Privacy Policy

1. Data Fiduciary & Data Protection Officer

Takora Mart acts as the Data Fiduciary under the DPDP Act, 2023, meaning it determines the purpose and means of processing your personal data. The following officer is designated as the Data Protection Officer (DPO):

2. Personal Data We Collect

Here are the types of personal information we collect:

Information You Give Us: We receive and store any information you provide in relation to Takora Mart Services. You can choose not to provide certain information, but then you might not be able to take advantage of many of our Takora Mart Services.

2.1. You provide information to us when you:

• search or shop for products or services in our marketplace;
• add or remove an item from your cart, or place an order through or use Takora Mart Services;
• view, provide information in your account (and you might have more than one if you have used more than one e-mail address or mobile number when shopping with us) or your profile;
• upload your contacts, including access to mobile device contacts for certain services;
• configure your settings on, provide data access permissions for, or interact with a Takora Mart service; or any other account we make available that allows you to buy goods, or services to Takora Mart customers;
• offer your products or services on or through Takora Mart Services;
• communicate with us by phone, e-mail, or otherwise;
• complete a questionnaire or a contest entry form;
• provide and rate reviews, specify a Special Occasion Reminder; or
• employ Product Availability Alerts, such as Available to Order Notifications.

2.2. As a result of those actions, you might supply us with such information as:

• identifying information such as your name, address and phone numbers;
• payment information;
• your age;
• your location information;
• your IP address;
• people, addresses and phone numbers listed in your Addresses;
• e-mail addresses of your friends and other people;
• content of reviews and e-mails to us, the personal description and photograph in your profile, voice recordings when you speak to Takora Mart, and other content collected or stored in connection with Takora Mart Services;
• information and officially valid documents regarding identity and address information, including PAN numbers, credit history information, corporate and financial information; and
• device log files and configurations, including Wi-Fi credentials, if you choose to automatically synchronize them with your Takora Mart services.

Automatic Information: We automatically collect and store certain types of information about your use of Takora Mart Services, including information about your interaction with content and services available through Takora Mart Services. Like many websites, we use cookies and other unique identifiers, and we obtain certain types of information when your web browser or device accesses Takora Mart Services and other content served by or on behalf of Takora Mart on other websites.

2.3. Examples of the information we collect and analyze include:

• the internet protocol (IP) address used to connect your computer to the internet;
• login, e-mail address, and password;
• the location of your device or computer;
• content including information about your internet service provider;
• device metrics such as when a device is in use, application usage, connectivity data, and any errors or event failures;
• Takora Mart Services metrics (e.g., the occurrences of technical errors, your interactions with service features and content, your settings preferences and backup information, location of your device running an application, version and time zone settings);
• purchase and content use history, which we sometimes aggregate with similar information from other customers to create features like bestsellers;
• the full Uniform Resource Locator (URL) clickstream to, through, and from our websites, including date and time;
• products and content you viewed or searched for;
• page response times, length of visits to certain pages, and page interaction information (such as scrolling, clicks, and mouse-overs);
• phone numbers used to call our customer service number; and
• images or videos when you shop in our marketplace using Takora Mart Services.

We may also use device identifiers, cookies, and other technologies on devices, applications, and our web pages to collect browsing, usage, or other technical information.

2.4. Information from Other Sources:

We might receive information about you from other sources, such as updated delivery and address information from our carriers, which we use to correct our records and deliver your next purchase more easily. Examples of information we receive from other sources include:

• updated delivery and address information from our carriers or other third parties, which we use to correct our records and deliver your next purchase or communication more easily;
• account information, purchase or redemption information and page-view information from some merchants with which we operate co-branded businesses or for which we provide technical, fulfillment, advertising or other services;
• information about your interactions with products and services offered by our affiliates;
• search results and links, including paid listings (such as Sponsored Links);
• credit history information from credit bureaus, which we use to help prevent and detect fraud and to offer certain credit or financial services to some customers.

3. Purposes of Processing & Legal Basis

For What Purposes Does Takora Mart Use Your Personal Information?

We use your personal information to operate, provide, develop, and improve the products and services that we offer our customers. These purposes include:

• Purchase and delivery of products and services. We use your personal information to take and fulfill orders, deliver products and services, process payments, and communicate with you about orders, products and services, and promotional offers.
• Provide, troubleshoot, and improve Takora Mart Services. We use your personal information to provide functionality, analyze performance, fix errors, and improve the usability and effectiveness of the Takora Mart Services.
• Recommendations and personalization. We use your personal information to recommend features, products, and services that might be of interest to you, identify your preferences, and personalize your experience with Takora Mart Services.
• Provide voice, image and camera services. When you use our voice, image and camera services, we use your voice input, images, videos, and other personal information to respond to your requests, provide the requested service to you, and improve our services.
• Comply with legal obligations. In certain cases, we collect and use your personal information to comply with laws. For instance, we collect from sellers information regarding place of establishment and bank account information for identity verification and other purposes.
• Communicate with you. We use your personal information to communicate with you in relation to Takora Mart Services via different channels (e.g., by phone, e-mail, chat).
• Advertising — We use your personal information to display interest-based ads for features, products, and services that might be of interest to you. We do not use information that personally identifies you to display interest-based ads. Interest-based ads are sometimes referred to as personalized or targeted ads. We show interest-based ads to display features, products, and services that might be of interest to you. In providing interest-based ads, we follow applicable laws, as well as the Code for Self-Regulation in Advertising by the Advertising Standards Council of India and the Self-Regulatory Principles for Online Behavioral Advertising developed by the Digital Advertising Alliance (a coalition of marketing, online advertising, and consumer advocacy organizations).
• Fraud Prevention and Credit Risks. We use personal information to prevent and detect fraud and abuse in order to protect the security of our customers, Takora Mart and others. We may also use scoring methods to assess and manage credit risks.

What About Cookies and Other Identifiers?

To enable our systems to recognize your browser or device and to provide and improve Takora Mart Services, we use cookies and other identifiers. For more information about cookies and how we use them, please read our cookie policy.

4. Consent Notice

In accordance with Section 6 of the DPDP Act, 2023, we collect your personal data only on the basis of a free, specific, informed, unconditional, and unambiguous indication of your wishes. At the point of registration and data collection, you will be presented with a clear consent notice specifying:

• The categories of personal data being collected.
• The specific purpose(s) for which data is collected.
• The identity of any Data Processors or third parties to whom data may be shared.
• Your right to withdraw consent at any time.

5. Your Rights as a Data Principal

Under the DPDP Act, 2023, you have the following rights, which you may exercise by contacting the DPO at compliance@takoramart.com:

6. Data Retention & Deletion

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by law:

Upon expiry of the retention period or upon a valid erasure request, personal data will be securely deleted or anonymized using industry-standard methods. You may request the deletion of your account and associated data at any time through the Platform settings or by contacting the DPO.

7. Children's Data Protection

7.1. Commitment to Children's Privacy

Takora Mart Private Limited ("Takora Mart", "we", "our", or "us") is committed to protecting the privacy and personal data of children. We recognize the heightened protections afforded to children's personal data under applicable Indian law and implement appropriate technical and organizational safeguards to ensure compliance.

7.2. Definition of Child

For the purposes of this Privacy Policy, a "Child" means an individual who has not attained the age of eighteen (18) years or such other age as may be prescribed under applicable law.

7.3. Collection of Children's Personal Data

Takora Mart does not knowingly collect, process, store, or otherwise use the personal data of a Child without obtaining verifiable consent from the Child's parent or lawful guardian, wherever such consent is required under applicable law.

Where we become aware that personal data has been collected from a Child without the necessary parental or guardian consent, we reserve the right to suspend the relevant account and delete such personal data in accordance with applicable law.

7.4. Verifiable Parental Consent

Where our Services are used by or on behalf of a Child, we shall obtain verifiable consent from the parent or lawful guardian before processing the Child's personal data. We may use reasonable identity and age verification mechanisms or any other legally recognized method to verify such consent.

7.5. Prohibited Processing

Takora Mart shall not:

• undertake behavioural monitoring or profiling of Children;
• use Children's personal data for targeted or personalized advertising;
• process Children's personal data in any manner likely to cause harm or be detrimental to the well-being, safety, or interests of the Child; or
• knowingly disclose Children's personal data except where required by law or necessary for providing the requested service.

7.6. Limited Processing

Where Children's personal data is processed, such processing shall be limited to what is strictly necessary for:

• creating and maintaining an account under parental supervision;
• processing orders placed by a parent or lawful guardian;
• customer support;
• fraud prevention and security;
• compliance with applicable legal obligations; and
• any other lawful purpose permitted under applicable law.

7.7. Rights of Parents and Guardians

Parents or lawful guardians may:

• review the Child's personal data held by Takora Mart;
• request correction, updating, or deletion of such data;
• withdraw previously granted consent, subject to legal and contractual obligations;
• request restriction of processing where permitted by law; and
• contact our Grievance Officer or Data Protection Officer regarding any concerns relating to the processing of a Child's personal data.

7.8. Reporting

If you believe that a Child has provided personal data without appropriate parental authorization, please contact us immediately. Upon verification, we will take appropriate corrective action, including deletion or restriction of processing, as required by law.

7.9. Applicable Laws

This Children's Data Protection Clause shall be governed by and interpreted in accordance with:

• the Digital Personal Data Protection Act, 2023, including Section 9 relating to the processing of children's personal data;
• the Digital Personal Data Protection Rules, 2025 (including provisions relating to verifiable parental consent);
• the Information Technology Act, 2000 and applicable rules thereunder, where relevant;
• the Consumer Protection Act, 2019 and the Consumer Protection (E-Commerce) Rules, 2020, where applicable; and
• any other applicable laws, regulations, notifications, or government directions relating to children's privacy and personal data protection in India.

8. Personal Data Breach Notification

In the event of a personal data breach likely to result in risk to the rights of Data Principals, Takora Mart shall:

• Notify the Data Protection Board of India within the timelines prescribed under the DPDP Act, 2023.
• Inform the affected Data Principals in a clear manner regarding the nature of the breach, affected data, possible consequences, and remediation measures.
• Document the breach, its causes, and remedial actions in a breach register maintained by the DPO.

9. Cross-Border Data Transfers

9.1. Operational Necessity and Scope of Transfer

To facilitate our global operations, ensure platform reliability (such as disaster recovery and redundancy), and provide seamless services, Takora Mart Private Limited may transfer, process, and store your personal data on secure servers and cloud infrastructure located outside the sovereign territory of India. Such international transfers may involve sharing data with our trusted third-party service providers, data processors, and corporate affiliates who assist us in operations, data analytics, cloud hosting, and customer support.

9.2. Legal Compliance and Permissible Jurisdictions

Any international transfer of personal data shall be executed in strict adherence to all applicable Indian data protection frameworks, particularly Section 16 of the Digital Personal Data Protection (DPDP) Act, 2023. We categorically restrict cross-border data transfers to countries, territories, or international organizations explicitly notified as permissible by the Central Government of India, ensuring those jurisdictions are not restricted by regulatory authorities.

9.3. Mandatory Safeguards and Security Protocols

To guarantee that your personal data continues to receive a level of security, privacy, and confidentiality commensurate with domestic Indian legal standards, Takora Mart mandates rigorous technical, organizational, and legal safeguards for all cross-border transfers. Where data is transferred internationally, we enforce robust protective measures, including but not limited to:

• Legally Binding Agreements: Implementing Standard Contractual Clauses (SCCs) and Data Processing Agreements (DPAs) with our foreign processors to enforce strict, legally binding compliance with Indian data protection obligations.
• Cryptographic Protection: Utilizing advanced encryption protocols to ensure that personal data remains fully encrypted both in transit (via TLS/SSL) and at rest on foreign servers.
• Audits and Access Controls: Enforcing stringent role-based access controls, adopting the principle of least privilege, and conducting periodic security assessments of our international data processors to verify ongoing compliance.

9.4. Data Localization Exceptions

Notwithstanding the above, in instances where Indian regulatory authorities mandate the localized storage of specific categories of data (such as certain financial, banking, or payment data under Reserve Bank of India guidelines), Takora Mart fully complies by processing and maintaining such critical data exclusively on servers physically located within the borders of India.

10. Cookies & Tracking Technologies

The Platform uses cookies and similar technologies to enhance user experience, analyze website traffic in aggregate, and enable platform functionality. We do not use User IDs or purchase history for cross-app or cross-website tracking as defined by Apple's App Tracking Transparency framework.

11. Grievance Redressal & Privacy Contact

For privacy-related concerns, requests to exercise your rights, or to report a suspected data breach, please contact:

• Grievance / Data Protection Officer: Sudharsanan Acharya
• Email: compliance@takoramart.com
• Phone: +91 90742 20963
• Registered Address: Takora Mart, Door no. 51/2384/5 Ground floor, Leshore business park, Aranattukkara village, Poothole, Thrissur, 680004
• Privacy Centre (Web): https://takoramart.com/privacy
• Response Times: Acknowledgement within 48 hours; Resolution within 30 days.

12. Policy Updates

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or platform features. When we make material changes, we will notify you via email or a prominent notice on the Platform prior to the changes becoming effective. Continued use of the Platform after any revision constitutes acceptance of the updated Policy.