Privacy policy

Effective date: 25 April 2026. Last updated: 1 October 2026.

1. Introduction and data fiduciary identity

CLIQUECART LLP ("we", "us" or "our") is the Data Fiduciary as defined under the Digital Personal Data Protection Act, 2023. This Privacy Policy describes how we collect, use, store, share and protect your personal data when you visit our website www.cliquecart.in or purchase our products.

By using our website, you consent to the collection and processing of your personal data as described in this Policy.

2. Data we collect

2.1 Data you provide directly

  • Full name, email address, mobile number, delivery address and billing address
  • Payment information (we do not store full card numbers; payment data is handled by our payment gateway partner)
  • Account details, if you create an account
  • Communications with customer support (emails, chat transcripts)

2.2 Data collected automatically

  • IP address, browser type, operating system and device identifiers
  • Pages visited, time spent, clickstream data and referring URLs
  • Cookies and similar tracking technologies (see Section 8)

2.3 Data from third parties

  • Delivery address confirmation or updates from logistics partners
  • Payment confirmation data from payment gateway providers

3. Purpose of data processing

We process your personal data only for lawful purposes, as set out below:

  • Processing and fulfilling your orders, including invoicing and delivery
  • Creating and managing your account
  • Communicating order status, dispatch updates and delivery confirmations
  • Responding to customer service queries and complaints
  • Sending promotional communications and offers (only with your consent; you may opt out at any time)
  • Detecting and preventing fraud, abuse and security incidents
  • Complying with legal obligations under GST law, consumer protection law and other applicable Indian laws
  • Improving our website and product offerings through analytics

4. Legal basis for processing

Under the Digital Personal Data Protection Act, 2023, we process your personal data on the following lawful bases:

  • Consent: for marketing communications, cookies and non-essential data processing
  • Contract: for order fulfilment, account management and delivery
  • Legal obligation: for tax records, GST compliance and regulatory reporting
  • Legitimate interest: for fraud prevention, website security and service improvement

You may withdraw consent at any time. Withdrawing consent does not affect the lawfulness of processing based on consent before it was withdrawn.

5. Data sharing and disclosure

We do not sell, rent or trade your personal data to any third party. We may share your data only in the following limited circumstances:

  • Logistics and delivery partners: your name, address and phone number are shared with our delivery partners solely for order fulfilment.
  • Payment gateway providers: payment data is processed securely by our payment gateway partner. We do not store full payment card data.
  • Platform and hosting providers: our store is hosted on Shopify, and our data is held on secure cloud platforms with appropriate data processing agreements in place.
  • Legal and regulatory authorities: we may disclose data to government bodies, courts or law enforcement when required to do so by applicable Indian law or a court order.
  • Business transfers: in the event of a merger, acquisition or sale of assets, your data may be transferred to the successor entity, subject to equivalent privacy protections.

6. Data retention

  • Order data and transaction records: retained for 7 years, as required under GST laws and the Companies Act.
  • Account data: retained for the duration of the account and up to 2 years after account closure.
  • Marketing preferences and consent records: retained until consent is withdrawn.
  • Customer support communications: retained for 3 years.
  • Cookies and analytics data: retained as per cookie settings (see Section 8).

When the applicable retention period ends, your data will be securely deleted or anonymised.

7. Your rights as a Data Principal

Under the Digital Personal Data Protection Act, 2023, you have the following rights in relation to your personal data:

  • Right to access: request a summary of the personal data we hold about you and how it is being processed.
  • Right to correction: request correction of inaccurate or incomplete personal data.
  • Right to erasure: request deletion of your personal data, subject to legal retention obligations.
  • Right to withdraw consent: withdraw consent for any processing based on consent, without affecting the lawfulness of earlier processing.
  • Right to grievance redressal: lodge a complaint with our Grievance Officer (details in Section 12).
  • Right of nomination: nominate an individual to exercise your data rights on your behalf in the event of your death or incapacity.

To exercise any of these rights, contact us at privacy@cliquecart.in. We will respond within 30 days of receipt.

8. Cookies policy

Our website uses cookies and similar tracking technologies to improve your browsing experience.

Types of cookies we use

  • Essential cookies: required for the website to function (for example, the shopping cart and login session). These cannot be disabled.
  • Analytics cookies: help us understand how visitors interact with our website. Collected anonymously.
  • Marketing and preference cookies: used to show relevant advertisements and remember your preferences. Used only with your consent.

You can manage cookie preferences through your browser settings. Disabling non-essential cookies will not affect your ability to browse or buy on the website.

9. Children's data

Our website is not directed at children under the age of 18 years. We do not knowingly collect personal data from minors.

As required under the DPDP Act, 2023 and the DPDP Rules, 2025, we will obtain verifiable consent from a parent or legal guardian before processing any personal data of a child. If we become aware that we have inadvertently collected data from a minor without appropriate consent, we will delete it promptly.

10. Data security

We implement reasonable security practices and procedures, as required under Rule 8 of the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.

  • SSL/TLS encryption for all data transmitted between your browser and our servers
  • Encrypted storage of sensitive data
  • Access controls that limit data access to authorised personnel only
  • Regular security audits and vulnerability assessments
  • Documented incident response and data breach notification procedures

In the event of a data breach affecting your personal data, we will notify you and the Data Protection Board of India (once operational) within the timelines prescribed under the DPDP Act.

11. Cross-border data transfers

Our website may be hosted on servers located outside India. By using our website, you consent to the transfer of your data to servers outside India, subject to appropriate safeguards and contractual protections consistent with the DPDP Act.

12. Grievance Officer for privacy

For any privacy-related concerns, complaints or requests to exercise your rights, please contact our designated Grievance Officer:

  • Name: Vijay Kumar
  • Designation: Director
  • Email: grievance@cliquecart.in
  • Phone: 95601 55705
  • Address: Unit No. 228, Second Floor, Vardhman Dee Cee Plaza, Sector 11, New Delhi 110075, India
  • Hours: Monday to Saturday, 10 am to 6 pm IST

We will acknowledge your request within 24 hours and resolve it within 30 days.

13. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our data practices or applicable law. The revised Policy will be posted on this page with the updated date. We encourage you to review this Policy periodically.

Material changes will be communicated to registered users by email or by a prominent notice on the website.