Aforro Groceries Private Limited:

Last Updated: 3rd March, 2023

---

Aforro Groceries Private Limited (“Aforro”), a company incorporated under the Companies Act, 2013, and having its registered office at Plot No.10, Khasra No.873, Rawli Mahmood, Haridwar, Uttarakhand, India, is the owner of the web-based platform ‘aforro.in’ and the mobile application ‘Aforro’ (collectively, the “Platform”). The ‘Company’ is responsible for operating and managing the Platform.

This privacy policy (Privacy Policy) outlines the policies and procedures applicable to the collection, use, disclosure, and protection of Your information shared with Us while You use the Platform. The terms “We”, “Us”, or “Our” refer to the Company, and “You”, “Your”, “Yourself” or “User” refer to the user of the Platform.

This Privacy Policy is an electronic record under the Information Technology Act, 2000 and the rules made thereunder. This Privacy Policy does not require any physical, electronic, or digital signature by Us. It has been published by the provisions of the Information Technology Act, 2000 and the rules made thereunder that require publishing the privacy policy and terms of use on the Platform. Please read the Privacy Policy carefully before using or registering on the Platform to access any material or information, or availing of any Services through the Platform. This Privacy Policy specifies how Your information is collected, received, stored, processed, disclosed, transferred, dealt with, or otherwise handled by Us. This Privacy Policy does not apply to information that You provide to, or that is collected by, any third party through the Platform, and any Third-Party Sites that You access or use in connection with the Services offered on the Platform.

We value the trust You place in Us, and, therefore, We maintain reasonable security standards to secure transactions and Your information.

---

Privacy Policy Acceptance:

By visiting the Platform or setting up/creating a user account (Account) on the Platform, You accept and agree to be bound by the terms and conditions of this Privacy Policy and consent to Us collecting, storing, processing, transferring, and sharing information including Your Personal Information (defined below) under this Privacy Policy. Further, in case You are under the age of 18 years, You

(i) accept and acknowledge that You are accessing the Platform through a parent or a legal guardian who is of a legal age to form a binding contract under the Indian Contract Act, 1872 and such person has accepted this Privacy Policy on Your behalf to bind You; and

(ii) hereby acknowledge that You are accessing this Platform under the supervision of Your parent or legal guardian and have their express permission to use the Services. We may update this Privacy Policy to comply with the regulatory or administrative requirements. If We make any significant changes to this Privacy Policy, We will endeavor to provide You with reasonable notice of such changes, such as via prominent notice on the Platform or any other communication channels on record. To the extent permitted under applicable law, Your continued use of the Services after We publish or send a notice about the changes to this Privacy Policy shall constitute Your consent to the updated Privacy Policy.

---

Incorporation with Terms:

This Privacy Policy is incorporated into and subject to the terms of use available on the Platform (“Terms”). All capitalized terms used herein not defined under this Privacy Policy shall have the meaning ascribed to them under the Terms.

1) Collection of Information:

We collect various information from You when You access or visit the Platform, register or set up an Account on the Platform, or use the Platform. You may browse certain sections of the Platform and the Content, without registering an Account on the Platform. However, to avail of certain Services on the Platform, You are required to set up an Account on the Platform. This includes:

a) Personal Information: Information voluntarily provided by You, such as name, mobile number, email address, date of birth, gender, address details, proof of identity, and any other information voluntarily provided through the Platform.

b) Sensitive Personal Information:

For this Privacy Policy, Sensitive Personal Information consists of information relating to the following:

i) passwords;

ii) financial information such as bank account credit card debit card or other payment instrument details;

iii) physical, physiological, and mental health conditions;

iv) sexual orientation;

v) medical records and history;

vi) biometric information;

vii) any details relating to the above as provided to a body corporate for providing services; and

viii) any details relating to the above, received by a body corporate for processing, stored, or processed under lawful contract or otherwise.

ix) any other information that may be regarded as Sensitive Personal Information” as per the prevailing law for the time being in force.

Provided that, any information that is freely available or accessible in the public domain or furnished under the Right to Information Act, 2005, or any other law for the time being in force shall not be regarded as Sensitive Personal Information. You may be asked for the payment details to process payments for the Services. You may also be asked to provide certain additional information about Yourself on a case-to-case basis.

c) Transactional Information:  If You choose to avail of the Services through the Platform, We will also collect and store information about Your transactions including transaction status, order history, number of transactions, details, and Your behavior or preferences on the Platform. All transactional information gathered by Us shall be stored on servers, log files, and any other storage system owned by any of Us or by third parties.

d) Location-based Information:  When and if You download and/or use the Platform through Your mobile, tablet, and/or any other computer sources or electronic devices, We may receive information about Your location and your IP address, including a unique identifier number for Your device.

The information You provide may be used to provide You with location-based Services including but not limited to search results and other personalized content. If You permit the Platform to access Your location through the permission system used by Your device operating system, the precise location of Your device, when the Platform is running in the foreground or background, may be collected.

You can withdraw Your consent at any time by disabling the location tracking functions on Your device. However, this may affect Your experience of certain functionalities on the Platform. In addition to the above, Your IP address is identified and used to also help diagnose problems with Our server, resolve such problems, and administer the Platform. Your IP address is also used to help identify You and to gather broad demographic information.

The primary goal in doing so is to provide You with a safe, efficient, smooth, and customized experience on the Platform. The information collected allows Us to provide the Services and/or features on the Platform that most likely meet Your needs, and to customize the Platform to make Your experience safer and easier. More importantly, while doing so, We collect the above-mentioned Personal Information from You that We consider necessary for achieving this purpose. 

e) Non-Personal Information: Information like IP address, web request, operating system, browser type, device type, and other browsing information.

We receive and store Non-Personal Information by the use of data collection devices such as “cookies” on certain pages of the Platform for various purposes, including authenticating Users, storing information (including on Your device or in Your browser cache) about Your use of our Services, remembering User preferences and settings, determining the relevancy of content, delivering and measuring the promotional effectiveness, and promote trust and safety, analyzing site traffic and trends, and generally understanding the online behaviors and interests of people.

Certain additional features may be offered on the Platform that is only available through the use of a “cookie”. We place both permanent and temporary cookies on Your device. We may also use cookies from third-party partners for marketing and analytics purposes. You are always free to decline such cookies if Your browser permits, although in that case, You may not be able to use certain features or Services being provided on the Platform.

In general, You can browse the Platform without telling Us who You are or revealing any Personal Information about Yourself. In such a case, We will only collect and store the Non -Personal Information. Once You give us Your Personal Information, You are not anonymous to Us.

Wherever possible, while providing the information to Us, We indicate which fields are mandatory and which fields are optional for You. You always have the option to not provide the Personal Information to Us through the Platform by choosing to not use a particular Service or feature being provided on the Platform, which requires You to provide such information.

We may automatically track certain information about You based on Your behavior on the Platform. We use this information to do internal research on Your demographics, interests, and behavior to better understand, protect, and prove service to You. This information is compiled and analyzed by Us on an aggregated basis and not individually, in a manner that does not specifically identify You. If You choose to post messages on the Platform’s message boards, chat rooms, or other message areas or leave feedback, We will collect and store such information You provide to Us.

We retain this information as necessary to resolve disputes, provide customer support, respond to queries, and inquiries, troubleshoot problems, and improve the Services. If You send us correspondence, such as emails or letters, or if other users or third parties send us correspondence about Your activities or postings on the Platform, We may collect and retain such information in a file specific to You for responding to Your request and addressing concerns about Your use of the Platform. We shall be entitled to retain Your Personal Information and other information for such duration as may be required for the purposes specified hereunder and will be used only following this Privacy Policy.

2) Use of Information:

We use the information, for the following:

a) to provide and improve the Services on the Platform that You request;

b) for internal business purposes and services, including without limitation, warehousing services, delivery services, IT support services, and data analysis services;

c) to resolve disputes, administer our service, and diagnose/troubleshoot technical problems;

d) to help promote a safe service on the Platform and protect the security and integrity of the Platform, the Services, and the users;

e) to design and improve the products and Services and customer relationship management processes;

f) to collect money from You for the Services,

g) to inform You about online and offline offers, products, services, and updates;

h) to customize Your experience on the Platform or share marketing material with You;

i) to detect, prevent, and protect Us from any errors, fraud, and other criminal or prohibited activity on the Platform;

j) to enforce and inform about Our Terms;

k) to process and fulfill Your request for Services or respond to Your comments, and queries on the Platform;

l) to contact You through email, SMS, WhatsApp, telephone, and any other mode of communication about the Services;

m) to allow Our service providers, business partners, and/or associates to present customized messages to You;

n) to communicate important notices or changes in the Services, use of the Platform, and the Terms/policies that govern the relationship between You and the Company;

o) to conform to the legal requirements, compliance/reporting to regulatory authorities, as may be required and to comply with applicable laws;

p) to carry out Our obligations and enforce Our rights arising from any contract entered into between You and Us; and

q) to carry out research with relevant partners.

r) for any other purpose after obtaining Your consent at the time of collection. (collectively “Purposes”).

The Company may occasionally ask You to complete optional online surveys. These surveys may ask You for Your contact information and demographic information (like pin code, or age). We use this information to tailor Your experience on the Platform, providing You with content that We think You might be interested in and displaying content according to Your preferences.

We use Your information to send You promotional emails, however, We will provide You the ability to opt out of receiving such emails from Us. However, You will not be able to opt out of receiving administrative messages, customer service responses, or other transactional communications. We will not share Your Personal Information with another user of the Platform and vice versa without Your express consent.

3) Sharing of Information:

a) Third-Party Service Providers: We may disclose Your Personal Information to third-party vendors, delivery partners, consultants, partners for carrying out research, and other service providers who work for either of Us or provide Services through the Platform and are bound by contractual obligations to keep such Personal Information confidential and use it only for the purposes for which We disclose it to them and maintain the same level of data protection that is adhered to by Us.

This disclosure may be required, for instance, to provide You access to the Services and process payments including validation of Your Payment Details, to facilitate and assist marketing and advertising activities/initiatives, for undertaking auditing or data analysis, or to prevent, detect, mitigate, and investigate fraudulent or illegal activities related to the Services. You expressly consent to the sharing of Your information with third-party service providers, including payment gateways, to process payments and manage Your payment-related information.

We do not disclose Your Personal Information to third parties for their marketing and advertising purposes without Your explicit consent.

b) Compliance with law: We may disclose Your information including Personal Information, to the extent necessary:

(a) to comply with laws, and regulatory requirements and to respond to lawful requests and legal processes or an investigation, (b) to protect Our rights and property, the users, and others, including to enforce the Terms or to prevent any illegal or unlawful activities, and (c) in an emergency to protect Our safety and assets the users, or any person.

In all such events, We shall in no manner be responsible for informing You or seeking Your approval or consent. We may also share aggregated anonymized (and de-identified) information with third parties at Our discretion.

c) Acquisition Sale or Merger: We may, in compliance with applicable laws, share all of Your Personal Information (including Sensitive Personal Information) and other information with any other business entity(ies), in the event of a merger, sale, reorganization, amalgamation, joint ventures, assignment, restructuring of business or transfer or disposition of all or any portion of any of Us.

d) Sharing of information with a third party for operation of the Platform: In the event the license agreement is terminated or the territory of the license is modified or limited in any manner, We may share any or all Your Personal Information (including Sensitive Personal Information, if any) and Non- Personal Information with the incoming licensee continuity of smooth operation of the Platform and seamless user experience.

e) Sharing of information with any member of Our Group or affiliated entities, third parties, and transfer outside India: Subject to applicable law, we may at Our sole discretion, share Personal Information(including Sensitive Personal Information) to Our Group or affiliated entities, any third party that ensures at least the same level of data protection as is provided by Us under the terms hereof, located in India or any other country.

By using the Platform, You accept the terms hereof and hereby consent to Us, sharing Your Personal Information and Sensitive Personal Information with Our Group or affiliated entities, and third parties, including in any location outside India, provided that they ensure that Your Personal Information and Sensitive Personal Information is protected in compliance with standards that are comparable to the standards of protection afforded to it in India.

For this clause the term “Group” shall mean, concerning any person, any entity that is controlled by such person, any entity that controls such person, or any entity that is under common control with such person, whether directly or indirectly, including any Relative or Related Party (as such term defined in the Companies Act, 2013 to the extent applicable) of such person, holding, subsidiary Companies, etc. You also specifically agree and consent to Us collecting, storing, processing, transferring, and sharing information (including Personal Information and Sensitive Personal Information) related to You with third parties such as with entities registered under applicable laws including payment gateways and aggregators, solely for Us to provide Services to You including processing Your transaction requests for the Services or to improve Your experience on the Platform.

4) Security Precautions and Measures:

The Platform has reasonable security measures and safeguards in place to protect Your privacy and Personal Information from loss, misuse, unauthorized access, disclosure, destruction, and alteration, in compliance with applicable laws.

Further, whenever You change or access Your Account on the Platform or any information relating to it, the use of a secure server is offered. It is further clarified that You have and so long as You access and/or use the Platform (directly or indirectly) the obligation to ensure that You shall at all times take adequate physical, managerial, and technical safeguards, at Your end, to preserve the integrity and security of Your data which shall include and not be limited to Your Personal Information.

You will be responsible for maintaining the confidentiality of the Account information and are fully responsible for all activities that occur under Your Account.

You agree to (a)immediately notify Us of any unauthorized use of Your Account information or any other breach of security, and (b) ensure that You exit from Your Account at the end of each session.

We cannot and will not be liable for any loss or damage arising from Your failure to comply with this provision. You may be held liable for losses incurred by any of Us or any other user of or visitor to the Platform due to authorized or unauthorized use of Your Account as a result of Your failure to keep Your Account information secure and confidential.

When payment information is being transmitted on or through the Platform, it will be protected by encryption technology. Hence, we cannot guarantee that transmissions of Your payment-related information or Personal Information will always be secure or that unauthorized third parties will never be able to defeat the security measures taken by Us or Our third-party service providers.

We assume no liability or responsibility for the disclosure of Your information due to errors in transmission, unauthorized third-party access, or other causes beyond Our control. You play an important role in keeping Your Personal Information secure. You shall not share Your Personal Information or other security information for Your Account with anyone. We have undertaken reasonable measures to protect Your rights of privacy concerning Your usage of the Platform and the Services.

However, We shall not be liable for any unauthorized or unlawful disclosures of Your Personal Information made by any third parties who are not subject to Our control. Notwithstanding anything contained in this Privacy Policy or elsewhere, We shall not be held responsible for: a) any security breaches on third-party websites or applications or for any actions of third- parties that receive Your Personal Information; or b) any loss, damage or misuse of Your Personal Information, if such loss, damage or misuse is attributable to a Force Majeure Event.

For this Privacy Policy, a “Force Majeure Event” shall mean any event that is beyond Our reasonable control and shall include, acts of God, fires, explosions, wars or other hostilities, insurrections, revolutions, strikes, labor unrest, earthquakes, floods, pandemic, epidemics or regulatory or quarantine restrictions, unforeseeable governmental restrictions or controls or a failure by a third party hosting provider or internet service provider or on account of any change or defect in the software and/or hardware of Your computer system.

5) Retention of Your Personal Information:

We maintain records of Your Personal Information only till such time it is required for the Purposes, or for as long as required by applicable law. When You request us to delete Your information, we will honor the said request, but we may retain certain information about you for the purposes authorized under this Privacy Policy unless prohibited by law. 

6) Links to Other Third–Party Sites and Collection of Information:

The Platform may link You to other third-party Platforms (“Third-Party Sites”) that may collect Your Personal Information including Your IP address, browser specification, or operating system. We are not in any manner responsible for the security of such information or the privacy practices or content of those Third-Party Sites. Additionally, You may also encounter “cookies” or other similar devices on certain pages of the Third-Party Sites and it is hereby clarified that the Platform does not control the use of cookies by these Third-Party Sites.

These third-party service providers and Third-Party Sites may have their privacy policies governing the storage and retention of Your information that You may be subject to. This Privacy Policy does not govern any information provided to, stored on, or used by these third-party providers and Third-Party Sites.

We recommend that when You enter a Third-Party Site, You review the Third-Party Site’s privacy policy as it relates to safeguarding Your information. We may use third-party advertising companies to serve ads when You visit the Platform. These companies may use information (not including Your name, address, email address, or telephone number) about Your visits to the Platform and Third-Party Sites to provide advertisements about goods and services of interest to You. You agree and acknowledge that We are not liable for the information published in search results or by any Third-Party Sites.

7) Public Posts:

You may provide Your feedback, reviews, testimonials, etc. on the Platform on Your use of the Services (“Posts”). Any content or Personal Information and Posts that You share or upload on the publicly viewable portion of the Platform (on discussion boards, in messages and chat areas, etc.) will be publicly available, and can be viewed by other users and any intellectual property rights in and to such Posts shall vest with Us.

Your Posts shall have to comply with the conditions relating to Posts as mentioned in the Terms. We shall retain an unconditional right to remove and delete any Post or such part of the Post that, in Our opinion, does not comply with the conditions in the Terms or where applicable law requires us to remove such Post. We reserve the right to use, reproduce, and share Your Posts for any purpose. If You delete Your Posts from the Platform, copies of such Posts may remain viewable in archived pages, or such Posts may have been copied or stored by other Users. 

8) Your Consent, Rectification, and Changes to Privacy Policy:

Your acknowledgment: All information disclosed by You shall be deemed to be disclosed willingly and without any coercion. No liability about the authenticity/genuineness/misrepresentation/fraud/negligence of the information disclosed shall lie on Us nor will We be in any way responsible to verify any information obtained from You.

Withdrawal of consent: You may choose to withdraw Your consent provided hereunder at any point in time. In case You do not provide Your consent or later withdraw Your consent, We request You not access the Platform or content or use the Services.

We also reserve the right to not provide You with any Services and/or Content on the Platform and/or features of the Platform once You withdraw Your consent. In such a scenario, We will delete Your information (personal or otherwise) or de-identify it so that it is anonymous and not attributable to You. In the event, We retain the Personal Information post-withdrawal or cancellation of Your consent, we shall retain it only for the period permitted under applicable laws.

You should be aware that some of the Personal Information that may have been shared on third-party websites may continue to be available as we do not have control over these websites. Your Personal Information may also appear in online searches.

Other Personal Information that You have shared with others, or that other users have copied, may also remain visible. You should only share Personal Information with people that You trust because they will be able to save it or re-share it with others, including when they sync the Personal Information to a device.

Rectification of Your Information: You may review, correct, update, and change the information that You have provided to Us, at any point by making changes on the mobile application. Should You choose to update Your Personal Information or modify it in a way that is not verifiable by Us, or leads to such information being incorrect, We will be unable to provide You with access to the Platform or the Services. We reserve the right to verify and authenticate Your identity and Your Personal Information to ensure that We can offer You Services and/or make available the Platform.

We can only keep Your Personal Information up-to-date and accurate to the extent You provide us with the necessary information. It is Your responsibility to notify Us of any changes in Your Personal Information. Access to or correction, updating, or deletion of Your Personal Information may be denied or limited by Us if it would violate another person’s rights and/or is not otherwise permitted by applicable law.

Changes to Our Privacy Policy: We reserve the unconditional right to change, modify, add, or remove portions of this Privacy Policy at any time, and shall provide a notice to You of such changes. Any changes or updates will be effective immediately. You should review this Privacy Policy regularly for changes. You can determine if changes have been made by checking the “Last Updated” legend above.

Your acceptance of the amended Privacy Policy by continuing to visit the Platform or using the Services shall signify Your consent to such changes and agreement to be legally bound by the same. 

9) Grievance Officer:

We have appointed a grievance officer, under authorization, under the Information Technology Act, 2000 and the rules made thereunder, to redress any grievances or complaints You may have regarding the handling of Your Personal Information. You can contact the designated Grievance Officer for this Privacy Policy, namely, Rachit Gupta, at support@aforro.in.

10) Questions?

Please feel free to contact support@aforro.in regarding any questions on the Privacy Policy. We will use reasonable efforts to respond promptly to requests, questions, or concerns You may have regarding Our use of Your Personal Information.

Except where required by law, We cannot ensure a response to questions or comments regarding topics unrelated to this Privacy Policy or the privacy practices specified herein. Further, please note that the Platform stores Your data with the cloud platform of Amazon Web Services provided by Amazon Web Services, Inc., which may store this data on their servers located outside of India.

Amazon Web Services has security measures in place to protect the loss, misuse, and alteration of the information, details of which are available at https://aws.amazon.com/. The privacy policy adopted by Amazon Web Services is detailed in https://aws.amazon.com/privacy. In the event You have questions or concerns about the security measures adopted by Amazon Web Services, You can contact their data protection/privacy team / legal team or designate the grievance officer at these organizations, whose contact details are available in its privacy policy, or can also write to Our Grievance Officer at the address provided above.

Aforro, All rights reserved.