1. Introduction
Pet Basket ("we," "our," "us," or "Data Fiduciary") operates the website petbasket.online and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect your personal information.
By using our Website and services, you consent to the data practices described in this policy.
2. Data Fiduciary Information
🏢 Data Fiduciary Details (as per DPDP Act)
3. Personal Data We Collect
We collect the following categories of personal data:
3.1 Information You Provide
| Data Category | Examples | Purpose |
|---|---|---|
| Identity Data | Full name | Order processing, communication |
| Contact Data | Email address, phone number, delivery address | Order delivery, customer support |
| Transaction Data | Order details, payment method (COD) | Order fulfillment, records |
3.2 Information Collected Automatically
| Data Category | Examples | Purpose |
|---|---|---|
| Technical Data | IP address, browser type, device information | Security, analytics |
| Usage Data | Pages visited, time spent, click patterns | Website improvement |
4. Lawful Basis for Processing (DPDP Act Compliance)
We process your personal data based on the following lawful grounds:
- Consent: You have given clear consent for us to process your personal data for specific purposes
- Contractual Necessity: Processing is necessary to fulfill our contract with you (order delivery)
- Legitimate Use: Processing is necessary for legitimate business purposes as permitted under the DPDP Act
- Legal Obligation: Processing is necessary to comply with applicable laws
5. Purpose of Data Collection
We use your personal data for:
- Processing and fulfilling your orders
- Communicating with you about your orders and deliveries
- Providing customer support
- Sending transactional notifications (order confirmations, shipping updates)
- Marketing communications (only with your consent)
- Improving our Website and services
- Fraud prevention and security
- Compliance with legal obligations
6. Consent & Withdrawal
6.1 How We Obtain Consent
- Explicit consent is obtained during account registration and checkout
- Consent for marketing is separately obtained via opt-in checkboxes
- Consent notices are clear, specific, and in plain language
6.2 Withdrawing Consent
You can withdraw your consent at any time by:
- Emailing us at privacy@petbasket.online
- Using the "Unsubscribe" link in marketing emails
- Contacting our Grievance Officer
Please note that withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal.
7. Data Storage & Security
7.1 Data Storage
- Your data is stored on secure servers located in India
- We use industry-standard encryption for data transmission (SSL/TLS)
- Access to personal data is restricted to authorized personnel only
7.2 Security Measures
- HTTPS/SSL encryption on all pages
- Secure password hashing
- Regular security audits
- No storage of payment card data (RBI Tokenisation compliance)
7.3 Data Retention
We retain your personal data for:
- Transaction data: 7 years (as required by tax laws)
- Account data: Until account deletion or as required by law
- Marketing preferences: Until consent is withdrawn
8. Data Sharing & Disclosure
We may share your personal data with:
| Third Party | Purpose | Data Shared |
|---|---|---|
| Shipping Partners | Order delivery | Name, address, phone |
| Payment Processors | Payment processing | Transaction details |
| Analytics Providers | Website analytics | Anonymized usage data |
| Legal Authorities | Legal compliance | As required by law |
We do not sell your personal data to third parties.
9. Your Rights Under DPDP Act 2023
As a Data Principal, you have the following rights:
- Right to Access: Request information about the personal data we hold about you
- Right to Correction: Request correction of inaccurate or incomplete personal data
- Right to Erasure: Request deletion of your personal data (subject to legal retention requirements)
- Right to Grievance Redressal: Lodge complaints about data processing
- Right to Nominate: Nominate another person to exercise your rights in case of death or incapacity
To exercise any of these rights, please contact us at privacy@petbasket.online.
10. Cookies
We use cookies and similar technologies to:
- Remember your preferences and cart items
- Analyze website traffic and usage patterns
- Improve your browsing experience
You can control cookies through your browser settings. Note that disabling cookies may affect website functionality.
11. Children's Privacy
Our Website is not intended for individuals under 18 years of age. We do not knowingly collect personal data from children. If you believe we have collected data from a minor, please contact us immediately.
12. Data Breach Notification
In the event of a personal data breach that is likely to result in a risk to your rights, we will:
- Notify the Data Protection Board of India as required by the DPDP Act
- Inform affected individuals without undue delay
- Take immediate steps to mitigate the breach
13. Grievance Officer
📞 Grievance Officer (as per IT Rules 2021)
14. Changes to Privacy Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last Updated" date. We encourage you to review this policy periodically.
15. Contact Us
For any questions or concerns about this Privacy Policy or our data practices, please contact us:
- Email: privacy@petbasket.online
- Phone: +91 98765 43210
- Address: 123, Pet Street, Koramangala, Bengaluru, Karnataka - 560034