Privacy Policy

1. Introduction

BAJRANG SUPER MARKET ("Bajrang SuperMarket", "Company", "we", "us"), a partnership firm having its principal place of business at Ground Floor, 02, Shilp-3, Sindhu Bhavan Road, Ahmedabad, Gujarat, India 380054 (GSTIN: 24AATFB2737N1ZZ), owns and operates the Bajrang SuperMarketwebsite and mobile applications (the "Platform"). We are committed to protecting your privacy and handling your personal data responsibly and in accordance with Applicable Law.

This Policy is published in compliance with the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 ("SPDI Rules"), the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, and the Digital Personal Data Protection Act, 2023 ("DPDP Act"). It forms part of, and should be read together with, our Terms & Conditions.

2. Definitions and interpretation

• "Personal Data" means any data about an individual who is identifiable by or in relation to such data.
• "Sensitive Personal Data or Information" has the meaning given under the SPDI Rules and includes passwords and financial information such as payment-instrument details.
• "Data Principal" means the individual to whom the Personal Data relates (you).
• "Data Fiduciary" means the person who determines the purpose and means of processing of Personal Data (the Company).
• "Processing" means any operation performed on Personal Data, including collection, storage, use, sharing, and erasure.

3. Scope and applicability

This Policy applies to all users of the Platform, including customers and delivery staff who use our applications, and to all Personal Data we collect through the Platform, our stores, and our communications with you. It does not apply to third-party websites or services that we do not control.

4. Data Fiduciary and contact details

For the purposes of the DPDP Act, the Company is the Data Fiduciary in respect of the Personal Data processed through the Platform. The contact details of our Grievance Officer are set out in Section 16. You may contact us in relation to this Policy at support@shreebajrang.com or +91 99251 05022.

5. Categories of personal data we collect

5.1 Data collected from customers

• Identity and contact details: name, mobile number, and email address.
• Delivery information: delivery address(es), landmark, and location.
• Order information: items purchased, order history, preferences, and feedback.
• Communications: messages and support requests you send us.

5.2 Data collected from delivery staff

• Identity and KYC documents provided during onboarding (such as Aadhaar, PAN, and driving licence), photograph, and bank/UPI details for payments.
• Vehicle details, and location data while on active duty for delivery assignment and tracking.

5.3 Data collected automatically

• Device and usage data: device type, operating system, app version, and IP address.
• Approximate or precise location (with your permission) to show nearby stores and serviceable areas.
• Cookies and similar technologies (see Section 14).

5.4 Sensitive personal data and payments

Online payments are processed by RBI-authorised third-party payment gateways, such as Razorpay. We do not collect or store your full card number, CVV, UPI PIN, or net-banking credentials; these are handled directly by the payment gateway under its own security standards and privacy policy. Any sensitive personal data we do collect is handled in accordance with the SPDI Rules.

6. Lawful bases for processing

We process your Personal Data on one or more of the following bases, as permitted under the DPDP Act and other Applicable Law: (a) your consent; (b) performance of our contract with you, including fulfilling your Orders; (c) compliance with legal obligations; and (d) certain legitimate uses permitted by law. Where we rely on consent, you may withdraw it at any time as described in Section 11.

7. Purposes for which we process personal data

• to create and manage your Account and authenticate you (via OTP);
• to process, fulfil, and deliver your Orders, and to provide customer support;
• to process payments, refunds, and cancellations;
• to send transactional updates about your Orders and Account;
• to personalise your experience and improve our products and services;
• to improve, secure, and troubleshoot the Platform and prevent fraud and misuse;
• to send promotional and marketing communications where you have consented;
• to comply with legal, regulatory, tax, and accounting obligations.

8. Disclosure and sharing of personal data

We do not sell your Personal Data. We share it only as necessary with:

• delivery staff and logistics personnel, to deliver your Order;
• payment gateways, banks, and financial institutions, to process payments and refunds;
• technology and communication service providers (such as hosting, SMS, push notification, and analytics) who act as our data processors under appropriate contractual safeguards;
• professional advisers, auditors, and insurers, where reasonably necessary;
• government, regulatory, or law-enforcement authorities, where required by law, court order, or to protect our rights and the safety of others.

9. Storage and transfer of personal data

Your Personal Data is generally stored and processed on infrastructure located in India. Where any transfer or processing outside India is involved, we will do so only in accordance with the DPDP Act and other Applicable Law, and subject to appropriate safeguards.

10. Retention of personal data

We retain Personal Data only for as long as necessary to fulfil the purposes set out in this Policy, including to provide our services, comply with legal, tax, and accounting obligations, resolve disputes, and enforce our agreements. When Personal Data is no longer required, it is deleted or anonymised.

11. Your rights as a Data Principal

Subject to Applicable Law, you have the right to:

• obtain a summary of the Personal Data we process about you and the processing activities;
• request correction, completion, or updating of inaccurate or incomplete data;
• request erasure of your Personal Data, subject to legal retention requirements;
• withdraw consent previously given, at any time;
• nominate another individual to exercise your rights in the event of your death or incapacity;
• register a grievance with our Grievance Officer.

To exercise any of these rights, contact our Grievance Officer using the details in Section 16. Withdrawing consent or requesting erasure may limit our ability to provide certain services.

12. Account deletion

You may request deletion of your Account and associated Personal Data at any time, in compliance with the data-deletion requirements of the app stores and Applicable Law.

12.1 How to delete your account (Customer App)

• Open the Bajrang SuperMarket customer app and go to Profile / Account settings.
• Select "Delete Account" and confirm your request.
• Alternatively, email support@shreebajrang.com from your registered email or contact our Grievance Officer.

12.2 How to delete your account (Rider / Delivery-Staff App)

• Open the rider app and go to Profile / Account settings.
• Select "Delete Account" and confirm, or contact our Grievance Officer.

12.3 What happens after deletion

On deletion, your Account is deactivated and your Personal Data is deleted or anonymised, except for data we are required or permitted to retain under Applicable Law (for example, invoice and transaction records retained for tax and accounting purposes, and records needed to resolve disputes or prevent fraud). Such retained data is kept secure and used only for those purposes.

12.4 Deletion timeline

We will action a valid deletion request within a reasonable period, ordinarily within thirty (30) days, subject to any legal retention obligations described above.

13. Marketing communications and opt-out

With your consent, we may send you promotional offers and updates by SMS, email, WhatsApp, push notification, or call. You can opt out of marketing communications at any time through your app settings, by using the unsubscribe option, or by contacting us. Opting out of marketing does not affect transactional messages relating to your Orders and Account.

14. Cookies and tracking technologies

We use cookies and similar technologies to keep you signed in, remember your preferences, understand how the Platform is used, measure performance, and improve our services. You can control cookies through your browser or device settings; disabling them may affect certain features of the Platform.

15. Children's privacy

The Platform is intended for users aged 18 and above, and we do not knowingly collect the Personal Data of children. Where the DPDP Act applies to the processing of a child's data, such processing will be undertaken only with verifiable consent of a parent or lawful guardian, and we will not undertake processing likely to cause harm to a child.

16. Grievance Officer and redressal

In accordance with the Information Technology Act, 2000, the SPDI Rules, the IT Intermediary Guidelines Rules, 2021, and the DPDP Act, the details of our Grievance Officer are:

• Name: [GRIEVANCE OFFICER NAME]
• Email: support@shreebajrang.com
• Phone: +91 99251 05022
• Address: Ground Floor, 02, Shilp-3, Sindhu Bhavan Road, Ahmedabad, Gujarat, India 380054

We will acknowledge your grievance within forty-eight (48) hours and endeavour to resolve it within the timelines prescribed under Applicable Law.

17. Security of personal data

We implement reasonable security practices and procedures as required under Section 43A of the Information Technology Act, 2000 and the SPDI Rules, including access controls, encryption of data in transit, and secure infrastructure, to protect Personal Data against unauthorised access, alteration, disclosure, or destruction. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

18. Third-party websites and services

The Platform may contain links to or integrate with third-party websites and services (such as payment gateways and mapping services), which are governed by their own privacy policies. We are not responsible for the privacy practices of such third parties, and we encourage you to review their policies.

19. Changes to this Policy

We may update this Policy from time to time to reflect changes in our practices or in Applicable Law. The revised version will be posted on the Platform with an updated "Last updated" date. Your continued use of the Platform after such change constitutes acceptance of the revised Policy.

20. Governing law and jurisdiction

This Policy is governed by the laws of India, and any dispute relating to it is subject to the exclusive jurisdiction of the competent courts at Ahmedabad, Gujarat, India.

21. Contact us

For any questions, requests, or concerns about this Policy or your Personal Data, contact us at support@shreebajrang.com or +91 99251 05022, or write to our Grievance Officer at the details in Section 16.

Last updated: 20 June 2026

— End of Privacy Policy —