Privacy & Data Protection Policy

1. Introduction & Scope

Kolkata Baazar Technologies Private Limited ("Kolkata Baazar", "we", "our", or "us") is committed to protecting the privacy, confidentiality, and security of our customers, delivery partners, and visitors. This Privacy Policy governs all user interactions across our digital ecosystem, including:

• Kolkata Baazar Customer Mobile Application (Package: com.kolkatabazar.customer) available on Google Play Store.
• Kolkata Baazar Partner Delivery Fleet Application (Package: com.kolkatabazar.partner) available on Google Play Store.
• Official Web Storefront & Customer Portal accessible at https://kolkatabaazar.in.

By downloading, installing, registering, or using our applications or web services, you acknowledge that you have read, understood, and consented to the data collection and processing practices described in this policy.

2. Information We Collect

We collect only the minimum necessary data required to fulfill quick-commerce orders of fresh meat, fish, and seafood, verify accounts securely, and deliver products under strict 0–4°C cold-chain standards.

A. Personal Information You Provide

• Mobile Phone Number: Collected during login and checkout. Used as your primary account identifier and for sending secure One-Time Passwords (OTPs) via SMS.
• Name and Delivery Address: Required to locate your doorstep in Kolkata, determine serviceable dark-store zones (e.g. Shapoorji Newtown Hub KB-SN-01), and execute delivery.
• Email Address (Optional): For digital tax invoices, order receipts, and customer service ticket updates.
• Customer Support Communications: Text messages, feedback notes, and photos uploaded to verify product freshness or butchery cut discrepancies for refunds.

B. Location Data (Foreground & Background)

Location data is vital for hyperlocal fresh meat and fish delivery:

• Customer App: We collect precise GPS coordinates (with your explicit consent) when the app is in the foreground to:
  • Confirm your address is within our active dark-store delivery radius (Action Area I, II, III, New Town, Shapoorji, and Kolkata zones).
  • Calculate real-time delivery ETAs based on distance and live road traffic.
  • Guide the assigned delivery partner directly to your doorstep.
• Delivery Partner App (Riders): We collect precise foreground and background GPS location while a rider is "On Duty" or carrying an active customer order. Background location tracking enables:
  • Live GPS map route updates for the customer until handoff.
  • Dark-store dispatch optimization and cold-chain transit time monitoring (ensuring chilled fish and meat reach the customer under safe temperatures).
  Background tracking halts automatically when the rider goes "Off Duty" or closes their shift.

C. Device, Network & Technical Information

• Device brand, model, operating system version, screen resolution, and unique device identifiers.
• IP address, mobile network operator, connection type, and app crash logs (via Google Play Vitals) used strictly to diagnose technical faults and optimize app performance.

D. Financial and Payment Gateway Information

3. Google Play App Permissions & Justifications

4. How We Use Your Data

• Express Order Fulfillment: Dark-store order picking, Bengali cut butchery customization, and rapid delivery.
• Authentication & Account Security: SMS OTP login verification and fraud detection.
• Customer Care & Grievance Redressal: Resolving quality queries, cold-chain checks, and instant refunds within 2 hours of delivery.
• Legal & Regulatory Compliance: Maintaining statutory sales invoices under the Indian GST Act and Consumer Protection (E-Commerce) Rules, 2020.

5. Third-Party Data Sharing & Non-Disclosure

We share limited data strictly with trusted service partners required for operations:

• Assigned Delivery Fleet: Delivery partner receives only customer name, delivery address, and phone number for the active order duration.
• Payment Gateway: Razorpay (RBI-regulated payment aggregator) for processing encrypted payments.
• SMS Gateways: Telecom-registered SMS providers for instantaneous OTP delivery.
• Mapping & Routing APIs: Google Maps / OpenStreetMap for geocoding and distance calculation.
• Law Enforcement: If mandated by a valid judicial court order or statutory Indian regulatory authority.

6. Account & Data Deletion (Google Play Mandate)

In accordance with Google Play Developer Data Safety policies and the Digital Personal Data Protection Act, 2023, you have the full right to delete your account and associated personal data at any time.

How to request account deletion:

• In-App (Customer App): Open Customer App → Tap Menu / Help & Support → Select "Request Account Deletion" → Confirm.
• Dedicated Web Portal: Visit our publicly available account deletion page at https://kolkatabaazar.in/delete-account, submit your registered mobile number, and your request will be processed immediately.
• Email Request: Send an email from your registered details to privacy@kolkatabaazar.in with the subject "Account Deletion Request".

Upon request, personal identifiers (name, mobile number, saved addresses) are permanently purged within 7 to 14 business days. Historical transaction invoices required for tax audits are retained in anonymized format under Indian GST statutory mandates.

7. Data Security & Storage

We implement enterprise-grade security standards to safeguard your information:

• All network traffic is encrypted in transit using TLS 1.3 / HTTPS.
• Databases are hosted in secure, ISO 27001 certified data center facilities with automated daily backups.
• Strict role-based access control (RBAC) ensures only authorized dark-store and dispatch personnel can view active delivery addresses.

8. Children's Privacy

Our applications and web services are directed exclusively at adult consumers capable of entering legally binding contracts under the Indian Contract Act, 1872. We do not knowingly collect or solicit personal information from minors under 18 years of age. If we learn that a minor has provided us with personal information, we immediately purge such data from our databases.

9. Grievance Officer & Contact Information

In compliance with Rule 5(9) of the Consumer Protection (E-Commerce) Rules, 2020 and Section 5 of the Information Technology Act, 2000, Kolkata Baazar has appointed a dedicated Nodal Grievance Officer:

10. Updates to this Policy

We may update this Privacy Policy from time to time to reflect operational, legal, or regulatory enhancements. Any updates will be published immediately on this URL with a revised "Last Revised" timestamp. Significant updates will also be highlighted in our mobile application.