“Act” shall mean the Information Technology Act, 2000 and the corresponding rules, amendments, modifications framed thereunder and as notified by the Government from time to time.
“Device(s)” shall mean a desktop computer, laptop computer, tablet, mobile phone, smart watch or such other electronic equipment.
“Personal Information” refers to any information that identifies or can be used to identify, contact or locate the person, to whom such information pertains including, but not limited to, name, address, phone number and email address disclosed by You in relation to the services available on the Website.
“Sensitive personal data or information” consists of information relating to the following:
financial information such as bank account or credit card or debit card or other payment instrument details;
physical, physiological and mental health condition;
medical records and history;
any detail relating to the above clauses as provided to body corporate for providing service; and
any of the information received under above clauses by body corporate for processing, stored or processed under lawful contract or otherwise.
provided that, any information that is freely available or accessible in public domain or furnished under the Information Technology Act, 2000 and the corresponding rules made thereunder or any other law for the time being in force shall not be regarded as sensitive personal data or information for the purposes of these rules.
“Third Party” refers to any person or entity other than You or Us.
Any reference to singular includes a reference to the plural and vice versa, and any reference to one gender includes a reference to other gender(s), unless explicitly provided for.
Any reference to a natural person shall, include his/her heirs, executors and permitted assignees and any reference to a juristic person shall, include its affiliates, successors and permitted assignees, unless repugnant to the context.
INFORMATION WE COLLECT
Personal Data: We collect personal data from You when You voluntarily provide Us with such information, such as when You use the Platform to place an order for Our products or to inquire about the Services We provide.
Personal Information provided by you in relation to the use of the Platform: In order for Us to enable successful delivery of your order, We collect your Personal data as may be required for the purposes connected thereto when You place an order on the Platform.
We may be required to disclose such Personal Information to Third Parties solely in connection with purchase, sale and delivery of your order in accordance with the terms and conditions stipulated by such Third Party and/or where the disclosure is necessary for compliance of a legal obligation.
We use the details provided by You during check out to ensure that orders are successfully delivered on time, and to keep You informed on the status of your order.
Personal Information provided by you in relation to the registration process: In order to provide a safe, efficient, smooth and customized experience and in order to take advantage of certain features available on the Platform including, but not limited to, public forums, accessing or uploading reviews or taking part in surveys, You may be asked to complete an online registration form which will provide us with Personal Information (Such as (a) Your name, (b) Your phone number, (c) Your e-mail address, (d) Your gender, (e) Your date of birth (f) your address etc.). In the event You register with us, You may also be asked to choose a user identity and password in order to identify yourself during future uses of the Platform.
You can register on the Platform by sharing your contact details. Our Platform will provide you with a unique time-bound one-time password (“OTP”). This OTP shall be shared via your network carriers SMS services, the OTP will ensure that you have completed a successful registration on the Platform. We use an OTP based log-in system, which provides security and ease of access to the Platform.
We may also collect certain additional information that is not Personal Information which You may provide as a part of registration and the administration and personalization of your account profile. When You use Our Platform, We collect information about You in the following general categories:
Collection of Sensitive personal data or information: We do not collect, store or process sensitive personal data or information as part of our Services on our Platform which is not in accordance with the Information Technology (Reasonable security practices and procedures and sensitive personal data or information) Rules, 2011.
URLs: In general, You can browse Our Website without telling Us who You are or revealing any personal information about yourself. Once You give us your personal information, You are not anonymous to Us. Wherever possible, We indicate which fields are required and which fields are optional. You always have the option to not provide information for the fields that are optional. We may automatically track certain information about You based upon your behaviour on Our Website. We use this information to do internal research on Our users' demographics, interests, and behaviour to better understand, protect and serve Our users. This information is compiled and analysed on an aggregated basis. This information may include the URL that you just came from (whether this URL is on our Website or not), which URL You next go to (whether this URL is on Our Website or not), your browser information, and your IP address.
The cookies used by Us are listed as follows for your information to opt-out of cookies or not:
Session id, unique token, sessional, allows Us to store information about your session (referrer, landing page, etc)
provider’s internal stats tracker to record the number of visits
Secure session id, unique token, sessional storefront digest, unique token, indefinite If the shop has a password, this is used to determine if the current visitor has access.
Your payment details.
Your IP address and
Any other personal information which you give us in connection with the Website.
Payment Information: If You transact with Us, We collect some additional information, such as a billing address, a credit / debit card number and a credit / debit card expiration date and / or other payment instrument details and tracking information from cheques or money orders as the case may be. You will also provide Us with Your payment transaction information if You choose to pay for the Services available on Our Platform. We will not use Your financial information for any purpose other than to complete a payment transaction with You. To the extent possible, We provide You the option of not divulging any specific information that You wish for Us not to collect, store or use.
We use Razorpay for processing payments. We do not store your card data on their servers. Your data is encrypted through the Payment Card Industry Data Security Standard (PCI-DSS) when processing any payment. Your purchase transaction data is only used as long as is necessary to complete your purchase transaction. After that is complete, your purchase transaction information is not saved.
Our payment gateway adheres to the standards set by PCI-DSS as managed by the PCI Security Standards Council, which is a joint effort of brands like Visa, MasterCard, American Express and Discover. PCI-DSS requirements help ensure the secure handling of credit and debit card information by our store and its service providers.
For more insight, you may also want to read terms and conditions of razorpay on https://razorpay.com
We are committed to keeping all such sensitive data/information safe at all times and ensure that such data/information is only transacted over secure site of approved payment gateways which are digitally encrypted and provide the highest possible degree of care available under the technology presently in Us. Further, transacting over the internet has inherent risks which can only be avoided by You following security practices Yourself, such as not revealing account/login related information to any other person and informing Our customer care team about any suspicious activity or where Your account has/may have been compromised.
Push Notifications: We may send push notification to Users (for example: letting a User know when an order is out for delivery). If you are a User who no longer want these communications to be sent, please either turn off the push notifications on Your Device or contact Us at firstname.lastname@example.org.
Others: In addition to cookies, we may also collect information to enable Us to understand You better so that We can improve (i) your user experience; (ii) to assist Our customer service and technical support personnel; (iii) put processes in place to prevent fraud and unlawful use; and (iv) providing and improving Our products and Services; (v) Providing reporting and analytics; (vi) Testing out features or additional services; and (vii) assisting with marketing, advertising or other communications. In an effort to make the Platform effective, certain information may be collected each time You access the Platform. Such information may be saved in Our server logs in an encrypted form which may not identify You personally. Such information or data may include, but shall not be limited to, your IP address, your server details, duration of your visit, date, time or purpose of your visit. In addition to cookies, we use web beacons, ad tags, pixels to advertise as part of the Platform. The abovementioned data may be used by Us and may be shared with Our sponsors, investors, advertisers, developers, strategic business partners or other associates to enhance and grow the user experience in relation to the Platform.
At every stage prior to, during or after information collection, You have the right to access all personally identifiable information provided, rectify or alter all personally identifiable information provided, restrict the level of information to be retained as per Your sole discretion and object to the retention, use and potential disclosure of the personally identifiable information.
USE OF INFORMATION
We use personal information to provide the delivery of Our products to You. To the extent We use your personal information to market to You, We will provide You the ability to opt-out of such uses. We use your personal information to resolve disputes; troubleshoot problems; help promote a safe transaction; collect money; measure consumer interest in Our products, inform You about online and offline offers, products and updates; customize your experience; detect and protect Us against error, fraud and other criminal activity; enforce Our Terms; and as otherwise described to You at the time of collection.
In Our efforts to continually improve Our product offerings, We collect and analyse demographic and profile data about Our Users' activity on Our Platform. We identify and use your IP address to help diagnose problems with Our server or Our Platform. Your IP address is also used to help identify You and to gather broad demographic information.
We do not sell or rent your Personal Information to any Third Party for any purpose - including for advertising or marketing purposes. We use the information We collect from Users to provide them with the best User experience.
More specifically, this information is used:
To help Us make decisions on what We should work on next. For example (i) Details of how the User has used Our service, such as their activity on the Service, and the frequency and duration of their visits to the App (ii) IP address, (iii) Device event information such as crashes, system activity, hardware settings, browser type, browser language, the date and time of their request and referral URL;
To enable the provision of Services opted for by You;
To communicate necessary account and service related information from time to time;
To allow You to receive quality customer care services;
To comply with applicable laws, rules and regulations;
To tailor the content and information that We may send or display to Users, to offer personalized help and instructions, and to otherwise personalize student experiences while using the Platform or Services;
To better understand how Users access and use Our Platform and Services, on an aggregated or de-identified basis, in order to improve Our Site, App, and Services and respond to user desires and preferences, and for other research and analytical purposes.
To provide You with advertising that better suits Your interests and profile and is age-/gender-appropriate and targeted to your general location;
To serve and measure the effectiveness of advertising.
We may occasionally send You service related and product change announcements through the general operation of the Platform. We may also use your contact information to send You notifications regarding new services, offers and promotions offered by Us if You affirmatively consent to receive such communications.
When You provide Us with personal information to complete a transaction, verify your credit card, place an order, arrange a delivery or return a purchase, it is deemed that You have consented to the use of your personal information by Us to carry out the transaction as requested.
If after You consent, either impliedly or expressly, for your personal information to be used by Us, you change your mind, You may withdraw your consent for Us to contact You, for the continued collection, use or disclosure of your information, at any time. Such withdrawal of consent shall be communicated to Us either through an email at email@example.com.
DISCLOSURE OF PERSONAL INFORMATION
Law and Order: We cooperate with law enforcement inquiries, as well as other third parties to enforce laws, such as: intellectual property rights, fraud and other rights. We can (and You authorize us to) disclose any information about You to law enforcement and other government officials as We, in Our sole discretion, believe necessary or appropriate, in connection with an investigation of fraud, intellectual property infringements, or other activity that is illegal or may expose us or You to legal liability.
Analytics: We use analytics services, including mobile analytics software, to help Us understand and improve how the Service is being used. These services may collect, store and use Personal Information in order to help us understand things like how often people/ customers use the Service, the events that occur within the application, usage, performance data, and from where the application was downloaded.
Public: We may share aggregated, non-personally identifiable information publicly, including with Users, partners or the press in order to, for example, demonstrate how the Platform is used, spot industry trends, or to provide marketing materials for the Platform. Any aggregated information shared this way will not contain any personal information.
In the unlikely event that MasalaBox goes out of business, or files for bankruptcy, we will protect User’s personal information, and will not sell it to any third party.
We may engage the services of Third Parties to help us serve Our customers better. In general, the third-party service providers engaged by Us will only collect, use and disclose your information to the extent necessary to allow them to perform the services they provide to Us.
However, certain third-party service providers, such as payment gateways and other payment transaction processors, have their own privacy policies in respect to the information. We are required to provide to them for your purchase-related transactions and We recommend that You read their privacy policies so You can understand the manner in which your personal information will be handled by these Third-Party service providers.
In particular, remember that certain providers may be located in or have facilities that are located in a different jurisdiction than either you or us. So if you elect to proceed with a transaction that involves the services of a third-party service provider, then your information may become subject to the laws of the jurisdiction(s) in which that service provider or its facilities are located.
When you click on Third Party links on Our Website, We are not responsible for the privacy practices of other sites and for the loss or consequential damage that may be caused to you and encourage You to read their privacy statements.
To protect your personal information, We take reasonable precautions and follow industry best practices to make sure your personal information is not inappropriately lost, misused, accessed, disclosed, altered or destroyed.
AGE OF CONSENT
By using this Website, You represent that You are at least the age of majority in your state or province of residence and you have given us your consent to allow any of your minor dependents to use this Website.
If the Platform or any portion thereof is acquired or merged with another company, your information may be transferred to the new owners so that we may continue to sell products to You.
Customer willing to delete his/her account can send a mail to firstname.lastname@example.org.
Customer profile will be deleted from our database, which also includes, Name, email, DOB, Address, Orders, Payment details.
In all matters relating to account deletion, the decision of MasalaBox shall be final and binding and by participating in the offer, the participants agree to be bound by the terms and conditions contained herein.
DATA SECURITY PRECAUTIONS
We have in place appropriate technical and security measures to secure the information collected by us.
We use vault and tokenization services from third party service providers to protect the sensitive personal information provided by you. The third-party service providers with respect to our vault and tokenization services and our payment gateway and payment processing are compliant with the payment card industry standard (generally referred to as PCI compliant service providers). You are advised not to send your full credit/debit card details through unencrypted electronic platforms. Where we have given you (or where you have chosen) a username and password which enables you to access certain parts of the Website, you are responsible for keeping these details confidential. We ask you not to share your password with anyone.
Please be aware that the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted through the Website. Once we have received your information, we will use strict physical, electronic, and procedural safeguards to try to prevent unauthorised access.
You can manage Your account settings by emailing us at email@example.com , to update, amend, and correct your personal information.
Unless subject to an exemption, You also have the following rights in relation to the Personal Data We hold about You, unless provided otherwise by local law:
To request access to, or erasure of, the Personal Information We hold about You.
To request Us to restrict the processing of the Personal Information We hold about You.
To object to Us processing Personal Information relating to You.
Where You have given Us consent to process your Personal Information, You have the right to withdraw that consent at any time.
To export the Personal Information You have provided to Us in a format that can be transferred electronically to a Third Party.
To delete Your account with our Platform by following the instructions displayed on the Platform.
To request a copy of Your Personal Information which We hold about You;
To request for any correction to any Personal Information if it is found to be inaccurate or out of date;
To lodge a complaint with a supervisory authority
To obtain information as to whether Personal Information is transferred to a third country or to an international organization.
Please note that some of these rights are not absolute. In some cases, We may refuse a request to exercise particular rights if complying with it meant that We are no longer able to meet Our contractual obligation to provide You with particular services. We will keep You informed as to the actions that We can take when You make Your request.
If you wish to withdraw your consent for the use and disclosure of your personal information in the manner provided in this Policy, please write to us at firstname.lastname@example.org. Please note that we may take time to process such requests, and your request shall take effect no later than 15 business days from the receipt of such request, after which we will not use your personal data for any processing unless required by us to comply with our legal obligations. We may not be able offer you any or all Services upon such withdrawal of your consent.
GRIEVANCE REDRESSAL MECHANISM
Address: Masala Box Food Network Private Limited , 1st Floor Sundale, Kunjan Bava Road, Vytila, Ernakulam, Kerala 682019
Grievance Redressal Officer: Merlin Shaji
DO NOT TRACK
The Service or Platform is not designed to respond to “do not track” signals sent by some browsers.
Advisory Note: In compliance with The Information Technology Act, 2000 and the rules made thereunder, as well as The Consumer Protection Act 2019, and the rules made thereunder, the grievance redressal mechanism, including the contact details of the Grievance Officer are given herein above.