Privacy Policy

Every financial transaction conducted on Offlikart is protected by industry-leading security protocols:

• PCI-DSS Certified Gateways: Card payments, UPI, and net banking transactions are processed through Razorpay. All cardholder data is tokenized and encrypted at rest and in transit.
• Zero Plaintext Storage: Offlikart never captures or stores your CVV, card expiry date, or ATM PIN.
• Cash on Delivery (COD): For orders fulfilled via COD, only your name, verified phone number, and physical delivery address are transmitted to the assigned delivery agent.
• Wallet & Reward Coins: Loyalty reward coins and wallet credits are stored in our secure database ledger and can be redeemed towards eligible future purchases.
• Invoices & Taxation: Legally required sales records and GST invoices are preserved securely in compliance with commercial statutory retention requirements.

To ensure fast, accurate local delivery, necessary shipment information is shared exclusively with authorized fulfillment partners:

• Information Provided: Your recipient name, drop-off street address, landmark, PIN code, and phone number for delivery driver coordination.
• Verified Local Merchants: The originating local merchant receives necessary packing slip details to inspect, prepare, and seal your order.
• Live Tracking: Real-time delivery updates are powered through secure logistics APIs without public exposure of your address coordinates.
• Confidentiality Mandates: All delivery personnel and third-party couriers are bound by strict non-disclosure obligations and are prohibited from retaining or misusing customer contact information.

Cookies are small text files placed on your device to ensure core site features function smoothly and to enhance your shopping experience:

• Essential Cookies: Critical for keeping you logged in, maintaining active cart items, preserving CSRF security tokens, and storing your dark/light theme preference.
• Performance & Analytics Cookies: We utilize Google Analytics to analyze page load speeds, high-traffic categories, and user navigation paths to continually refine our platform.
• Location Preferences: Stores your selected neighborhood or city PIN code so you don't have to re-enter your location on every visit.
• Push Notification Tokens: If you grant permission, OneSignal manages device notification tokens to deliver order status and promotional alerts.

You can adjust or disable cookies through your browser settings at any time. Please note that disabling essential cookies may impact checkout functionality.

We do not monetize your private information. We only share data with essential third parties under contractual confidentiality:

• Local Sellers: Given order line items and shipping addresses exclusively for packing and dispatching your items.
• Payment Partners: Razorpay receives transactional data to authorize and clear payments.
• Delivery Fleets: Logistics partners receive shipping recipient details strictly to deliver packages.
• Infrastructure & Cloud Hosts: Reputable cloud hosting and CDN partners (e.g. Cloudflare) providing high-availability infrastructure and DDoS mitigation.
• Legal & Law Enforcement: Disclosures made strictly when mandated by valid court orders, government authorities, or to defend our rights against fraud.

Offlikart implements comprehensive technical, administrative, and physical safeguards to defend your personal data:

• End-to-End SSL/TLS Encryption: All traffic between your browser and our infrastructure is secured with modern 256-bit HTTPS encryption.
• Password Hashing: Passwords are cryptographically salted and hashed using state-of-the-art algorithms (Bcrypt/Argon2) — passwords cannot be retrieved by our staff.
• CSRF & XSS Protection: Every sensitive form submission requires a cryptographically verified CSRF token to prevent cross-site tampering.
• Rate Limiting & Firewalling: Automated protections mitigate brute-force password guessing, credential stuffing, and bot scanning.
• Granular Role Access: Administrative database access is restricted strictly to authorized engineering staff with audit logging.

We store your information only for as long as needed to fulfill the purposes outlined in this policy:

• Active Accounts: Account data remains active as long as your account is operational or until you request its closure.
• Order & Invoicing History: Order transaction logs, tax invoices, and accounting vouchers are retained for 5 years in compliance with statutory Indian commercial and taxation laws.
• Customer Support Logs: Support correspondence, return tickets, and email dialogues are retained for up to 24 months to address recurring warranty or seller disputes.
• Aggregated Telemetry: Anonymized, non-personally identifiable statistical summaries may be maintained indefinitely for analytical reporting.

You hold clear legal rights regarding your personal information:

• Access & Review: View personal records and order histories directly from your account portal.
• Correction & Rectification: Edit out-of-date or incorrect profile entries directly in settings.
• Promotional Unsubscribe: Unsubscribe from marketing newsletters at any time via the "unsubscribe" link in email footers.
• Push Notification Opt-Out: Revoke browser or app notification permissions within your device settings.
• Data Portability & Erasure: Request an export of your information or formal account deletion by messaging our data privacy officer.

To exercise any of these options, please contact us via our Help & Support page.

Our marketplace integrates with industry-standard third-party providers whose independent privacy policies apply to services rendered:

• Razorpay: Payment gateway and transaction processing — Razorpay Privacy Policy
• Google Analytics: Aggregated audience performance analytics — Google Privacy Policy
• Google Sign-In: Optional one-click social authentication — Google Privacy Policy
• OneSignal: Web and mobile push notification delivery — OneSignal Privacy Policy
• Cloudflare: Global CDN caching and DDoS mitigation — Cloudflare Privacy Policy

We review the security postures of all third-party integrations to ensure they uphold robust privacy standards.

Offlikart is an e-commerce platform intended for use by adults aged 18 and older. We do not intentionally solicit or collect personal information from individuals under the age of 18.

If you are a parent or guardian and discover that your minor child has created an account or provided personal details without consent, please contact our support team immediately. We will promptly investigate and permanently purge the relevant records from our database.

Minors aged 13 to 17 may browse the platform only with the direct permission and under the supervision of a parent or legal guardian.

We may periodically update this Privacy Policy to accommodate new marketplace features, business practices, or emerging legal standards:

• Notice of Revisions: When substantial changes occur, we will post an announcement banner on our homepage or notify registered account holders via email.
• Revision Date: The "Last Updated" timestamp at the top of this document indicates the effective date of the latest version.
• Review Recommendation: We encourage shoppers and sellers to periodically review this page to remain informed about our privacy safeguards.

Your continued access to and use of Offlikart after revisions are published constitutes acceptance of the amended policy.

If you have any questions, suggestions, or formal inquiries regarding this Privacy Policy or how your personal information is handled, we are here to assist:

• Customer Support Portal: Submit a Help Ticket
• Dedicated Privacy Email: support@offlikart.com
• Mailing Address: Offlikart Marketplace Operations, Customer Privacy & Compliance Team, India.
• Response Time Commitment: We endeavor to address and resolve all data protection inquiries within 48 business hours.

For urgent security-related alerts or reports of suspected account compromise, please select "Security Issue" when contacting customer support.