Effective date: 5 October 2026 · Last updated: 5 October 2026

1. Who we are and what this policy covers

This Privacy Policy explains how Fooppers Ventures (“Fooppers”, “we”, “us”, “our”) collects, uses, shares and protects your personal data when you use www.fooppers.in, its sub-domains, our mobile apps, our WhatsApp channel and our delivery services (together, the “Platform”).

Fooppers Ventures is a sole proprietorship based in Guwahati, Assam, India (GSTIN: 18BQIPD5462J1ZM). For data protection law, we are the Data Fiduciary for the personal data described here.

We process personal data in line with the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, the Consumer Protection (E-Commerce) Rules, 2020, and the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025 as their provisions come into force.

By using the Platform, or by giving consent where we ask for it, you confirm you have read this policy. Where we rely on consent, you can withdraw it at any time (Section 9). If you do not agree with this policy, please do not use the Platform.

This policy is published in English. On request we will provide it in Assamese, Hindi or any language listed in the Eighth Schedule to the Constitution of India.

2. Personal data we collect

We collect only what we need to take, deliver and support your orders, run the Platform and improve it.

Category

What it includes

How we get it

Identity and contact

Name, mobile number, WhatsApp number, email address

You give it at sign-up, checkout or on WhatsApp

Delivery details

Delivery address, landmark, pincode, map location you pin, delivery instructions

You give it at checkout or in the address sheet

Account data

Login details, saved addresses, order history, wishlist, preferences

Created as you use your account

Order and transaction data

Items, quantities, cart contents (including carts you leave unfinished), amounts, coupons, payment method, payment status, transaction reference

Generated when you shop. We never see or store your full card number, CVV, UPI PIN or net-banking password; those go directly to our payment gateway

Communications

Messages, calls, emails, reviews, feedback, complaints, photos you send us

You send them to us

Voice input

Voice recordings and their transcripts when you use our voice shopping assistant (Fooppers Voice Shop)

Only when you tap the microphone and allow microphone access

Device and technical data

IP address, device type, operating system, browser, screen size, language, approximate location from IP

Collected automatically (Section 3)

Usage and behaviour data

Pages and products viewed, searches, clicks, time on page, scroll depth, cart actions, checkout steps, referring website or app, campaign/UTM tags, visit date and time

Collected automatically (Section 3)

Location data

Precise location, only if you allow it in your browser or app to find your delivery zone

With your permission; you can turn it off anytime

We do not ask for, and you should not send us, sensitive data such as health records, biometric data, Aadhaar, PAN or bank account passwords. We do not knowingly collect information about religion, caste, health or similar matters.

If you give us someone else’s details (for example, a delivery recipient’s name and phone number), you confirm you have their permission to share them for that delivery.

3. Tracking, cookies and analytics

We track how visitors use the Platform so we can see what works, fix problems, prevent fraud and measure our marketing. This section tells you exactly what we track and how to control it.

3.1 Fooppers Insights (our own analytics)

We run our own analytics system, Fooppers Insights, hosted on our servers. It records visits and orders in near real time, including: pages viewed, the device type, operating system and browser, screen size, the traffic source (for example Google, Instagram, WhatsApp, a direct visit or a campaign link with UTM tags), visit times, and the actions you take such as searches, add-to-cart and checkout steps.

Fooppers Insights links this activity to a random visitor identifier stored in a cookie or your browser’s local storage. If you are logged in or place an order, we may connect that activity to your account or order so we can understand the full purchase journey and support you. This data stays with us; we do not sell it and we do not share it with advertisers.

3.2 Cookies and similar technologies

Cookies are small files stored in your browser. We also use local storage, session storage and pixels (tiny images or scripts) that work in a similar way. We use four types:

Type

Purpose

Can you refuse it?

Strictly necessary

Keep you logged in, remember your cart and delivery zone, secure checkout, prevent fraud and bots

No; the site cannot work without them

Functional

Remember your preferences, recent searches and saved address choice

Yes

Analytics

Fooppers Insights and any third-party analytics listed below, to measure visits and behaviour

Yes

Marketing

Measure ad performance and show you relevant Fooppers ads on other sites and apps

Yes

3.3 Third-party analytics and advertising tools

Provider

What it does on our site

Their privacy policy

Google Analytics / Google Tag Manager (Google LLC)

Visit and behaviour statistics

policies.google.com/privacy

Google Ads (Google LLC)

Measures conversions from our Google ads, remarketing

policies.google.com/privacy

Meta Pixel / Conversions API (Meta Platforms)

Measures results of our Facebook and Instagram ads, builds ad audiences

facebook.com/privacy/policy

These providers may set their own cookies and collect your IP address, device data and browsing activity on our site. They use it under their own privacy policies.

3.4 Your choices

  • Cookie banner: on your first visit we ask for your choice. Analytics and marketing tracking stay off until you accept them. You can change your choice anytime from the “Cookie settings” link in our footer.
  • Browser settings: you can block or delete cookies in your browser. Blocking necessary cookies may stop the cart and checkout from working.
  • Opt-out tools: Google Analytics opt-out, Google ad settings and Meta ad preferences.
  • Do Not Track: we treat a Global Privacy Control signal from your browser as a refusal of marketing cookies.

We do not use tracking to make automated decisions that have legal or similarly significant effects on you. We do not track, behaviourally monitor or target advertising at anyone we know to be under 18.

4. How we use your data and why we are allowed to

We use personal data only for the purposes below. Each purpose is consented to separately where the law requires; we do not bundle consents.

Purpose

Data used

Basis

Take, process, deliver and support your orders, including sending order updates

Identity, contact, delivery, order data

Your consent given when you place an order, and the voluntary provision of data for that order (Section 7(a), DPDP Act)

Check whether we deliver to your area and set delivery charges by zone

Pincode, address, location

Same as above

Process payments, refunds and prevent payment fraud

Order and transaction data

Same as above, and legal obligation

Run your account and remember your cart

Account, cart, device data

Consent

Remind you about items left in your cart

Cart, contact, WhatsApp number

Consent; you can opt out anytime

Understand how the Platform is used and improve it (Fooppers Insights and analytics)

Device, usage and behaviour data

Consent through the cookie banner

Measure and personalise marketing, and send offers

Contact, usage data, marketing cookies

Consent; you can opt out anytime

Voice shopping: turn your spoken list into matching products

Voice input and transcript

Consent, given by tapping the microphone

Keep the Platform secure; detect abuse, fake orders and bots

Device, IP, usage data

Legitimate security need and legal obligation

Keep tax, invoice and accounting records; respond to lawful requests from authorities

Order and transaction data

Legal obligation (Section 7, DPDP Act)

Handle complaints, returns and legal claims

All relevant data

Legal obligation and to establish or defend legal claims

We do not sell your personal data. We do not rent it or trade it to anyone. If we want to use your data for a purpose not listed here, we will tell you first and ask for consent where required.

5. WhatsApp, SMS, email and calls

We contact you about your orders on WhatsApp, and may also use SMS, email or a phone call.

  • Order messages: order confirmation, price updates for weight-based items, cancellations, delivery status and delivery confirmation. These are part of the service and are sent whenever you order.
  • Cart reminders: if you leave items in your cart, we may send a WhatsApp reminder. Reply STOP or use the opt-out link to stop these.
  • Offers and promotions: sent only if you opt in. You can opt out at any time by replying STOP, using the unsubscribe link in emails, or writing to us. Opting out of offers does not stop order messages.
  • Delivery calls: our delivery partner may call you to find your address. Your number is shown to them only for that delivery.

WhatsApp messages are sent through the WhatsApp Business Platform, operated by Meta Platforms. Meta processes these messages under WhatsApp’s Privacy Policy. We follow the Telecom Commercial Communications Customer Preference Regulations, 2018 for promotional calls and SMS and respect your Do Not Disturb (DND) preferences.

6. Who we share your data with

We share personal data only with the parties below, only as much as each one needs, and under written terms that require them to protect it and use it only on our instructions (as our Data Processors).

Recipient

Why

Data shared

Our delivery staff and riders

To deliver your order

Name, phone, delivery address, order items, amount to collect

Our payment gateway partner

To process payments and refunds

Name, contact, amount, transaction reference

Hostinger (cloud hosting)

Hosts our website, databases and Fooppers Insights

All data stored on the Platform

Meta Platforms (WhatsApp Business Platform)

Sends order updates and reminders

Name, WhatsApp number, message content

Google (Gmail)

Sends order emails and our replies

Name, email, message content

Google (Gemini API)

Converts voice input to text and helps match it to products in Fooppers Voice Shop; product matching also uses our own product database

Voice recording, transcript

Analytics and advertising tools (Section 3.3)

Measurement and ads, only with your consent

Device, usage data, hashed identifiers

Professional advisers (accountants, lawyers, auditors)

Tax, audit and legal compliance

As needed

We may also disclose data:

  • to government, courts, police or regulators when required by law or a valid order;
  • to protect the rights, safety or property of Fooppers, our customers, staff or the public, including fraud prevention;
  • to a buyer, investor or successor if Fooppers is merged, acquired or restructured, who must keep this policy’s protections.

7. Where your data is stored and how we protect it

Your data is stored on cloud servers provided by Hostinger. Some service providers in Section 6 (such as Google and Meta) may process data outside India. We transfer data abroad only to countries not restricted by the Government of India under Section 16 of the DPDP Act, and with safeguards in our contracts.

We use reasonable security practices, including:

  • HTTPS (TLS) encryption for all data sent between your device and our site;
  • passwords stored only in hashed form;
  • access to customer data limited to staff who need it, with individual logins;
  • firewalls, malware scanning and regular software updates;
  • regular backups and logs of who accessed systems, kept for at least one year to detect misuse;
  • written confidentiality obligations for staff and processors.

No system is completely secure. Please keep your password private and tell us right away if you suspect misuse of your account.

8. How long we keep your data

We keep data only as long as needed for the purpose it was collected or as the law requires, then delete or anonymise it.

Data

How long

Account and profile

While your account is active; deleted within 30 days of a deletion request, except what the law requires us to keep

Orders, invoices, payment records

8 years, as required by tax and accounting laws

Abandoned cart data

90 days

Fooppers Insights and analytics data linked to you

13 months, then anonymised

Voice recordings

Deleted immediately after the request is processed; transcripts kept up to 30 days

Support messages and complaints

3 years from closure

Security and access logs

At least 1 year

Inactive accounts

Deleted after 3 years of no activity; we notify you at least 48 hours before deletion

Consent records

As long as needed to prove consent, up to 7 years

Anonymised statistics that cannot identify you may be kept longer.

9. Your rights

You have the following rights over your personal data:

  • Access: get a summary of the personal data we hold about you, what we do with it, and who we have shared it with.
  • Correction and update: fix inaccurate or incomplete data. You can edit most details in your account yourself.
  • Erasure: ask us to delete your data, unless we must keep it by law (for example, invoices).
  • Withdraw consent: stop any processing based on consent (analytics, marketing, cart reminders, voice). Withdrawing is as easy as giving consent and does not affect processing done before.
  • Nominate: name another person to exercise your rights if you die or become unable to.
  • Grievance redressal: complain to our Grievance Officer (Section 10) and, if not satisfied, to the Data Protection Board of India.

How to use your rights: email hellofooppers@gmail.com with the subject “Privacy Request”. We may ask you to verify your identity, usually by a code sent to your registered number. We respond within 30 days, and sooner where the law sets a shorter time.

If you withdraw consent needed to deliver orders, we may not be able to serve you; we will tell you this before acting.

10. Children, breaches, changes and contact

10.1 Children

The Platform is meant for adults. You must be 18 or older to create an account or place an order. We do not knowingly collect data from anyone under 18 without verifiable consent from a parent or lawful guardian, and we never track, behaviourally monitor or target ads at children. If you believe a child has given us data, write to us and we will delete it.

10.2 Data breaches

If a breach affects your personal data, we will inform you without delay through your registered phone, WhatsApp or email. We will explain what happened, the likely impact, what we are doing about it, and steps you can take. We will report it to the Data Protection Board of India and CERT-In as the law requires.

10.3 Third-party links

The Platform may link to other websites, apps or payment pages. Their privacy practices are their own; please read their policies.

10.4 Changes to this policy

We may update this policy when our services, tools or the law change. The “Last updated” date above shows the latest version. For significant changes, we will notify you on the Platform or by WhatsApp or email, and ask for fresh consent where required.

10.5 Governing law

This policy is governed by the laws of India. Courts at Guwahati, Assam have jurisdiction, without affecting your right to approach the Data Protection Board of India or a consumer commission.

10.6 Grievance Officer and contact

As required by the Information Technology Act, 2000 and the Consumer Protection (E-Commerce) Rules, 2020:

Grievance Officer: Hirak Jyoti Das, Proprietor Fooppers Ventures, Guwahati, Assam, India Email: hellofooppers@gmail.com Hours: Monday to Saturday, 9 am to 6 pm IST

We acknowledge every complaint within 48 hours and resolve it within one month of receipt.

If you are not satisfied with our response, you may complain to the Data Protection Board of India once its complaint process is available to you.