1. Personal Information We Collect or Process

We collect information necessary to fulfill retail food orders, manage commercial supply chains, and execute doorstep deliveries:

• Contact & Identification Data: Name, business entity name, trading name, phone number, email address, delivery shipping address, and billing address.
• Commercial & Regulatory Credentials (B2B): FSSAI license numbers, GSTIN (GST registration details), commercial business type (e.g., Restaurant, Cloud Kitchen, Hotel, Retailer), and authorized procurement manager details.
• Geo-Location Data: Real-time GPS coordinates (latitude/longitude), drop-off bay details, landmark data, and location URLs captured during checkout to enable accurate delivery routing.
• Financial & Transaction Data: Payment receipts, transaction histories, UPI confirmation IDs, commercial ledger status, billing invoices, and payment method details processed securely via certified payment partners.
• Order & Cart Information: Items viewed, items added to cart, cooking preferences, delivery timing slots, special kitchen instructions, and past purchase requisitions.
• Technical & Usage Information: IP address, browser type, device identifiers, network connection details, session logs, and usage patterns collected via cookies and tracking scripts.

2. Personal Information Sources

We collect data through the following interactions:

• Directly From You: When you create an account, register as a B2B merchant, submit FSSAI/GST details, place an order on justgully.in, or communicate via our WhatsApp ordering system.
• Automated Storefront Technologies: Via cookies, local storage, and server logs when you navigate our digital storefront or trigger cart actions.
• Logistics & Business Verification Partners: From payment gateways, logistics partners, and government business verification portals (e.g., GSTIN validation).

3. How We Use Your Personal Information

We process personal and business data for the following operational and legal purposes:

• Order Processing & Supply Fulfillment: To prepare food items, execute B2B bulk supply orders, process payments, generate tax-compliant GST invoices, and dispatch delivery partners to your exact location.
• Automated Order Communications: Sending real-time order updates, WhatsApp dispatch alerts, payment verification links, and delivery tracking notifications.
• Service Personalization & Logistics: Customizing storefront offers, maintaining commercial credit/order history, calculating minimum order thresholds, and optimizing delivery routes.
• Security & Fraud Prevention: Verifying account credentials, detecting unauthorized commercial transactions, ensuring food safety compliance, and protecting platform infrastructure.
• Legal & Regulatory Compliance: Complying with applicable Indian tax laws (GST standards), food safety regulations (FSSAI), and responding to lawful statutory requests.

4. How We Disclose Personal Information

We do not sell or rent personal or commercial data. Information is shared strictly to facilitate orders and maintain operations:

• Shopify Engine: Our storefront infrastructure is powered by Shopify, which securely processes cart and user interaction data in compliance with strict privacy standards.
• Logistics & Fleet Partners: Sharing delivery coordinates, contact phone numbers, and address details with internal delivery personnel or third-party logistics services to execute fulfillments.
• Payment Gateways & UPI Networks: Sharing order values and tokenized payment parameters with RBI-regulated payment processors (e.g., Razorpay, PhonePe, UPI) for secure settlement.
• Legal Authorities: Disclosing transaction and billing records to government authorities when required by applicable law or judicial orders.

5. Relationship with Shopify

Our services are hosted on Shopify. Shopify collects and processes data regarding your interaction with justgully.in to provide storefront capabilities and enhanced security. You can learn more about how Shopify processes data by reviewing the Shopify Consumer Privacy Policy.

6. Third Party Websites and Links

The Services may provide links to websites or other online platforms operated by third parties. If you follow links to sites not affiliated or controlled by us, you should review their privacy and security policies and other terms and conditions. We do not guarantee and are not responsible for the privacy or security of such sites, including the accuracy, completeness, or reliability of information found on these sites. Information you provide on public or semi-public venues, including information you share on third-party social networking platforms may also be viewable by other users of the Services and/or users of those third-party platforms without limitation as to its use by us or by a third party. Our inclusion of such links does not, by itself, imply any endorsement of the content on such platforms or of their owners or operators, except as disclosed on the Services.

7. Children's Data

The Services are not intended to be used by children, and we do not knowingly collect any personal information about children under the age of majority in your jurisdiction. If you are the parent or guardian of a child who has provided us with their personal information, you may contact us using the contact details set out below to request that it be deleted. As of the Effective Date of this Privacy Policy, we do not have actual knowledge that we "share" or "sell" (as those terms are defined in applicable law) personal information of individuals under 16 years of age.

8. Security and Retention of Your Information

Please be aware that no security measures are perfect or impenetrable, and we cannot guarantee "perfect security." In addition, any information you send to us may not be secure while in transit. We recommend that you do not use unsecure channels to communicate sensitive or confidential information to us.

How long we retain your personal information depends on different factors, such as whether we need the information to maintain your account, to provide the Services, comply with legal obligations, resolve disputes or enforce other applicable contracts and policies.

9. Your Rights and Choices

Depending on your usage (B2C or B2B), you hold the following rights regarding your data:

• Access & Rectification: Request access to your account data or request updates to outdated business contacts, address profiles, or GST numbers.
• Communication Preferences: Opt-out of non-transactional marketing communications at any time while continuing to receive essential order status and billing alerts.
• Account Deletion: Request archival or deletion of consumer account records, subject to retention requirements for completed financial transactions.

10. Complaints & International Transfers

If you have complaints about how we process your personal information, please contact us using the contact details provided below. Depending on where you live, you may have the right to appeal our decision or lodge your complaint with your local data protection authority.

International Transfers: Please note that we may transfer, store and process your personal information outside the country you live in. If transferred out of the European Economic Area or the UK, we rely on recognized transfer mechanisms like Standard Contractual Clauses.