This Privacy Policy explains how Geomett Box Private Limited ("geom365", "we", "us", "our") collects, uses, shares and protects your personal data when you access or use our website www.geom365.com, our mobile applications, and any other online services (together, the "Platform").
By visiting or using the Platform, you agree that you have read and understood this Privacy Policy and consent to the collection and use of your information as described here, in line with the Digital Personal Data Protection Act, 2023 ("DPDP Act") and other applicable laws.
Depending on how you interact with our Platform, we may collect the following categories of personal data:
Contact details: Name, mobile number, email address, delivery address (street, city, state, pincode, country).
Account and transaction data: Order history, preferred stores, items purchased, payment status and transaction IDs (payment is processed by our payment partners; card/bank details are not stored by us).
Technical and usage data: IP address, device type, operating system, browser type, app version, pages viewed, time spent, referral source, and interaction with in-app content, collected via cookies, SDKs and similar technologies.
Marketing and communication data: Your preferences for receiving marketing communications, feedback, ratings, reviews, and responses to surveys or campaigns.
We collect personal data in the following ways:
Directly from you: When you create an account, place an order, contact customer support, participate in offers, or submit feedback/reviews on the Platform or via email/phone.
Automatically: Through cookies, pixels, SDKs and similar technologies when you browse or use the Platform, including analytics and performance tools such as Google Analytics.
From third parties: From payment partners, logistics/delivery partners, social media platforms (when you use social login or interact with our official pages), and marketing partners, as permitted by law.
We use your personal data for the following purposes, strictly as permitted by applicable laws, including the DPDP Act:
To provide and operate our services: Processing orders, enabling search and discovery of products, assigning and coordinating deliveries, and providing customer support.
To personalize your experience: Remembering preferences, recommending products, offers, and stores based on your interactions.
To communicate with you: Sending order confirmations, delivery updates, account alerts, service-related notifications, and responding to your queries.
For marketing (with consent where required): Sending you offers, newsletters, campaigns, and information about new stores or features, with an option to opt-out at any time.
For analytics, safety and legal compliance: Monitoring performance, preventing fraud, ensuring security of our systems, complying with legal obligations, and enforcing our terms and policies.
We use cookies, pixels, SDKs and similar technologies to:
Recognize you when you return to the Platform and keep you signed in.
Understand how you use our Platform, which pages or products you view, and improve performance and user experience.
Support advertising and remarketing through trusted partners, where permitted, and obtain consent where required under DPDP and other laws.
You can manage cookie preferences through your browser or device settings; however, disabling certain cookies may affect the functionality of the Platform.
We do not sell your personal data, but may share it with trusted third parties for legitimate business purposes, as outlined below:
Service providers: Delivery partners, payment gateways, SMS/email gateways, cloud hosting, analytics providers, customer support tools, IT and security vendors who process data on our instructions and under confidentiality obligations.
Business partners and franchisees: Store operators and logistics partners involved in fulfilling your orders and providing localized services.
Legal and compliance: Government authorities, regulators, law enforcement or other third parties, when required to comply with law, court orders, or to protect our rights, users, or the public.
Corporate transactions: In connection with a merger, acquisition, restructuring, or sale of assets, where your data may be transferred as part of the business, subject to continued protection under this Policy or a similar one.
We retain your personal data only for as long as necessary to fulfil the purposes described in this Policy, or as required by law (for example, tax, accounting or regulatory reasons). When data is no longer required, it is securely deleted, anonymized or archived, in accordance with our internal policies and applicable data protection laws.
Subject to applicable law (including the DPDP Act), you may have the following rights regarding your personal data:
Right to access: To request confirmation whether we process your data and to access such data.
Right to correction: To request correction or updating of inaccurate or incomplete personal data.
Right to erasure: To request deletion of your personal data, subject to legal and contractual limitations.
Right to withdraw consent: Where processing is based on consent (e.g., marketing communications), you may withdraw consent at any time without affecting prior lawful processing.
Right to grievance redressal: To raise concerns or complaints with our Grievance Officer and, if unsatisfied, with the competent authority under Indian data protection law.
To exercise these rights, please contact us using the details in the "Contact & Grievance Officer" section with sufficient information to verify your identity.
Our Platform is not intended for children under 18 years of age, and we do not knowingly collect personal data from them.
If we become aware that data from a person under 18 has been collected, we will delete it or take appropriate steps as required by law.
We use reasonable technical and organizational measures designed to protect your personal data against unauthorized access, disclosure, alteration or destruction, including encryption, access controls and secure servers.
However, no system can be guaranteed as completely secure, and transmission of information over the internet is at your own risk.
The Platform may contain links to third-party websites, apps or services (for example, payment gateways, social media pages, or partner offers) that are not controlled by geom365.
This Privacy Policy does not apply to those third-party services; you are encouraged to review their privacy policies before interacting with them.
This Privacy Policy may be updated from time to time to reflect changes in our practices, legal requirements, or the functionality of the Platform.
The "Last updated" date at the top will indicate the latest revision, and continued use of the Platform after such changes will signify your acceptance of the updated Policy.
If you have any questions, requests or complaints regarding this Privacy Policy or the handling of your personal data, please contact:
Company: Geomett Box Private Limited (geom365)
Email: care@geom365.com
You may also escalate unresolved concerns to the appropriate authority under the DPDP Act as per the procedure notified by the Government of India.