Atulyash Privacy Policy

1. Scope

This Privacy Policy applies to customers and other users of:

1. the Atulyash mobile application;
2. the Atulyash website;
3. Atulyash subscription and ordering services; and
4. related customer-support and communication channels.

A separate privacy notice applies to Atulyash riders/employees using the Rider Application.

2. Personal Data We May Collect

Depending upon how you interact with Atulyash, we may collect:

2.1 Account and Identity Information

Name, mobile number, email address where provided and account identifiers.

2.2 Delivery Information

Delivery address, PIN code, locality, delivery instructions and related location information.

2.3 Order and Subscription Information

Products ordered, quantity, delivery schedule, subscription preferences, order history, cancellations, pauses and other transaction information.

2.4 Payment and Wallet Information

Payment status, transaction reference, refund details, Atulyash Wallet balance and wallet transaction history. We do not ordinarily store your complete card number, CVV, UPI PIN or internet-banking password. Payment credentials are processed by authorised payment-service providers such as Razorpay.

2.5 Customer-Support Information

Information contained in queries, complaints, feedback, calls, chats, emails or other communications with Atulyash.

2.6 Device and Technical Information

Depending upon the Application and your device permissions, we may collect limited technical information such as device type, operating system, application version, IP address, diagnostic information, login activity and similar security or performance information.

2.7 Location Information

Where a feature requires location information and you provide the applicable device permission, we may process location information for purposes such as determining serviceability, facilitating delivery or improving location accuracy.

Where precise location is not necessary, we will seek to use less precise information wherever reasonably practical.

2.8 Camera or Photo Access

Where a specific feature requires you to upload or capture a photograph, the Application may request camera or photo-library permission. Such permission will be requested only where required for the relevant feature and subject to your device settings.

3. How We Use Personal Data

We may process personal data for purposes including:

1. creating and authenticating your account;
2. providing OTP-based login or verification;
3. determining serviceability;
4. processing and fulfilling orders;
5. administering subscriptions;
6. processing payments;
7. maintaining wallet balances and transaction records;
8. arranging and tracking deliveries;
9. communicating service, order and subscription updates;
10. processing cancellations and refunds;
11. responding to customer queries and grievances;
12. preventing fraud, abuse and unauthorised access;
13. maintaining and improving our Application, Website and Services;
14. internal analytics and operational planning;
15. complying with accounting, tax, food-safety, consumer-protection and other legal obligations;
16. establishing, exercising or defending legal claims; and
17. sending promotional communications where permitted by law and according to your communication preferences.

4. Service Communications and Marketing

We may send communications necessary to operate your account or provide the Services, including OTPs, payment confirmations, order updates, delivery information, subscription alerts, security notifications and responses to your requests.

Promotional messages, offers and marketing communications will be handled separately in accordance with applicable law and the choices made available to you. You may opt out of promotional communications through available unsubscribe/opt-out mechanisms. Opting out of promotional communications will not prevent necessary transactional or service-related communications.

5. Consent and Your Choices

Where we rely upon consent to process personal data, we will seek consent through a clear affirmative action and provide information reasonably necessary for you to understand the processing. Where applicable, you may withdraw consent using the means made available in the Application or by contacting us. Withdrawal of consent will not affect processing already lawfully undertaken and may affect our ability to provide a feature or Service where the relevant data is necessary for that Service.

6. Disclosure of Personal Data

We do not sell your personal data.

We may disclose personal data where reasonably necessary to:

6.1 Delivery and Operations Personnel

Riders, hub personnel and relevant operations staff may receive information necessary to fulfil your order, such as your name, address, contact information, delivery instructions and relevant order details.

6.2 Payment Providers

Payment-related information may be processed by authorised payment-service providers including Razorpay.

6.3 Technology and Service Providers

We may engage service providers for hosting, cloud infrastructure, OTP/SMS services, communications, analytics, customer support, mapping, security, accounting or similar operational functions. Such providers receive information only as reasonably necessary for their functions and subject to applicable contractual and legal safeguards.

6.4 Professional Advisers

Information may be disclosed where reasonably necessary to auditors, accountants, lawyers, insurers or other professional advisers.

6.5 Corporate Transactions

If Atulyash undergoes a merger, restructuring, investment, acquisition, business transfer or sale of assets, personal data may be disclosed or transferred as part of that transaction, subject to applicable law.

6.6 Legal Requirements

We may disclose information where required by law, court order, lawful government request, law-enforcement request or regulatory obligation.

7. Payment Processing

Payments may be processed by Razorpay or another authorised payment-service provider.

Payment-service providers independently process payment credentials according to their own applicable terms and privacy practices.

Atulyash generally receives transaction information necessary to confirm and reconcile the payment rather than your sensitive payment authentication credentials.

8. Data Retention

We retain personal data only for as long as reasonably necessary for the purpose for which it was collected and for legitimate legal, accounting, tax, fraud-prevention, dispute-resolution and regulatory requirements. Different categories of information may therefore have different retention periods. When information is no longer required, we will take reasonable steps to delete, anonymise or otherwise dispose of it in accordance with applicable law and our retention practices.

9. Security

Atulyash uses reasonable technical and organisational measures designed to safeguard personal data against unauthorised access, misuse, alteration, loss or disclosure.

No electronic system or method of transmission is completely secure. Accordingly, absolute security cannot be guaranteed.

10. Your Rights

Subject to applicable law, you may have rights regarding your personal data, including the ability to:

1. obtain information about the processing of your personal data;
2. request correction or updating of inaccurate or incomplete information;
3. request deletion or erasure where applicable;
4. withdraw consent where processing is based on consent;
5. raise a grievance concerning the processing of your personal data; and
6. exercise such other rights as may be available under applicable law.

Requests may be subject to reasonable identity verification.

11. Account Deletion

Where account-deletion functionality is available through the Application, you may request deletion through that functionality.

You may also contact Atulyash using the details below.

Deletion of an account does not necessarily require immediate deletion of information that Atulyash is legally required or reasonably permitted to retain for transactions, taxation, accounting, fraud prevention, dispute resolution or other lawful purposes.

12. Children

The Atulyash customer Service is intended for persons who are legally capable of entering into transactions.

Customers should be at least 18 years old.

We do not knowingly seek to establish customer accounts for children in their own capacity. If we become aware that personal data of a child has been collected in circumstances inconsistent with applicable law, we will take appropriate steps.

13. Cookies and Similar Technologies

Our Website and Application may use cookies, SDKs or similar technologies where necessary for authentication, security, functionality, analytics and performance.

Where legally required, appropriate choices or notices will be provided.

14. Third-Party Links

The Application or Website may contain links to third-party sites or services.

Their privacy practices are governed by their respective policies and Atulyash is not responsible for independent third-party privacy practices.

15. Changes to this Privacy Policy

We may update this Privacy Policy to reflect changes in our Services, technology, practices or applicable law. The latest version will be published with its updated effective date.

Where required, material changes will be communicated appropriately.

16. Privacy and Grievance Contact

For privacy-related requests, concerns or grievances, contact:

Grievance Officer / Privacy Contact: Designation: ATULYASH FOODS PRIVATE LIMITED Email: Phone: Address: 19-20-21, Work Center, Old Industrial Area, Panipat, Haryana – 132103