Privacy Policy
How we collect, use, and protect your data.
1Who we are and scope
This Privacy Policy explains how Adhirohaah Industries (The Storemate), the Data Fiduciary, collects, uses, shares and protects your personal data when you use our platform. It is published under the Information Technology Act, 2000, the IT (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection Act, 2023 (DPDP Act).
This policy covers merchants and users of the The Storemate platform. For personal data of your own customers that we process on your behalf, you are the Data Fiduciary and we act as a Data Processor — see section 6.
2Data we collect
We collect the following categories of personal data:
- Account details — your name, email address and phone number.
- Store and business information you provide — including business name, GSTIN and payout details.
- Billing and payment information — processed by our third-party payment gateway; we do not store your full card details.
- Usage and technical data — IP address, device and browser information, log data and cookies needed to run and secure the service.
- Communications — messages you send us for support or enquiries.
3How we use your data
4Legal basis and consent
5Sharing and disclosure
6Data of your customers (our processor role)
7Data security
8Data retention
9Your rights
Under the DPDP Act, as a Data Principal you have the right to:
- Access a summary of the personal data we process about you.
- Seek correction, completion or updating of your personal data.
- Seek erasure of your personal data.
- Withdraw consent and nominate another person to exercise your rights.
- Grievance redressal (see section 12).
To exercise any of these rights, email hi@thestoremate.in. We will respond within 30 days. You may also lodge a complaint with the Data Protection Board of India.
10Children's data
11Cookies
12Grievance Officer and contact
In accordance with the Information Technology Act, 2000, the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 and the Digital Personal Data Protection Act, 2023, the details of our Grievance Officer are set out below. You may contact the Grievance Officer for any complaint or query regarding the service or your personal data.
We acknowledge every grievance within 24 hours and endeavour to resolve it within 15 days of receipt.