We process personal data as a Data Fiduciary under the Digital Personal Data Protection Act, 2023 ("DPDP Act") and applicable rules under the Information Technology Act, 2000. By creating an account and placing an order, you consent to the processing described here.
1. Who we are
Grozily operates an online grocery ordering and delivery service. Orders are fulfilled by partner stores listed on the platform.
Registered contact address: Hyderpora, Srinagar, Jammu and Kashmir 190114, India. Email: mohammadizhan710@gmail.com.
2. Personal data we collect
We collect only what we need to create your account, deliver your orders and support you afterwards.
- Identity and contact data: your name, phone number, email address and profile photograph, received from Google when you sign in with your Google account.
- Delivery address data: house or flat number, floor, area, landmark, city, pincode, delivery instructions and any alternate phone number you provide.
- Location data: your approximate or precise device location, collected only when you grant browser location permission, and used to place a map pin and to find stores near you. You may decline and enter your address manually.
- Order data: items ordered, quantities, prices, discounts, fees, order totals, fulfilment choice (delivery or pickup), order status and delivery timestamps.
- Payment method data: whether you chose Cash on Delivery or UPI, and the payment status we record. We do not collect or store your card numbers, UPI PIN, bank credentials or any payment authentication details.
- Photographs you choose to upload: if you use the product scanner, the photograph you capture is sent for automated recognition. We do not retain scanner photographs after the recognition result is returned.
- Technical data: information your browser sends automatically, such as device type and browser version, and error diagnostics needed to keep the service working.
3. How we use your personal data
- To create and maintain your account and authenticate you.
- To accept, process, fulfil and deliver your orders, and to keep you informed of order status and estimated delivery time.
- To share the details necessary for fulfilment with the partner store handling your order, and with delivery personnel.
- To calculate order totals, applicable delivery and service charges, and to reconcile payments.
- To respond to your questions, complaints and grievances.
- To detect, prevent and address fraud, misuse, security incidents and technical faults.
- To comply with legal, regulatory, tax and accounting obligations.
4. Legal basis and your consent
We process your personal data on the basis of the consent you give when you sign up and place orders, and, where applicable, for the legitimate uses permitted under the DPDP Act, such as complying with a legal obligation.
You may withdraw your consent at any time. Withdrawing consent does not affect processing already carried out lawfully, and it may mean we can no longer provide the service to you. Where we must retain records to meet a legal obligation, we will retain only what the law requires.
5. Automated processing and artificial intelligence
Some features use automated processing provided by third-party AI services:
- Search assistance: when a search returns no results, your search text and our product names are sent to an AI service to suggest what you may have meant.
- Product recognition: if you use the scanner, your photograph and our product names are sent to an AI service to identify the product.
- Product descriptions: store administrators may generate product descriptions using an AI service. This does not involve your personal data.
These features do not make any decision that has a legal effect on you, and no automated decision determines whether we accept or refuse your order. We do not send your name, phone number, email address or delivery address to any AI service.
7. Cross-border transfer
Some of the service providers named above process data on servers located outside India. Where that happens, the transfer is made in accordance with the DPDP Act and any restrictions notified by the Central Government.
8. How long we keep your personal data
- Account and profile data: for as long as your account exists.
- Saved delivery addresses: until you delete them or delete your account.
- Order records: retained after delivery for the period required by applicable tax, accounting and consumer protection law, and to resolve disputes.
- Scanner photographs: not retained once the recognition result is returned.
- Your basket: stored on your own device only, not on our servers.
When you delete your account, we erase your profile and saved addresses. We may retain order and transaction records where the law requires us to keep them.
9. Your rights
Under the DPDP Act you have the right to:
- Access a summary of the personal data we hold about you and how we process it.
- Have inaccurate or incomplete personal data corrected, completed or updated. You can edit your name, phone number and addresses in the app at any time.
- Have your personal data erased, subject to any legal retention obligation. You can delete your account from the account panel in the app.
- Nominate another individual to exercise your rights in the event of your death or incapacity.
- Withdraw your consent, and raise a grievance about how we handle your data.
To exercise any of these rights, write to us at mohammadizhan710@gmail.com. We will respond within the period prescribed by law. If you are not satisfied with our response, you may complain to the Data Protection Board of India.
10. Security
We use reasonable security safeguards to protect your personal data, including authentication through Google, encrypted connections, and server-side access rules that restrict each account to its own data and each partner store to its own orders.
No method of transmission or storage is completely secure. Please keep your Google account credentials confidential and tell us promptly if you suspect unauthorised access to your account.
11. Children
Our service is not directed at children. We do not knowingly process the personal data of anyone under 18 years of age without verifiable consent from a parent or lawful guardian, as required by the DPDP Act. If you believe a child has provided us with personal data, contact us and we will delete it.
13. Changes to this policy
We may update this Privacy Policy from time to time. The date at the top of this page shows when it was last revised. Where a change is significant, we will take reasonable steps to notify you.
14. Grievance officer and contact
For any question, request or grievance about your personal data, or about content or conduct on the platform, contact:
Grozily mohammadizhan710@gmail.comHyderpora
Srinagar, Jammu and Kashmir 190114
India
We acknowledge grievances within 24 hours and aim to resolve them within 15 days of receipt, in line with the Consumer Protection (E-Commerce) Rules, 2020 and the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021.