Privacy Policy

Draft - to be reviewed by legal counsel before launch. This is a template, not final legal text. Bracketed items [like this] must be completed and every clause verified by a qualified Indian lawyer.

Last updated: [date]. Operator: [Legal entity name], [registered address], India.

1. Who we are

[Legal entity] ("KapdaCare") is the data fiduciary for personal data processed through our apps and this website, under the Digital Personal Data Protection Act, 2023 (DPDP Act) and applicable rules.

2. Personal data we collect

Account: name, mobile number, email. [confirm]
Addresses and location for pickup and delivery, and rider location during tasks. [confirm]
Order details, garment photos, payment status (card/UPI details are handled by the payment gateway) [confirm]
Enquiry form data: name, contact details, area, business details.
Device and usage data. [confirm]

3. Purposes and legal basis

Providing the service, payments and refunds, safety and fraud prevention, support, legal compliance, and (only with consent) optional communications. [Map each purpose to consent or a legitimate use under the DPDP Act.]

4. Consent and notice

We seek free, specific, informed consent in clear language. You may withdraw consent at any time; withdrawal does not affect earlier lawful processing. [Add consent-manager details if applicable.]

5. Sharing

With partner laundries and riders (only what is needed to fulfil an order), payment gateway, SMS/notification and hosting providers [list], and authorities where required by law. We do not sell personal data. [confirm]

6. Storage, retention and transfers

Data is hosted in India [confirm]. Retention periods: [define per data type]. Data is erased when no longer needed unless law requires retention.

7. Your rights

Access to information, correction and erasure, grievance redressal, and nomination under the DPDP Act. To exercise rights, contact: [email].

8. Children

Our service is not intended for persons under 18. [Verify handling of children's data under the DPDP Act.]

9. Security and breach notification

We use reasonable safeguards [describe]. We will notify the Data Protection Board and affected users of a breach as required by law.

10. Grievance officer

[Name], [email], [address]. Response timelines: [define].

11. Changes

We will post updates here and notify you of material changes. [confirm]