Privacy Policy

Last Updated: 31 January 2026

At Grokal, we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, store, share, and protect your data when you use our platform, services, and applications.

1.Information We Collect

We collect various types of information to provide and improve our services:

1.1 Personal Information

Name, email address, and phone number
Delivery addresses (home, office, etc.)
Payment information (credit/debit card details, UPI ID)
Date of birth and gender (optional)
Profile picture (optional)

1.2 Usage Information

Order history and purchase patterns
Browsing behavior and product preferences
Search queries and interactions with the platform
Customer support communications and feedback

1.3 Device & Technical Information

Device type, model, and operating system
IP address and browser type
App version and crash reports
Cookies and similar tracking technologies

1.4 Location Information

With your permission, we collect location data to provide accurate delivery services, show nearby stores, and estimate delivery times. You can manage location permissions in your device settings.

2.How We Use Your Information

We use your information for the following purposes:

Order Fulfillment: Process and deliver your grocery orders accurately and on time
Communication: Send order confirmations, delivery updates, promotional offers, and customer support messages
Payment Processing: Securely process transactions and prevent fraud
Personalization: Recommend products, create personalized offers, and improve your shopping experience
Service Improvement: Analyze usage patterns, optimize our platform, and enhance features
Customer Support: Respond to inquiries, resolve issues, and provide assistance
Legal Compliance: Meet regulatory requirements, enforce our Terms & Conditions, and protect our rights
Marketing: Send promotional content, special offers, and updates (with your consent)

We may share your information with trusted third parties in the following circumstances:

3.1 Service Providers

We share data with delivery partners, logistics providers, payment processors, cloud storage services, and technology vendors who help us operate our platform. These parties are contractually obligated to protect your data.

3.2 Vendors & Suppliers

We share necessary order details with vendors to fulfill your purchases (e.g., product names, quantities, delivery address).

3.3 Legal & Regulatory Authorities

We may disclose information when required by law, legal process, court orders, or government regulations, or to protect our rights, property, and safety.

3.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

3.5 With Your Consent

We may share information for other purposes with your explicit consent.

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

4.Cookies & Tracking Technologies

We use cookies, web beacons, and similar technologies to enhance your experience and analyze platform usage. Types of cookies we use:

Essential Cookies: Required for platform functionality (login, cart, checkout)
Performance Cookies: Help us understand how users interact with our platform
Functional Cookies: Remember your preferences and settings
Marketing Cookies: Track your activity to deliver relevant ads and promotions

You can manage cookie preferences through your browser settings. Note that disabling certain cookies may affect platform functionality.

5.Data Security

We take data security seriously and implement industry-standard measures to protect your information:

Encryption of sensitive data (SSL/TLS protocols)
Secure payment gateways and PCI-DSS compliance
Regular security audits and vulnerability assessments
Access controls and authentication mechanisms
Employee training on data protection practices
Secure cloud storage with backup systems

Despite our best efforts, no security system is completely foolproof. We encourage you to use strong passwords, enable two-factor authentication, and report any suspicious activity immediately.

6.Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements. When data is no longer needed, we securely delete or anonymize it. You may request deletion of your data at any time, subject to legal requirements.

7.Your Privacy Rights

You have the following rights regarding your personal information:

Access: Request a copy of the personal data we hold about you
Correction: Update or correct inaccurate or incomplete information
Deletion: Request deletion of your personal data (right to be forgotten)
Portability: Receive your data in a structured, machine-readable format
Opt-Out: Unsubscribe from marketing emails and promotional communications
Restriction: Limit how we use your data in certain circumstances
Objection: Object to processing of your data for specific purposes
Withdraw Consent: Revoke consent for data processing at any time

To exercise these rights, contact us at privacy@grokal.in. We will respond to your request within 30 days.

8.Children's Privacy

Grokal's services are not intended for children under the age of 18. We do not knowingly collect personal information from children without verifiable parental consent. If we discover that we have inadvertently collected data from a child, we will delete it promptly. If you believe a child has provided us with personal information, please contact us immediately.

9.Third-Party Links & Services

Our platform may contain links to third-party websites, apps, or services (e.g., payment gateways, social media). We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any personal information. This Privacy Policy applies only to information collected by Grokal.

10.International Data Transfers

Your information may be transferred to and processed in countries outside India, where data protection laws may differ. We ensure appropriate safeguards are in place (such as standard contractual clauses) to protect your data during international transfers.

11.Marketing Communications

With your consent, we may send you promotional emails, SMS messages, push notifications, and in-app messages about new products, offers, and updates. You can opt-out at any time by:

Clicking the "unsubscribe" link in promotional emails
Adjusting notification settings in the app
Contacting customer support
Replying "STOP" to SMS messages

Note: You will still receive transactional messages (order confirmations, delivery updates) even if you opt out of marketing communications.

12.Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or business operations. We will notify you of significant changes by posting the updated policy on our platform and updating the "Last Updated" date. Your continued use of Grokal after such changes constitutes acceptance of the revised Privacy Policy. We encourage you to review this policy periodically.

13.Compliance with Indian Laws

This Privacy Policy complies with applicable Indian data protection laws, including the Information Technology Act, 2000, and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011. We are committed to protecting your data in accordance with these regulations.

By using Grokal, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and sharing of your information as described herein.

Your privacy matters to us. Thank you for trusting Grokal!