting the revised policy on the platform with an updated "Last Updated" date.

13.3 Where changes are material, we will make reasonable efforts to notify you via the platform or through the contact details you have provided.

13.4 Continued use of the platform after any changes constitutes your acceptance of the revised Privacy Policy. We encourage you to review this policy periodically.

14. GOVERNING LAW

14.1 This Privacy Policy is governed by the laws of the Republic of India.

14.2 Any disputes arising out of or in connection with this Privacy Policy shall be subject to the exclusive jurisdiction of the courts of Jalpaiguri, West Bengal, India, subject to the arbitration provisions in our Terms of Service.

15. CONTACT INFORMATION

For any questions, concerns, requests, or complaints relating to this Privacy Policy or the handling of your personal data, please contact:

FoodKarts Owner: Pradeep Sah Brand & Marketing: Unidive Group Website: foodkarts.in Service Areas: Oodlabari, Damdim, Bagrakote, Wasabari, West Bengal, India

By using FoodKarts, you acknowledge that you have read, understood, and consent to the collection, use, and processing of your personal data as described in this Privacy Policy.

Country/region