Privacy Policy

1. WHO WE ARE (DATA FIDUCIARY)

CONSPERSA LLP (trading as “Urban Chakki”) is the Data Fiduciary responsible for the processing of your personal data in accordance with the Digital Personal Data Protection Act, 2023 (“DPDP Act”).

Registered Address: Gurusamridhi Heights, Plot no 2, Sector 14, Palm Beach Road, Sanpada, Navi Mumbai - 400705.

2. PERSONAL DATA WE COLLECT

We collect and process your personal data only for specified, explicit, and legitimate purposes. The types of data we collect include:

• Identity & Contact Data: Name and Mobile Number (used for account creation, login, and OTP verification).
• Delivery Data: Residential address and geolocation (if permission is granted by you) to ensure accurate and timely delivery.
• Transaction Data: Details of your order history, preferences, and payment methods. Please note, we do not store your full credit/debit card numbers; this information is securely tokenized and processed by our third-party Payment Aggregator.
• Technical Data: Device ID, IP address, application version, and operating system type. This data is used for fraud prevention, security, and to diagnose and resolve technical issues.

3. PURPOSE OF PROCESSING PERSONAL DATA (LEGITIMATE USES)

By creating an account and using our Platform, you provide your free, specific, informed, and unambiguous Consent for us to process your personal data for the following purposes:

• Order Fulfillment: To process, mill, pack, and deliver your orders accurately.
• Essential Communication: To send you transactional updates regarding your order status (e.g., confirmation, dispatch, delivery) via WhatsApp, SMS, or App Notifications.
• Customer Support: To address your queries, complaints, or feedback regarding product quality, delivery, or other services.
• Service Improvement: To analyze anonymized and aggregated data on app usage and user behavior to enhance the Platform's functionality and user experience.
• Legal & Regulatory Compliance: To comply with our obligations under applicable laws, including FSSAI food safety and traceability requirements.

4. SHARING OF PERSONAL DATA (DATA PROCESSORS)

We may share your personal data with trusted Data Processors who perform services on our behalf. These include:

• Logistics Partners: To facilitate the physical delivery of your orders.
• Payment Gateways: To securely process your payments for orders placed.
• Regulatory Authorities: If required by law, a court order, or FSSAI directives for purposes such as food safety audits or product recalls.

We enter into legally binding agreements with our Data Processors to ensure they adhere to the same level of data protection and confidentiality as we do. We do not sell your personal data to third-party marketing or advertising networks.

5. YOUR RIGHTS AS A DATA PRINCIPAL

Under the DPDP Act, you, as a Data Principal, have the following rights concerning your personal data:

• Right to Access Information: You can request a summary of the personal data we hold about you and a description of the processing activities we undertake.
• Right to Correction and Erasure: You can update or correct your profile information (e.g., address) directly through the App. You may also request the erasure of your personal data by using the “Delete Account” feature.
• Right to Grievance Redressal: You have the right to a readily available mechanism for resolving any grievances you may have regarding our data processing activities.
• Right to Nominate: You may nominate another individual who can exercise your rights under the DPDP Act on your behalf in the event of your death or incapacity.

6. CHILDREN'S DATA

Our Platform is not intended for use by individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have inadvertently collected data from a minor without verifiable parental consent, we will take immediate steps to delete it.

7. WITHDRAWAL OF CONSENT

You have the right to withdraw your consent for the processing of your personal data at any time.

• How to Withdraw: You can withdraw consent by using the “Delete Account” option within the App or by sending a request to our Grievance Officer.
• Effect of Withdrawal: Withdrawing consent will result in the closure of your account, and we will no longer be able to provide you with our products and services. We will cease processing your data, except where retention is required for legal or regulatory purposes.

8. DATA SECURITY

We implement appropriate technical and organizational security measures, including encryption and access controls, to protect your personal data from unauthorized access, disclosure, alteration, or destruction.

9. DATA RETENTION POLICY

We retain your personal data only for as long as is necessary to fulfill the purposes for which it was collected and to comply with our legal obligations. For instance:

• Order Information: Retained as long as your account is active and for a subsequent period as required by tax and corporate laws (e.g., up to 8 years for invoices).
• FSSAI Compliance: Traceability data may be retained for a period stipulated by food safety regulations.

Upon the expiry of the retention period or upon a valid request for erasure, your personal data will be securely deleted or anonymized.

10. CONSENT MANAGER

Should you choose to manage your consents through a “Consent Manager” registered with the Data Protection Board of India, we will ensure that our Platform is interoperable with such a system, allowing you to manage your consent preferences seamlessly.

11. GRIEVANCE REDRESSAL MECHANISM

For any questions, complaints, or to exercise your rights regarding your personal data or our food safety standards, please contact our designated officer:

In compliance with applicable laws, we will acknowledge your complaint within 24 hours and will endeavor to resolve it within 15 days from the date of receipt.