Privacy Policy Image

Privacy Policy

This website, www.COWBERRY.com (“Website,” “Site”), is owned and operated by COWBERRY Industries Private Limited (“COWBERRY,” “we,” “us,” or “our”). The term “you” refers to the user or viewer of our Website. COWBERRY is a brand of COWBERRY Industries Private Limited, incorporated under Indian law, with its registered office in Block No. 530, Vill. Umbhel, Hari Pura Patiya, NH-48, Surat, Gujarat-394325, INDIA. COWBERRY respects your privacy and is committed to protecting your personal data. We collect and use personal information only as needed for our business and in compliance with Indian laws and regulations. This policy explains what data we collect, why we use it, how we protect it, and your rights. Our practices follow India’s legal requirements, including Section 43A of the IT Act 2000 (which mandates reasonable security for sensitive data), the Consumer Protection (E‑Commerce) Rules 2020 (which require clear privacy disclosures and a grievance officer), and the principles of the new Digital Personal Data Protection Act (DPDP Act). In line with these principles, we process data lawfully, fairly, and transparently; we limit collection to what’s needed; we keep data accurate and up-to-date; we retain data only as long as necessary; and we implement strong safeguards against unauthorized access.

Information We Collect

We collect personal information in order to provide and improve our grocery e-commerce services. The types of information we may collect include:

Account Details: Your name, email address, password, and other login information when you create an account.
Contact Information: Shipping address, phone number, and billing address for delivery and communication.
Payment Information:  Payment card details or bank account information are needed to process your orders. (Note: Payment credentials are handled securely and may be processed by third-party payment gateways.). Financial details such as credit card or bank data are considered sensitive personal data or information under Indian law. We treat these with extra care and comply with all security requirements when processing them.
Preferences: Your shopping or dietary preferences, communication preferences, and any personalization settings (for example, favorite products or delivery times) that help us serve you better.
Usage and Device Data: Information about how you use our website or app, such as pages viewed, items clicked, and time spent. We may also collect technical data such as IP address, browser type, and device identifiers to help maintain and improve our services.

All information is collected with your knowledge and consent, and is used only as described below.

How We Use Your Information (Purposes and Legal Basis)

We use your personal data to fulfill our contract with you and to provide and improve our services. In particular, we process your information for these purposes (with the legal basis noted):

Order Fulfillment: To process and deliver your orders (purchase, payment processing, shipment tracking) as required by our sales contract with you. This is necessary for contract performance.
Account Management: To create and maintain your account, authenticate your login, and communicate order status or account updates.
Customer Service To respond to inquiries, resolve issues, and provide support (by email, phone, or chat).
Marketing and Promotions:  With your consent, we may send you promotional offers, newsletters, or updates about our products and services. You can withdraw this consent at any time (see Your Rights below).
Improving Services: To analyze usage trends, perform research, or develop new products and features. These activities are based on our legitimate interest in improving our business operations, and we balance this against your privacy rights.
Compliance and Safety: To comply with applicable laws (such as tax or accounting requirements), protect against fraud or illegal use of our services, and enforce our terms and policies. Processing for legal compliance and fraud prevention is a legitimate interest and often a legal obligation.

In all cases, we ensure processing is for a lawful purpose – specifically, with your consent or in our legitimate interests (such as completing orders, legal compliance, or improving services). We never use your data in ways that are not transparent or permitted by law.

Your Rights

Under Indian law and the forthcoming DPDP Act, you have several rights regarding your personal data. You can exercise these rights by contacting us (see Grievance Officer below). Your rights include:

Right to Access: You can request a summary of the personal data we hold about you and details of how it is processed.
Right to Correction: You can ask us to correct or update any inaccurate or incomplete personal information we hold.
Right to Deletion: You can request that we erase personal data we have collected, subject to our legal and contractual obligations. (For example, if you withdraw your consent or close your account, we will delete your personal data unless we must retain it to comply with the law or complete a transaction.)
Right to Withdraw Consent For data processing based on consent (such as marketing), you can withdraw your consent at any time. We will stop processing data for that purpose once consent is withdrawn.
Right to Grievance Redressal: You have the right to file a complaint or grievance about our data practices. We have an established process to address your concerns promptly.
Right to Nominate: You may appoint someone to exercise these rights on your behalf in case of your incapacity or after your death.

Please note that some rights (like access or erasure) apply only when data has been provided by you or with your consent. We will respond to all requests within the timelines prescribed by law.

Security Measures

We use appropriate technical and organizational measures to protect your data from unauthorized access, disclosure, alteration, or destruction. This includes encryption of data in transit and at rest, secure servers, firewalls, intrusion detection systems, and access controls. Our information security program follows industry best practices (for example, standards like ISO/IEC 27001) and the requirements of India’s IT laws. Under Section 43A and related rules, we maintain reasonable security practices and procedures, and under the DPDP Act, we undertake reasonable safeguards to prevent data breaches. We also regularly review and update our security measures, and our systems are audited to ensure compliance. In the unlikely event of a data breach, we will follow the legal requirements for notifying affected individuals and authorities.

Cookies and Tracking Technologies

Like many e-commerce sites, we use cookies and similar technologies (such as web beacons or local storage) to operate our website. Cookies are small files stored on your device that help us provide a better user experience. We use:

Essential Cookies: Required for basic site functionality (e.g., keeping you logged in, remembering items in your shopping cart, security). These cookies do not track your activity beyond this site.
Analytics Cookies: To analyze how visitors use our website, so we can improve content and performance. These cookies collect information anonymously (for example, pages visited and time spent).
Marketing/Advertising Cookies: With your consent, we may use these cookies (from us or trusted partners) to send you targeted offers or to measure ad performance. You will always be informed before marketing cookies are used, and you can accept or reject them.

When you first visit our site, you will see a cookie banner giving you the choice to accept or decline non-essential cookies. Consent for non-essential cookies is optional and can be withdrawn at any time. We do not use cookies to track your behavior outside our site or to profile children. In fact, the DPDP Act forbids behavioral monitoring or targeted advertising of children. You can learn more about cookies and manage your preferences through your browser settings or our cookie consent tool.

Sharing Your Information

We will not sell your personal information. We share your data only with trusted third parties as needed for our business and as required by law:

Service Providers: We engage third-party service providers to perform certain functions on our behalf, such as payment gateways (for processing payments), delivery partners (for shipping orders), IT service providers, analytics providers, and marketing vendors. These partners receive the data necessary to do their job and are contractually required to keep it confidential and secure. For example, we share your delivery address with couriers and payment details with payment processors. As a user, you have the right to know with whom we share your data.
Legal Compliance: We may disclose your information when required by law, regulation, or legal process (for example, tax authorities, law enforcement, or court orders).
Corporate Transactions: If our company is involved in a merger, acquisition, or sale of assets, your personal data may be transferred to the new owners or affiliates, provided they honor the commitments in this policy.
Consent:  We may share data for any other purpose with your explicit consent.

In all cases, we require that any third party processing your personal data comply with similar privacy and security obligations.

Children’s Privacy

Our services are intended for adults and customers 18 years or older. We do not knowingly collect personal data from children under 18 without parental consent. If you are under 18, you must have permission from a parent or guardian to use our services. If we learn that we have collected a child’s information without appropriate consent, we will delete it. We also do not target children with marketing or personalized ads.

Data Retention and Deletion

We retain your personal data only for as long as needed to fulfill the purposes described above or to meet legal requirements. For example, we keep transaction and billing information for the period required by tax and accounting laws. When the purpose for processing your data has been served (for instance, after your order is delivered and the return period has passed) or if you withdraw consent, we will cease to retain that data. You can also request deletion, in which case we will erase your data unless we must retain it for legal reasons (e.g., compliance with tax or consumer protection laws). In short, we stop keeping personal data when it is no longer needed or upon your request, unless a law requires longer retention.

Steps to Delete Your Account on COWBERRY App

Navigate to the Dashboard: Open the COWBERRY application and log in to your account. Once logged in, you will be redirected to the main Dashboard.
Access Profile: On the Dashboard, locate Navbar Account. Click on the “Account” option from the sidebar to access your profile details.
Access the Settings: Within the Account section, locate the “Settings” option. Tap on “Settings” to continue.
Delete Your Account: In the Settings menu, find the “Delete Account” option. Click on “Delete Account.”

A confirmation pop-up will appear asking you to confirm your action. Carefully review the information provided, then click “Yes” to permanently delete your account.

Important Note:

If you choose to delete your account, all your personal data and user records associated with COWBERRY will be permanently removed from our database and cannot be recovered.

Grievance Officer and Contact

To address any concerns or complaints about this Privacy Policy or our data practices, we have designated a Grievance Officer. The Grievance Officer’s contact information is published on our website as required by law. You can reach our Grievance Officer at the contact details below:

Email:  grievance@cowberry.com
Phone:  180012128000 [Toll Free] (10 AM – 6 PM, Mon–Sat)
Address:   Block No. 530, Vill. Umbhel, Hari Pura Patiya, NH-48, Surat, Gujarat-394325, INDIA

Updates to This Policy

We may update this Privacy Policy from time to time (for example, as required by changes in law or our services). We will post the new version on our website with a revised “Last Updated” date. We encourage you to review the policy periodically. Your continued use of our services after any changes will mean you accept the updated terms.

Mobile Application Data Collection and Usage

As part of providing and improving our mobile application services, we may collect and process the following categories of information:

Contact Information

Name: Collected to provide app functionality, personalize user experience, and support account-related services. This information may be linked to the user's identity.
Email Address: Collected for analytics, communication, account management, and service-related notifications. This information may be linked to the user's identity.
Phone Number: Collected to support app functionality, verification, and communication purposes.
Physical Address: Collected to provide app-related services and functionality where required. This information may be linked to the user's identity.

Location Information

Precise Location: Collected with user permission to enable location-based features and improve app functionality.

Contacts

Contacts Access: Collected only with user permission to enable specific app features and functionality.

Identifiers

Device ID: Collected to support app functionality, improve user experience, prevent fraud, and for tracking purposes where applicable.

Diagnostics Information

Crash Data: Collected to identify, diagnose, and resolve technical issues and improve app stability.
Performance Data: Collected to monitor and improve application performance, reliability, and overall user experience.

All data collection is performed in accordance with applicable privacy laws and only for the purposes described in this Privacy Policy.