Privacy Policy
Your privacy matters to us. This policy explains how Chatniwala collects, uses, and protects your personal data.
This Privacy Policy describes how Chatniwala (“Company”, “we”, “us”, or “our”) collects, uses, processes, and protects personal data of users (“you”, “your”) when you access or use https://chatniwala.co.in.
1. Legal Basis of Processing
We process your personal data in accordance with:
- Digital Personal Data Protection Act, 2023 (India)
- Information Technology Act, 2000 & SPDI Rules
- GDPR principles (where applicable)
Processing is based on:
- Your consent
- Performance of contract (order fulfillment)
- Legal obligations
- Legitimate business interests
2. Data We Collect
a. Personal Data
- Full name
- Phone number
- Email address
- Shipping & billing address
b. Financial Data
- Payment details (processed via secure third-party payment gateways; we do not store card details)
c. Technical Data
- IP address
- Browser type
- Device information
- Cookies and usage data
3. Purpose of Processing
We process your data for:
- Order processing, fulfillment, and delivery
- Customer service and dispute resolution
- Transaction verification and fraud prevention
- Marketing and promotional communication (only with consent)
- Website analytics and performance improvement
4. Data Sharing & Disclosure
We do not sell personal data. Data may be shared with:
- Payment processors (e.g., Razorpay, Stripe)
- Logistics partners (for delivery)
- IT & analytics service providers
- Legal authorities, if required under applicable law
All third parties are contractually obligated to maintain confidentiality and data security.
5. Cross-Border Data Transfer
Your data may be processed or stored outside India by third-party service providers.
We ensure such transfers comply with applicable data protection laws and adequate safeguards.
6. Data Retention
We retain personal data only as long as necessary for:
- Order fulfillment
- Legal and regulatory compliance
- Dispute resolution
After this, data is securely deleted or anonymized.
7. Your Rights (DPDP + GDPR Aligned)
You have the right to:
- Access your personal data
- Correct inaccurate or incomplete data
- Withdraw consent at any time
- Request erasure of your data
- Grievance redressal
To exercise your rights, contact:
8. Data Security
We implement reasonable security practices under Rule 8 of SPDI Rules, including:
- SSL encryption
- Secure servers
- Restricted access controls
9. Cookies Policy
We use cookies for:
- Website functionality
- Analytics
- Personalized experience
You may disable cookies via browser settings.
10. Children’s Data
Our services are not intended for individuals under 18 years. We do not knowingly collect such data.
11. Grievance Officer
As per Indian law, you may contact our Grievance Officer:
12. Policy Updates
We may update this policy periodically. Continued use constitutes acceptance.