🔒

Your Privacy Matters

We are committed to protecting your personal information and being transparent about how we use it. This policy explains our data practices in detail.

1. Introduction

Kirihat ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Platform (website and mobile application).

Please read this Privacy Policy carefully. By using the Kirihat Platform, you agree to the collection and use of information in accordance with this policy. If you do not agree with the terms of this Privacy Policy, please do not access or use the Platform.

Company Details

  • Name: Kirihat
  • Udyam Registration: [Your Udyam Registration Number]
  • Registered Office: Kirihat, Kachakhana, Golakganj, Hazratganj, Dhubri - 783334, India
  • Contact Email: support@kirihat.com
  • Contact Phone: +91 99576 93472

2. Information We Collect

We collect various types of information to provide and improve our services. Here's what we collect:

2.1. Personal Information

👤

Basic Information

  • Full name
  • Phone number
  • Email address
📍

Location Data

  • Delivery address
  • PIN code
  • City and state
💳

Payment Information

  • UPI address
  • Bank account details (for refunds)
📋

Identity Documents

For Sellers, Vendors & Riders only:

  • PAN Card
  • Voter ID
  • Passport
  • Aadhaar Card
  • Driving License (Riders)
  • Vehicle RC (Riders)

2.2. Usage Information

We collect information about your interactions with the Platform, including:

🛍️
Shopping Activity

Wishlist items, shopping cart contents, order history, and transaction details

🔍
Browsing Behavior

Product searches, browsing history, and pages visited

💬
Communications

Customer support interactions and feedback

2.3. Device and Technical Information

  • Device type and operating system
  • IP address and browser type
  • Mobile network information
  • App version and usage statistics

2.4. App Permissions

⚠️ Important: App Permissions

Our mobile application may request the following permissions. We only access these with your explicit consent:

📱

SMS Verification

Purpose: To automatically verify OTP codes sent by us using the SMS Retriever API.

We do NOT read, store, or share your personal SMS messages.

📍

Location Permission

Purpose: To show nearby products and vendors while you are using the app.

💾

Storage Permission

Purpose: To save images and documents related to your orders.

📷

Camera Permission

Purpose: To allow you to upload product images or profile pictures.

You Control Your Permissions: You may revoke these permissions at any time through your device settings. However, this may limit certain functionalities of the Platform.

2.5. Information from Third Parties

We may receive information from payment gateways and UPI service providers to process transactions securely.

3. How We Use Your Information

We use the collected information for the following purposes:

🚚

Service Delivery

  • Process and fulfill your orders
  • Facilitate communication between users
  • Arrange delivery of products
  • Provide customer support
💰

Payment Processing

  • Process payments and refunds
  • Verify UPI and bank account details
  • Detect and prevent fraudulent transactions
📊

Platform Improvement

  • Understand user preferences
  • Analyze Platform usage
  • Optimize performance
  • Develop new features
📧

Communication

  • Send order confirmations and updates
  • Respond to inquiries
  • Send promotional offers (opt-out available)
  • Notify about policy changes
🛡️

Legal and Security

  • Comply with legal obligations
  • Protect against fraud
  • Enforce our Terms and Conditions
  • Resolve disputes

4. Data Storage and Security

4.1. Data Storage

Firebase Database by Google

We use Firebase Database by Google to store and manage user data. Firebase provides secure cloud storage with industry-standard encryption and reliability.

4.2. Security Measures

We implement appropriate technical and organizational security measures to protect your information:

🔐 Encryption

Data encrypted during transmission and storage

🔑 Authentication

Secure authentication mechanisms

🔍 Audits

Regular security audits and updates

👥 Access Controls

Limited employee access to personal data

💳 Payment Security

Secure payment gateway integration

4.3. Data Security Disclaimer

⚠️ Important Security Notice

While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee absolute security. No method of transmission over the Internet or electronic storage is 100% secure.

In the event of a data breach caused by hacking, malware, unauthorized access, or other security incidents beyond our reasonable control, we will:

  • Notify affected users as soon as reasonably possible
  • Take immediate steps to mitigate the breach
  • Cooperate with law enforcement and regulatory authorities
  • Implement additional security measures to prevent future breaches

Limitation: We shall not be held liable for damages resulting from unauthorized access or security breaches that occur despite our reasonable security measures. Users acknowledge and accept this risk when using the Platform.

5. Data Sharing and Disclosure

We Do Not Sell Your Data

Kirihat does not sell, rent, or trade your personal information to third parties for marketing purposes.

5.1. Sharing for Service Delivery

We may share your information with the following parties to deliver our services:

5.2. Legal Requirements

We may disclose your information if required by law, court order, or government regulation, or if we believe disclosure is necessary to:

  • Comply with legal obligations
  • Protect the rights, property, or safety of Kirihat, our users, or the public
  • Prevent fraud or security threats
  • Enforce our Terms and Conditions

5.3. Business Transfers

In the event of a merger, acquisition, or sale of assets, user information may be transferred to the acquiring entity. We will notify you of such changes.

6. Data Retention

  • We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law.
  • Order and transaction data are retained for accounting, taxation, and legal compliance purposes for a minimum of 7 years as required by Indian law.
  • If you delete your account, we will delete or anonymize your personal information within 30 days, except for data we are required to retain by law.

7. Your Rights and Choices

You have several rights regarding your personal information:

👁️

Access and Update

You have the right to access, review, and update your personal information at any time through your account settings.

🗑️

Account Deletion

You may request deletion of your account and associated data at any time through the Platform.

Upon deletion:
  • All personal information will be permanently removed
  • Order history may be retained for legal compliance
  • Deletion is irreversible and cannot be undone
✉️

Marketing Communications

You may opt out of receiving promotional emails, SMS, or notifications by:

  • Clicking "unsubscribe" in emails
  • Adjusting notification settings
  • Contacting customer support

You'll still receive transactional communications (order confirmations, etc.)

📦

Data Portability

You may request a copy of your personal data in a structured, machine-readable format by contacting support@kirihat.com.

8. Cookies and Tracking Technologies

8.1. Current Status

Kirihat does not currently use cookies or third-party analytics tools on our Platform.

8.2. Future Use

We may implement cookies, web beacons, or similar tracking technologies in the future to enhance user experience, analyze Platform usage, and provide personalized content.

If we implement cookies, we will:

  • Update this Privacy Policy
  • Notify you of the changes
  • Provide information about cookie types and purposes
  • Explain how to manage or disable cookies

9. Children's Privacy

⚠️ Age Restriction

  • Kirihat is not intended for use by children under the age of 18.
  • We do not knowingly collect personal information from children under 18.
  • If we discover that we have inadvertently collected information from a child under 18, we will delete such information immediately.
  • If you are a parent or guardian and believe your child has provided us with personal information, please contact us at support@kirihat.com.

10. Third-Party Links

  • Our Platform may contain links to third-party websites or services that are not operated by us.
  • We have no control over and assume no responsibility for the content, privacy policies, or practices of third-party sites.
  • We encourage you to review the privacy policy of every site you visit.

11. Data Transfers

  • Your information is stored on Firebase servers, which may be located in India or other countries.
  • By using our Platform, you consent to the transfer of your information to these locations.
  • We ensure that data transfers comply with applicable data protection laws.

12. Compliance with Indian Laws

Kirihat complies with applicable Indian data protection laws, including:

📜 Information Technology Act, 2000

We comply with the IT Act and related rules for data protection and security.

🔒 IT Rules, 2011

We follow reasonable security practices for sensitive personal data.

⚖️ Digital Personal Data Protection Act, 2023

We are committed to implementing measures as required by evolving regulations.

13. Grievance Redressal

Grievance Officer

As per the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, we have designated a Grievance Officer to address your concerns.

Response Timeline

1-24 hrs

Acknowledgment of complaint

1-30 days

Resolution (depending on complexity)

14. Changes to This Privacy Policy

  • We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other reasons.
  • We will notify you of any material changes by posting the updated policy on our Platform and sending an email notification.
  • The "Last Updated" date at the top of this policy indicates when it was last revised.
  • Your continued use of the Platform after any changes constitutes your acceptance of the updated Privacy Policy.

16. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

📧
📞
📍

Address

Kirihat, Kachakhana, Golakganj, Hazratganj, Dhubri - 783334, India