CliqueCart

Terms & Conditions

Effective Date: 25 Apr 2026Last Updated: 16 Jun 2026

1. Introduction & Data Fiduciary Identity

CLIQUECART LLP ("we", "us", "our") is the Data Fiduciary as defined under the Digital Personal Data Protection Act, 2023. This Privacy Policy describes how we collect, use, store, share, and protect your personal data when you visit our website www.cliquecart.in or purchase our products.

By using our website, you consent to the collection and processing of your personal data as described in this Policy.

2. Data We Collect

2.1 Data You Provide Directly

  • Full name, email address, mobile number, delivery address, billing address
  • Payment information (we do not store full card numbers; payment data is handled by our payment gateway partner)
  • Account credentials (username, password — stored in encrypted form)
  • Communications with customer support (emails, chat transcripts)

2.2 Data Collected Automatically

  • IP address, browser type, operating system, device identifiers
  • Pages visited, time spent, clickstream data, referring URLs
  • Cookies and similar tracking technologies (see Section 8)

2.3 Data from Third Parties

  • Delivery address confirmation or updates from logistics partners
  • Payment confirmation data from payment gateway providers
  • Social login data if you choose to log in via Google, Facebook, or similar platforms

3. Purpose of Data Processing

We process your personal data only for lawful purposes, as specified below:

  • Processing and fulfilling your orders, including invoicing and delivery
  • Creating and managing your user account
  • Communicating order status, dispatch updates, and delivery confirmations
  • Responding to customer service queries and complaints
  • Sending promotional communications and offers (only with your consent; you may opt out at any time)
  • Detecting and preventing fraud, abuse, and security incidents
  • Complying with legal obligations under GST law, Consumer Protection law, and other applicable Indian laws
  • Improving our Website and product offerings through analytics

4. Legal Basis for Processing

Under the Digital Personal Data Protection Act, 2023, we process your personal data on the following lawful bases:

  • Consent: For marketing communications, cookies, and non-essential data processing
  • Contract: For order fulfilment, account management, and delivery
  • Legal Obligation: For tax records, GST compliance, and regulatory reporting
  • Legitimate Interest: For fraud prevention, Website security, and service improvement

You may withdraw consent at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

5. Data Sharing & Disclosure

We do not sell, rent, or trade your personal data to any third party. We may share your data only in the following limited circumstances:

  • Logistics & Delivery Partners: Your name, address, and phone number are shared with our delivery partners solely for order fulfilment.
  • Payment Gateway Providers: Payment data is processed securely by our payment gateway partner PhonePe. We do not store full payment card data.
  • Cloud & Hosting Providers: Our Website and data are hosted on secure cloud platforms (e.g., AWS, Google Cloud) with appropriate data processing agreements in place.
  • Legal & Regulatory Authorities: We may disclose data to government bodies, courts, or law enforcement when required to do so by applicable Indian law or court order.
  • Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred to the successor entity, subject to equivalent privacy protections.

6. Data Retention

  • Order data and transaction records: Retained for 7 years as required under GST laws and the Companies Act.
  • Account data: Retained for the duration of the account and up to 2 years after account closure.
  • Marketing preferences and consent records: Retained until consent is withdrawn.
  • Customer support communications: Retained for 3 years.
  • Cookies and analytics data: Retained as per cookie settings (see Section 8).

Upon expiry of the applicable retention period, your data will be securely deleted or anonymised.

7. Your Rights as a Data Principal

Under the Digital Personal Data Protection Act, 2023, you have the following rights with respect to your personal data:

  • Right to Access: Request a summary of the personal data we hold about you and how it is being processed.
  • Right to Correction: Request correction of inaccurate or incomplete personal data.
  • Right to Erasure (Right to be Forgotten): Request deletion of your personal data, subject to legal retention obligations.
  • Right to Withdraw Consent: Withdraw consent for any processing based on consent, without affecting lawfulness of prior processing.
  • Right to Grievance Redressal: Lodge a complaint with our Grievance Officer (details in Section 12).
  • Right of Nomination: Nominate an individual to exercise your data rights on your behalf in the event of your death or incapacity.

To exercise any of these rights, contact us at privacy@cliquecart.in. We will respond within 30 days of receipt.

8. Cookies Policy

Our website uses cookies and similar tracking technologies to enhance your browsing experience.

Types of Cookies We Use

  • Essential Cookies: Required for the Website to function (e.g., shopping cart, login session). Cannot be disabled.
  • Analytics Cookies: Help us understand how visitors interact with our website (e.g., Google Analytics). Collected anonymously.
  • Marketing & Preference Cookies: Used to deliver relevant advertisements and remember your preferences. Used only with your consent.

You can manage cookie preferences through your browser settings. Disabling non-essential cookies will not affect your ability to browse or purchase on the Website.

9. Children's Data

Our Website is not directed at children under the age of 18 years. We do not knowingly collect personal data from minors.

As required under the DPDP Act, 2023 and the DPDP Rules, 2025, we shall obtain verifiable consent from a parent or legal guardian before processing any personal data of a child. If we become aware that we have inadvertently collected data from a minor without appropriate consent, we will delete it promptly.

10. Data Security

We implement reasonable security practices and procedures as mandated under Rule 8 of the IT (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.

  • SSL/TLS encryption for all data transmitted between your browser and our servers
  • Encrypted storage of passwords and sensitive data
  • Access controls limiting data access to authorised personnel only
  • Regular security audits and vulnerability assessments
  • Documented incident response and data breach notification procedures

In the event of a data breach affecting your personal data, we will notify you and the Data Protection Board of India (once operational) within the timelines prescribed under the DPDP Act.

11. Cross-Border Data Transfers

Our Website may be hosted on servers located outside India (e.g., AWS, Google Cloud). By using our website, you consent to the transfer of your data to servers outside India, subject to appropriate safeguards and contractual protections consistent with the DPDP Act.

12. Grievance Officer — Privacy

For any privacy-related concerns, complaints, or requests to exercise your rights, please contact our designated Grievance Officer:

  • Name: Deepti Devikar, Vijay Kumar
  • Designation: Directors
  • Email: grievance@cliquecart.in
  • Phone: 9560155705
  • Address: Unit No. 228, Second Floor, Vardhman Dee Cee plaza, Sector-11, New Delhi-110075, India
  • Hours: Monday to Saturday, 10:00 AM to 6:00 PM IST

We will acknowledge your request within 24 hours and resolve it within 30 days.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our data practices or applicable law. The revised Policy will be posted on this page with the updated effective date. We encourage you to review this Policy periodically.

Material changes will be communicated to registered users via email or a prominent notice on the Website.