Privacy Policy

We collect the following categories of information:

• Identity & Contact Information: name, phone number, email address, gender, delivery address(es), provided at registration or order placement.
• Payment Information: transaction references and payment status from our payment gateway partner, Easebuzz. We do not collect or store full card numbers, CVV, or net-banking credentials; these are handled directly by Easebuzz and its RBI-regulated partner banks.
• Order & Service Data: pickup/delivery slots, subscription tier, kg weights, barcode/tag identifiers, service history, and support communications.
• Location Information: address mentioned in the order, where you grant permission, to confirm serviceability and facilitate pickup/delivery.
• Device & Usage Information: device type, operating system, app version, IP address, and in-app usage patterns, collected automatically for app functionality and diagnostics.
• Communication Records: SMS delivery status and content sent via our registered DLT sender ID for order updates, OTPs, and service alerts.

We use the information collected for the following purposes:

• To create and manage your account and process Orders and Subscriptions.
• To schedule pickups/deliveries and coordinate with our processing facility and delivery personnel.
• To process payments and issue GST-compliant invoices.
• To send transactional and service-related communications via SMS, email, or app notifications, including order status, OTPs, and billing reminders.
• To respond to support requests, complaints, and loss/damage claims.
• To improve Platform functionality, detect fraud, and maintain service quality.
• To send promotional communications, where you have opted in; you may opt out at any time.

We process your personal data on the basis of your consent at the time of registration and order placement, for the performance of the service contract between you and BucketIn, and, where applicable, to comply with our statutory obligations, including under GST law. Consent for optional data uses (such as promotional communication or precise location access) can be withdrawn at any time through the Platform settings or by writing to us, without affecting the lawfulness of processing carried out prior to withdrawal.

In accordance with Section 6 of the DPDP Act, the consent we rely on is free, specific, informed, unconditional, and unambiguous, given through a clear affirmative action, and limited to the personal data necessary for the stated purpose. You may withdraw your consent at any time through the Platform settings or by writing to us; withdrawal will not affect the lawfulness of processing carried out prior to it, and may limit our ability to provide certain Services.

We do not sell your personal information. We share information only in the following circumstances:

• With our payment gateway partner, Easebuzz, solely to process payments.
• With our processing facility and delivery personnel, limited to the information needed to fulfil an Order (name, address, contact number, order details).
• With our SMS gateway provider (registered under Airtel's DLT platform) for delivery of transactional and service messages.
• With our WhatsApp Business messaging provider (Meta Platforms, Inc.) for delivery of transactional and service messages via WhatsApp, where you have opted to receive them.
• With professional advisors (e.g., our Chartered Accountant) strictly for accounting, tax, and compliance purposes.
• Where required by law, court order, or a lawful request from a government or regulatory authority.
• In connection with a business restructuring, merger, or transfer of business assets, subject to equivalent confidentiality protections.

We implement reasonable technical and organisational security practices, consistent with the SPDI Rules, 2011, including access controls, encrypted transmission of payment data (handled by Easebuzz), and restricted internal access to customer data on a need-to-know basis. However, no method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.

Your personal data is primarily stored and processed on servers located in India. Certain service providers we rely on (including cloud hosting, analytics, and messaging providers such as WhatsApp/Meta) may process limited personal data on servers located outside India. Where personal data is transferred outside India, such transfer is made in accordance with the DPDP Act and only to jurisdictions not restricted by the Central Government, and we require such providers to maintain confidentiality and security protections equivalent to those described in this Policy.

In the event of a personal data breach, we will take prompt measures to contain and mitigate it and will notify the Data Protection Board of India and each affected user in the manner and within the timelines prescribed under the DPDP Act and the rules made thereunder.

We retain personal data for as long as your account remains active and for a reasonable period thereafter to comply with tax, accounting, and legal record-keeping obligations (including GST invoicing records, typically retained for the statutory period prescribed under the CGST Act). Data no longer required for these purposes will be securely deleted or anonymised.

Subject to applicable law (including the DPDP Act, once its rules are notified and in force), you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request deletion of your account and associated personal data, subject to statutory retention requirements.
• Withdraw consent for optional processing (e.g., marketing communications, location access).
• Nominate another individual to exercise your rights in the event of your death or incapacity, as provided under the DPDP Act.
• Register a grievance with the Data Protection Board of India if you believe your rights under the DPDP Act have been infringed, after first raising the matter with our Grievance Officer.

Requests may be submitted to info@bucketin.in and will be addressed within a reasonable timeframe, and in any event within the period prescribed by applicable law.

Our website may use cookies and similar technologies to remember preferences, maintain session state, and understand aggregate usage patterns. You may control cookie settings through your browser; disabling cookies may limit certain website functionality.

The Platform is intended for use by individuals aged 18 and above. We do not knowingly collect personal information from minors. If we become aware that we have inadvertently collected data from a minor without appropriate consent, we will take steps to delete such data.

In accordance with the Consumer Protection (E-Commerce) Rules, 2020, the Information Technology Act, 2000, and the Digital Personal Data Protection Act, 2023, the Grievance Officer (who also serves as our contact point for questions and grievances relating to the processing of your personal data) may be contacted for any complaints regarding the Platform, the Services, or your personal data. The Grievance Officer will acknowledge every complaint within forty-eight (48) hours of receipt and endeavour to resolve it within the timelines prescribed under applicable law.

Grievance Officer: Vishal Kanojia | Email: info@bucketin.in | Customer Care Number: +91 9076066688

We may update this Privacy Policy periodically to reflect changes in our practices or applicable law. Material changes will be notified via the Platform, SMS, or email, and the "Last Updated" date above will be revised accordingly. Continued use of the Platform after such changes constitutes acceptance of the revised Policy.

This Policy is governed by the laws of India, and any dispute arising in connection with it shall be subject to the exclusive jurisdiction of the courts at Thane, Maharashtra.

For any privacy-related questions or requests, please contact:

M/s VRA Enterprises | Email: info@bucketin.in | Website: www.bucketin.in | Customer Care Number: +91 9076066688