Privacy Policy

This Privacy Policy describes the manner in which Vilcart Solutions Private Limited, owner and operator of the Website “https://vilcart.in/ and Mobile Application “Vilcart Smart” ("Website/App”) and provider of services collects, uses, discloses, or otherwise processes your information when you visit our Website/App, when you interact with us through social media, when you request marketing or promotional materials for us, when you visit our office or when you avail any of our services including onboarding as B2B Kirana stores to avail our door step delivery of products ("Services”) .Users, customers, visitors and vendors are collectively referred to as “you” or “your”.

This Privacy Policy forms an integral part of the Company’s Terms of Use which govern your access to and use of the Website/App and/or the Services.

This Privacy Policy is published in compliance with, inter alia:

  1. Section 43A of the Information Technology Act, 2000 (“IT Act”);

  2. Rule 4 of the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Information) Rules, 2011 (“SPDI Rules”); and

  3. Regulation 3(1) of the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 (“Intermediary Guidelines”).

General Terms

  1. By accessing or using the Website/App or the Services, or by otherwise giving us your information, you confirm that you have the capacity to enter into a legally binding contract under the Indian Contract Act, 1872, and have read, understood, and agree with the privacy practices described in this Privacy Policy and the Terms and the collection, storage and processing of your personal information in accordance with them. Please go through this Privacy Policy in detail and contact us if you have any questions or require any clarifications.

  2. The collection and processing of Personal Information such as Name, Kirana store name, mobile number, KYC information of the Kirana stores such as Bank account details, Permanent Account Number (PAN), Aadhaar, Government Service Tax (GST) registration, Business registrations (such Shops & Establishment registrations, Panchayat registrations), and legal metrology certificates. In the course of our delivery of Services, or other contractual or commercial engagements that we may enter into, will be done in accordance with the specific terms applicable thereto, and will override the terms in this Privacy Policy.

  3. You hereby consent to our collection, storage, processing, use, sharing, disclosure, or transfer of your Personal Information as described in this Privacy Policy. We reserve the right to change, modify, add or delete portions of this Privacy Policy, at our sole discretion, at any time. While the Company will periodically inform you of this Privacy Policy or any material changes to this Privacy Policy that the Company makes, you are responsible to check this page regularly to make note of any changes. Your continued use of the Website/App and/or the Services means that you accept and agree to the changes in the Privacy Policy.

  4. If you are accessing or using our Services or the Website/App from an overseas location, you do so at your own risk, and shall be solely liable for compliance with any applicable local laws.

  5. If you do not agree with any of the terms and conditions of this Privacy Policy, please do not proceed further to use this Website/App or any Services.

1What type of Personal Information do we collect?

  1. Information collected from you

    We strive to only collect Personal Information that is adequate, relevant, and limited to achieve the purpose(s) for which it was collected. If you are a user visiting our Website/App, visiting our premises or any of our office locations or availing our Services, you understand that certain personal information in the nature of name, email address, phone number, residential address, designation, location, etc. may be collected from you. We may also collect certain sensitive personal data or information (“SPDI”) such as Pancard, Aadhaar and financial information including bank account details to check the credit worthiness to onboard for invoice financing and any other information from you.

    We may also collect Personal Information that you provide to us on our Website/App, register with us for availing the Services, inquire about our Services, post feedback, participate in any online survey, interact with us on social media, fill out any contact forms for us to assist you on the request raised by you, provide it to us directly such as through business interactions with you or when you visit one of our locations. For example, if you visit our office premises, we may ask that you provide us your first and last name, business association, and email address in order to identify you as a visitor.

  2. Information collected through a User of Services

     
    We may collect Personal Information when you avail our Services and schedule a delivery to an individual or an organization and provide us with such individual or company representative’s contact information such as name, email address, phone number and residential address.

  3. Information collected automatically

    Cookies and other tracking technologies

    Our Website/App uses cookies and other tracking technologies. A “cookie” is a small text file that may be used, for example, to collect information about activity on the Website/App. Some cookies and other technologies may serve to recall information previously indicated or submitted by a user. Most browsers allow you to control cookies, including whether or not to accept them and how to remove them. You may set most browsers to notify you if you receive a cookie, or you may choose to block cookies with your browser.

    Tracking technologies may record information such as internet domain and host names, internet protocol (IP) addresses, browser software and operating system types, stream patterns, and dates and times that the Website/App is accessed. Our use of cookies and other tracking technologies allow us to improve our Website or Mobile Application for your experience.


    At all times, you may refuse all cookies on your browser by changing your settings to the extent permissible on your device. However, by doing so, you may not be able to use certain features on the Website/App or take full advantage of all the offerings and interest-based advertising.

    Location Information

    If you permit us to access information about your location (including general location information derived from the network you use to access the Services), we collect the precise or general location information provided by your device to appropriately tailor certain regional settings, such as preferred language.

    Personal
    Information and Sensitive Personal Data or Information

    The IT Act and the SPDI Rules regulate the collection, usage, retention and disclosure of Personal Information, including SPDI, which are defined under the SPDI Rules as any information that relates to a natural person, which, either directly or indirectly, in combination with other information available or likely to be available to a body corporate, is capable of identifying such person. All Personal Information and SPDI is provided by you to us voluntarily. By providing us your Personal Information, and SPDI, you provide your express consent to us to collect, receive, possess, store, deal, handle, process, transfer and disclose to third parties your Personal Information and SPDI in accordance with the terms of this Privacy Policy.

  4. Information from other sources

    We receive and store certain types of information whenever you interact with us. For example, we obtain certain types of information when your web browser accesses the Website/App and other content served by or on behalf of us on other websites: OS type and version, device brand, browser and its version details, etc. We may also receive information about you that is publicly available or from such third parties who the Company partners with.

    We may collect information from third-party sources, including our service providers, through your interactions with us on social media, through industry, marketing, or trade associations events, and through public agencies.


    In addition, if you choose to interact with us or our partners on social media by posting to our pages, tagging us (or using certain hashtags or other identifiers) in posts, or participating in activities, we may collect Personal Information from the social media account you use to interact with us, including the name associated with the account, the account handle, recent activity, the content of any posts in which we are tagged, and other information that may be contained on your social media profile to allow us to respond to the posts and understand and engage with our audience.

2. How do we use the Personal Information we collect?

    
We use the Personal Information including SPDI we collect to provide our Services to you and make them more effective. We may also use your Personal Information and SPDI for the following purposes:

  1. to provide and improve our Services;

  2.  to analyze user activity on the Website/App and understand user preferences in order to improve the functionalities on the Website/App and improve our Services;

  3. for analytical and statistical purposes;

  4. research;

  5. for non-targeting reasons such as frequency capping, compliance, information reporting or delivery, market research or product development purposes;

  6. to conduct audits and quality assessment procedures;

  7. to screen for potential risk and fraud, and more generally to improve and optimize our Website/App (for example, by generating analytics about how our users browse and interact with the Website/App, and to assess the success of our marketing and advertising campaigns);

  8. to investigate, prevent, or take action regarding illegal activities or situations involving potential threats to the safety of any person including that of our employees, safety of the Company’s assets, violations of our Terms, or as otherwise required by law;

  9. to identify the sender and handle your requests and to otherwise communicate with you;

  10. when in line with the preferences you have shared with us, provide you with information or advertising relating to our services, newsletters and other marketing content;

  11. for direct marketing content to users through various channels, including via e-mail, MMS/SMS or by phone. Such actions are taken by the Company only if you have given your consent, which may be withdrawn at any time;

  12. in some cases, to carry out direct marketing via traditional mail. You will be informed separately about the intention to conduct this type of marketing;

  13. to support our relationship with you and the business with which you are associated, including customer or technical support services, and accounting and billing services;

  14. to request feedback;

  15. to establish and pursue claims or defend against claims;

  16. to comply with applicable law; or

  17. for any other purposes that are permissible under applicable law,

    (collectively “Purposes”).

    We may combine the information that we receive from third parties with the information you give to us and information we collect about you for the Purposes set out above. Further, we may anonymize and/or de-identify information collected from you through the Services or via other means, including via the use of third-party web analytic tools. As a result, our use and disclosure of aggregated and/or de-identified information is not restricted by this Privacy Policy, and it may be used and disclosed to others without limitation.

3How do we share your Personal Information?

  1. Information shared with partners, service providers or group companies: Information about you and the other users of the Website/App and/or our Services form an integral part of our business. We only share Personal Information with third parties who have agreed to comply with and implement data protection measures as required under applicable laws. By using the Website/App or availing our Services, you accept the terms hereof and hereby consent to the storage and processing of the Personal Information by third parties. We, have arrangements with third parties (including as mentioned below) such as affiliates or group companies, service providers including financial service providers, etc., who are the intended recipients and may have access to the Personal Information but shall not disclose such information further to any other individual / entity. When we share information with third parties, we do so after ensuring that such third party has implemented data protection measures at least as protective as those described in this Privacy Policy or as required under applicable law and after ensuring that such third party shall not disclose your Personal Information including SPDI further to any other individual / entity. By using the Website/App or availing our Services, you accept the terms hereof and hereby consent to the storage and processing of the Personal Information and SPDI by third parties.

  2. Our Legal obligations: We may release your Personal Information including SPDI when we believe in good faith that such release is appropriate to comply with applicable law including to: (i) conform to legal requirements or comply with legal processes; (ii) protect rights or property of affiliated companies; (iii) prevent a crime or in interest of national security; or (iv) protect personal safety of our users or the public. We may also disclose your Personal Information or SPDI to enforce or apply our Terms and other agreements; or protect the rights, property or our safety, safety of our users or others. This includes exchanging information with other companies, organisations, government or regulatory authorities for fraud protection and credit risk reduction.

  3. Sharing upon merger or amalgamation or intra-group transfer: Any third party to which we transfer or sell our assets, merge or consolidate with, will have the right to continue to use the Personal Information (including SPDI) provided to us by you, in accordance with the Terms and this Privacy Policy. We may disclose information to our partners, affiliates, subsidiaries, group entities, investors, stakeholders or potential associates in an anonymized and aggregate manner, so that they too may understand how users use our Website/App or engage with us on the Website/App and enable us to create a better overall experience for you.

  4. Transfer to affiliates of the Company, third parties and outside India: Subject to applicable law, we may at our sole discretion, transfer Personal Information and SPDI to any other body corporate (as defined under the Information Technology Act, 2000) or a person that ensures at least the same level of data protection as is provided by us under the terms hereof, located in India or any other country. By using the Website/App or our Services, you accept the terms hereof and hereby consent to us sharing with and/or processing of your Personal Information and SPDI by our group companies, affiliates, service providers, consultants, or third parties, including in any location outside India, provided that they ensure that your SPDI is protected in compliance with standards that are comparable to the standards of protection afforded to it in India.

    You may choose to not provide us with any or all information, but in the event that you do so, we may be unable to provide you with our Services or modify the nature of our relationship with you.

4. How do we protect your Personal Information?

  • In order to protect your Personal Information in line with the applicable data privacy laws and regulations, we have implemented all appropriate technical and organizational measures as required under applicable law. Our security control measures include 256-bit encryption for hosting sites and data, encryption at rest and transit, making certain data read-only, use of unique alphanumeric keys for generating all documents, role-based access control with custom claims, prevention of self-DOS, production/locked mode for all database & storage, development, staging & production server environment, limited access to live/production data for developers and load balancing. Please be aware that the transmission of information via the internet is not completely secure. Although we will do our best to protect your Personal Information, we cannot guarantee the security of your data transmitted through the Website/App. Once we have received your information, we will use strict physical, electronic, and procedural safeguards to try to prevent unauthorised access.
     
  • You agree that the security measures adopted by us are reasonable to protect your Personal Information. We disclaim any liability as a result of any breach of security or unintended loss or disclosure of your Personal Information.

5Retention of your Personal Information and SPDI

  •    We maintain records of Personal Information and SPDI only till such time it is required for the Purposes or when you request us to delete the Personal Information or for as long as required by law.

6. Your rights concerning your Personal Information and SPDI:

  1. Withdrawing your consent

          At any time, you may give or withdraw your consent to us for collecting and processing your Personal Information, including in the manner and for the Purposes. You may withdraw or limit your consent at any time by contacting us at vilcare@vilcart.in.            We may, however, reserve the right to retain and store your Personal Information for our business purposes, whether such Personal Information has been deleted or not, to the extent permitted by law.

       Please note that your withdrawal of consent may result in us not being able to provide you with the Services or terminate any existing relationship that we may have with you.

      b. Information about and access to your Personal Information.
         
          
You may review, correct, update and change the information that you have provided to us, at any point by writing to us at
vilcare@vilcart.in. Should you choose to update your Personal Information or SPDI or modify it in a way that is not verifiable by us, or leads to such information being incorrect, we will be unable to provide you with access to our Website/App or the Services. We reserve the right to verify and authenticate your identity and your Personal Information in order to ensure that we are able to offer you all our Services. We can only keep your Personal Information up-to-date and accurate to the extent you provide us with the necessary information. It is your responsibility to notify us of any changes in your Personal Information. Access to or correction, updating or deletion of your Personal Information or SPDI may be denied or limited by us if it would violate another person’s rights and/or is not otherwise permitted by applicable law.

          You should be aware that some of the Personal Information that may have been shared on third-party websites may still continue to be available as we do not have control over these websites. Your Personal Information may also appear in online searches. Other Personal Information that you have shared with others, or that other users have copied, may also remain visible. You should only share Personal Information with people that you trust because they will be able to save it or re-share it with others, including when they sync the Personal Information to a device.

7Data provided on Third-Party Links

      
Our Website
/App may include hyperlinks to various external websites, and may also include advertisements, and hyperlinks to applications, content or resources (“Third-Party Links”). We have no control over such Third-Party Links, which are provided by persons or companies other than us. You acknowledge and agree that we are not responsible for any collection or disclosure of your information by any external sites, applications, companies or persons thereof. The presence of any Third-Party Links cannot be construed as a recommendation, endorsement or solicitation of any material or content on such Third-Party Links, or any other material on or available via such Third-Party Links.

    You further acknowledge and agree that we are not liable for any loss or damage which may be incurred by you as a result of the collection and/or disclosure of your information
via Third-Party Links, as a result of any reliance placed by you on the completeness, accuracy or existence of any advertising, products services, or other materials on, or available via such Third-Party Links. This will include all transactions, and information transmitted therein, between you and any such third-party sites or applications or resources, such transactions are strictly bi-partite. We shall not be liable for any disputes arising from or in connection with such transactions between you and the aforementioned third parties.

    Such third-party websites, and external applications or resources, accessible
via the Third-Party Links may have their own privacy policies governing the collection, storage, retention and disclosure of your information that you may be subject to. We recommend that you exercise reasonable diligence, as you would in traditional offline channels and practice judgment and common sense before committing to any transaction or exchange of information, including but not limited to reviewing the third-party website or application’s privacy policy.

8Children’s privacy

    
Use of the Website/App or our Services is available only to persons who can form a legally binding contract under the Indian Contract Act, 1872. If you are under 18 years of age, then please do not use or access the Service(s) at any time or in any manner. If you are a parent or guardian and discover that your child under 18 years of age has visited the Website/App or otherwise accessed the Service, then you may alert us at vilcare@vilcart.in and request that we delete that child’s Personal Information from our systems.

    We do not knowingly collect Personal Information or SPDI from users who are less than 18 years of age. Upon discovery of any Personal Information of any child, we shall purge such Personal Information in accordance with applicable law.

9Grievance redressal and contact us

    
If you have questions about this Privacy Policy or any grievances in relation to the collection and processing of your Personal Information, you can contact us at:

    Attn: Firoz Pasha

    Grievance Officer Contact details: firoz@vilcart.in

    We shall endeavour to resolve your grievances within 30 (thirty) days from the date of receipt of such grievance.

 

10Miscellaneous      

  1. Disclaimer: We cannot ensure that all of your Personal Information will never be disclosed in ways not otherwise described in this Privacy Policy. Therefore, although we are committed to protecting your privacy, we do not promise, and you should not expect, that your information or private communications will always remain private. As a user of the Website or Mobile Application or our Services, you understand and agree that you assume all responsibility and risk for your use of the Website, the Internet generally, and the information you post or access and for your conduct on and off the Website.

  2. Indemnity: You agree and undertake to indemnify us in any suit or dispute by any third party arising out of disclosure of information by you to third parties either through our Website/App or otherwise and your use and access of websites, applications and resources of third parties.

  3. Severability: Each clause of this Privacy Policy shall be and remain separate from and independent of and severable from all and any other clauses herein, except where otherwise expressly indicated or indicated by the context of the Privacy Policy. The decision or declaration that one or more clauses are null and void shall have no effect on remaining clauses of this Privacy Policy.

  4. Limitation of Liability: The Company shall not be liable for any consequential, incidental, special, indirect, exemplary or punitive damages, or damages for any loss of profits, revenue or business, regardless of the nature of the claim, even the Company has been notified of the possibility of such damages.

  5. Governing Law and Jurisdiction: This Privacy Policy shall be governed by the laws of India as applicable between residents of India without regard to any principles of conflict of laws. Any and all disputes arising hereunder shall be subject to the exclusive jurisdiction of the courts at Bangalore, Karnataka, India.