This Privacy Policy describes how Bhookha and its affiliates (collectively, "Bhookha", "we", "our", "us") collect, use, share, protect, and otherwise process your information/personal data through our website https://www.bhookha.co (hereinafter referred to as the "Platform").

You may be able to browse certain sections of the Platform without registering with us. We do not offer any product/service under this Platform outside India, and your personal data will primarily be stored and processed in India.

By visiting this Platform, providing your information, or availing any product/service offered on the Platform, you expressly agree to be bound by this Privacy Policy, the Terms of Use, and the applicable service/product terms and conditions, and agree to be governed by the laws of India, including laws applicable to data protection and privacy. If you do not agree, please do not use or access our Platform.

We use personal data to provide services you request, and for related operations including:

• Assisting sellers and business partners in handling and fulfilling orders.
• Enhancing customer experience, resolving disputes, and troubleshooting problems.
• Informing you about online/offline offers, products, services, and updates.
• Customizing your experience and conducting marketing research, analysis, and surveys.
• Detecting and protecting against error, fraud, and other criminal activity.
• Enforcing our Terms of Use and other applicable policies.

To the extent we use your personal data for marketing, we provide you the ability to opt out. You understand that access to certain services/products may be affected if required permissions are not provided.

We may share your personal data in the following circumstances:

• With group entities, corporate entities, and affiliates for providing products/services, who may market to you unless you explicitly opt out.
• With third parties such as sellers, business partners, logistics providers, prepaid payment instrument issuers, reward programs, and payment partners, where required to provide services/products.
• To comply with legal obligations, enforce user agreements, support marketing/advertising, and prevent, detect, mitigate, or investigate fraudulent or illegal activities.
• With government agencies or authorized law enforcement authorities where required by law, subpoena, court order, or legal process.
• With law enforcement, third-party rights owners, or others where reasonably necessary to enforce policies, respond to claims, or protect rights, property, and personal safety of users or the public.

To protect your personal data from unauthorized access or disclosure, loss, or misuse, we adopt reasonable security practices and procedures.

• Once your information is in our possession or whenever you access account information, we follow our security guidelines and use secure servers.
• Transmission of information over the internet cannot be guaranteed as completely secure and may involve inherent risks beyond our control.
• By using the Platform, users accept the security implications of internet-based data transmission.
• Users are responsible for protecting their login credentials and password records.

You may delete your account through profile/settings on the Platform. Account deletion may result in loss of all account-related information and access.

• You may also contact us for account deletion assistance using the details below.
• We may refuse or delay deletion in case of pending grievances, claims, pending shipments, or other ongoing services.
• We retain personal data no longer than required for the purpose of collection or as required by applicable law.
• We may retain data where necessary to prevent fraud/future abuse or for other legitimate purposes.
• We may continue to retain anonymized data for analytics and research.

You may access, rectify, and update your personal data directly through the functionalities provided on the Platform.

By visiting our Platform or providing your information, you consent to the collection, use, storage, disclosure, and other processing of your information in accordance with this Privacy Policy.

If you disclose personal data relating to other people, you represent that you have the authority to do so and permit us to use such information in accordance with this Privacy Policy.

While providing your personal data over the Platform or partner platforms/establishments, you consent to us (including our corporate entities, affiliates, lending partners, technology partners, marketing channels, business partners, and other third parties) contacting you through SMS, instant messaging apps, calls, and/or email for the purposes specified in this Privacy Policy.

You may withdraw consent previously provided by writing to the Grievance Officer using the contact details below, with the subject line: "Withdrawal of consent for processing personal data". We may verify such requests before actioning them.

• Withdrawal of consent is not retrospective.
• Withdrawal will be handled in accordance with the Terms of Use, this Privacy Policy, and applicable laws.
• Upon withdrawal, we may restrict or deny services for which such information is considered necessary.

Please review this Privacy Policy periodically for changes. We may update this Privacy Policy to reflect changes to our information practices.

We may alert/notify you of significant changes in the manner required under applicable laws.