Privacy Policy

Effective: 1 January 2026 Last Updated: 24 March 2026

1. Introduction

Welcome to DelEzy (delezy.in). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy describes how DelEzy ("we", "us", "our") collects, uses, stores, shares, and protects your information when you use our platform, including our website, mobile application, and related services (collectively, the "Platform").

By accessing or using the Platform, you consent to the collection and use of your information as described in this Privacy Policy. If you do not agree with this policy, please do not use our Platform.

2. Information We Collect

We collect the following categories of information:

2.1 Account Information

When you create an account, we collect your name, email address, phone number, and delivery address(es). If you register as a vendor, we also collect your business name, FSSAI licence details, bank account information, and KYC documents.

2.2 Order Data

We collect details of your orders, including items ordered, vendor selections, order frequency, delivery preferences, subscription schedules, and order history.

2.3 Payment Data

Payment information such as UPI IDs, card details (processed securely through our payment gateway partners), transaction history, and billing addresses. We do not store your complete card details on our servers.

2.4 Device and Usage Data

We automatically collect device information (device type, operating system, browser type), IP address, access times, pages viewed, app usage patterns, and referring URLs.

2.5 Location Data

With your consent, we collect your precise or approximate location to provide delivery services, show nearby vendors, and estimate delivery times. You may disable location services through your device settings.

2.6 Cookies and Tracking Technologies

We use cookies, web beacons, and similar technologies to collect information about your browsing behaviour, preferences, and interactions with our Platform. Please see Section 9 for more details.

3. How We Use Your Information

We use the information we collect for the following purposes:

  • Service Delivery: To process and fulfil your orders, manage subscriptions, facilitate deliveries, process payments, and provide customer support.
  • Personalisation: To personalise your experience, provide tailored recommendations, display relevant vendors and products, and remember your preferences.
  • Communication: To send order updates, delivery notifications, promotional offers (with your consent), service announcements, and respond to your enquiries.
  • Safety and Security: To detect and prevent fraud, enforce our terms of service, verify vendor compliance, and protect the safety of our users and platform.
  • Analytics and Improvement: To analyse usage patterns, improve our services, develop new features, and conduct research.

4. Legal Basis for Processing

We process your personal data in compliance with the Digital Personal Data Protection Act, 2023 (DPDPA 2023) and other applicable Indian laws. Our legal bases for processing include:

  • Consent: Where you have given explicit consent for specific processing activities.
  • Contractual Necessity: Where processing is necessary to perform our contract with you (e.g., fulfilling orders).
  • Legitimate Use: Where processing is reasonably expected in connection with the services you have opted for.
  • Legal Obligation: Where processing is required to comply with applicable laws and regulations.

5. Data Sharing and Disclosure

We do not sell your personal data. We share your information only in the following circumstances:

5.1 Vendors

When you place an order, we share relevant order details (items, delivery address, contact information) with the respective vendor(s) to fulfil your order. Vendors only receive the information necessary to prepare and hand over your order.

5.2 Delivery Partners

We share your delivery address, contact number, and order details with our delivery partners to facilitate timely and accurate deliveries.

5.3 Payment Processors

Payment information is shared with our trusted payment processing partners (e.g., Razorpay) to process transactions securely. These partners are PCI-DSS compliant.

5.4 Legal Requirements

We may disclose your information when required by law, court order, or government regulation, or when we believe disclosure is necessary to protect our rights, safety, or the rights and safety of others.

6. Data Retention

We retain your personal data for different periods depending on the type and purpose of the data:

  • Account Information: Retained for as long as your account is active and for 3 years after account deletion to comply with legal requirements.
  • Order Data: Retained for 5 years from the date of the transaction for tax and compliance purposes.
  • Payment Records: Retained for 8 years as required under applicable financial regulations and tax laws.
  • Usage and Analytics Data: Retained in anonymised form for up to 3 years for platform improvement.
  • Communication Records: Retained for 3 years from the date of communication.

After the applicable retention period, data is securely deleted or anonymised so that it can no longer be associated with you.

7. Data Security

We implement robust security measures to protect your personal data from unauthorised access, alteration, disclosure, or destruction:

  • Encryption: All data in transit is protected using TLS/SSL encryption. Sensitive data at rest is encrypted using AES-256 encryption.
  • Secure Servers: Our servers are hosted on reputable cloud infrastructure with enterprise-grade security, regular security audits, and DDoS protection.
  • Access Controls: We enforce strict role-based access controls, multi-factor authentication for administrative access, and regular access reviews.
  • Regular Audits: We conduct periodic security assessments, vulnerability testing, and compliance reviews.

While we strive to protect your information, no method of electronic transmission or storage is 100% secure. We encourage you to use strong passwords and keep your account credentials confidential.

8. Your Rights

Under the DPDPA 2023 and applicable laws, you have the following rights regarding your personal data:

  • Right to Access: You may request a summary of the personal data we hold about you and the processing activities performed on it.
  • Right to Correction: You may request correction of inaccurate or incomplete personal data. You can also update your information directly through your account settings.
  • Right to Erasure: You may request deletion of your personal data, subject to legal retention requirements and legitimate business needs.
  • Right to Withdraw Consent: You may withdraw your consent for specific processing activities at any time. Withdrawal of consent does not affect the lawfulness of processing performed prior to withdrawal.
  • Right to Grievance Redressal: You have the right to file a complaint with our Data Protection Officer or the Data Protection Board of India.

To exercise any of these rights, please contact us at dpo@delezy.in. We will respond to your request within 30 days.

9. Cookies and Tracking Technologies

We use the following types of cookies on our Platform:

  • Essential Cookies: Required for the Platform to function properly. These enable core features such as authentication, security, and session management.
  • Functional Cookies: Remember your preferences, language settings, and past choices to enhance your experience.
  • Analytics Cookies: Help us understand how visitors interact with our Platform, measure performance, and identify areas for improvement.
  • Marketing Cookies: Used to deliver relevant advertisements and track the effectiveness of our marketing campaigns.

Managing Cookies: You can manage your cookie preferences through your browser settings. Most browsers allow you to refuse or delete cookies. Please note that disabling essential cookies may affect the functionality of the Platform. You can also manage cookie preferences through our cookie consent banner when you first visit the Platform.

10. Children's Privacy

Our Platform and services are not intended for individuals under 18 years of age. We do not knowingly collect personal data from children under 18. If we become aware that we have collected personal data from a child under 18, we will take immediate steps to delete such information. If you are a parent or guardian and believe your child has provided us with personal data, please contact us at dpo@delezy.in.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes:

  • We will notify you via push notification in the DelEzy app.
  • We will send an email notification to your registered email address.
  • We will display a prominent notice on the Platform with the updated effective date.

We encourage you to review this policy periodically. Your continued use of the Platform after any changes constitutes your acceptance of the updated Privacy Policy.

12. Data Protection Officer

We have appointed a Data Protection Officer (DPO) to oversee our data protection practices and ensure compliance with applicable laws. You may contact our DPO for any privacy-related concerns or requests:

  • Email: dpo@delezy.in
  • Response Time: We aim to respond to all enquiries within 48 hours and resolve matters within 30 days.

13. Grievance Redressal

If you have any grievances regarding the processing of your personal data, you may follow this process:

  1. Contact the DPO: Submit your grievance via email to dpo@delezy.in with a detailed description of your concern.
  2. Acknowledgement: You will receive an acknowledgement of your grievance within 48 hours.
  3. Investigation: Our team will investigate the matter and provide a resolution within 30 days of receiving the grievance.
  4. Escalation: If you are not satisfied with the resolution, you may escalate the matter to the Data Protection Board of India as established under the DPDPA 2023.

14. Contact Us

If you have any questions, concerns, or feedback about this Privacy Policy, please reach out to us:

  • Email: contact@delezy.in
  • Phone: +91 770 9393 800
  • Address: DelEzy, C 601, Marvel Zephyr, Grant Road, Kharadi, Pune, Maharashtra 411014, India