Privacy Policy

Last updated: August 2026   |   Little-Kart Ecommerce Private Limited

Little-Kart Ecommerce Private Limited (“Littlekart”, “we”, “us” or “our”) operates the Littlekart mobile application and website (together, the “Platform”). Protecting your privacy and the security of your personal information is important to us. We take reasonable measures to keep customer data private and secure. This Privacy Policy explains how we collect, use, disclose and retain information about you when you use our Platform, interact with our services, or communicate with us.

1. Scope and applicability

This Privacy Policy applies to personal and non-personal information collected by Littlekart through the Platform, customer support channels, and other electronic communications related to our services. It does not apply to information collected by third parties (including delivery partners, payment processors or other service providers) that operate under their own privacy policies. Please review the privacy policies of any third-party service you interact with.

2. Permissible age

The Platform is intended for users who have reached the legal age of majority in their jurisdiction (generally 18 years or older). We do not knowingly collect personal information from children under the permissible age. If we become aware that a child under the permissible age has provided personal information without parental consent, we will take reasonable steps to delete such information.

3. Information we collect

We collect information in three main ways: (A) information you provide directly to us; (B) information collected automatically when you use the Platform; and (C) information we obtain from third parties.

A. Information you provide

• Account & authentication: Mobile phone number used to register and for OTP verification. OTP is used for authentication; we do not retain OTPs beyond their verification purpose. The Platform currently uses phone OTP as the primary login method. If Google, Facebook, or other social sign-in is enabled in future, we may receive basic profile details from that provider.
• Contact & delivery: Name, delivery address, map pin / coordinates, alternate phone number (if provided), GSTIN (if you request a tax invoice), and other delivery-related instructions required to fulfil orders.
• Order & transactional data: Items ordered, quantities, prices, timestamps, payment transaction identifiers, tips, fulfilment type (delivery or store pickup), refund, return or replacement history, and delivery/pickup OTPs generated for handover.
• Communications: Correspondence with customer support (including in-app chat transcripts), feedback, surveys, contest entries and other information you submit.
• Content you upload: Photos or videos you submit in relation to a complaint (for example, proof of damage or spoilage), Print Store files (PDFs, images, and similar), profile images or other content you choose to share.
• Referrals: Invite or referral codes you share or apply, and related reward status.

B. Information collected automatically

• Device & technical information: IP address, device identifiers, operating system, browser type and version, mobile network information, and connection details.
• Usage data: Pages or screens visited, time spent, features used, click and search history, product recommendations interactions, error logs, and other analytics necessary to operate and improve the Platform.
• Location information: With your permission, we may collect precise device location (GPS) and map-pin coordinates to assign the nearest store, check serviceability, estimate delivery time, and support live tracking. You can revoke location permissions at any time through your device settings; some features (including delivery) may then be limited.
• Voice search: If you use voice search, the microphone is used to capture your spoken query so it can be converted to text. We use this to run the search. Audio may be processed by us or a speech-to-text provider and is not used to build a voice profile for unrelated marketing.
• Cookies & tracking: We (and our partners) use cookies, web beacons, mobile identifiers and similar technologies to personalise the experience, analyze usage and support advertising and measurement. You may control cookies through your browser or device settings.

C. Information from third parties

We may receive information about you from third parties, such as payment gateways (for example Razorpay), map and places providers (Google), analytics providers, marketing partners, and delivery partners. We combine this information with other data we hold to operate and improve our services.

4. How we use information

We use the information we collect for the following purposes:

• To create and manage your account and authenticate login via OTP;
• To process, confirm and fulfill orders, including sharing relevant information with the assigned store, store staff, and delivery partners;
• To show live delivery tracking and to generate and verify delivery or pickup OTPs;
• To process print jobs from files you upload;
• To personalize the Platform experience, search, product recommendations, offers and communications;
• To process payments and refunds via PCI‑compliant payment processors such as Razorpay;
• To respond to your enquiries, complaints and support requests;
• To send transactional communications (order confirmations, delivery updates, invoices);
• To detect, prevent and remediate fraud, abuse or other unlawful activity;
• To analyze and improve the Platform, perform analytics and reporting;
• To comply with legal and regulatory obligations and to enforce our agreements;
• To communicate marketing messages where you have consented to receive them.

5. Sharing and disclosure of information

We share personal information with:

• Service providers: Payment processors, delivery partners, map and places providers (Google), cloud and hosting providers, customer support, fraud detection, speech-to-text (for voice search), and analytics vendors who process information on our behalf under contractual confidentiality and security requirements.
• Stores, store managers and staff: The assigned store and authorised store-manager / staff applications receive the information needed to pack and fulfil your order (such as name, phone, address, items, and pickup instructions). Staff are not permitted to use this data for personal contact or unrelated marketing.
• Delivery partners: The assigned driver may receive your name, delivery address, delivery instructions, and phone number (masked where feasible; otherwise as described in the Terms). During an active trip we may share the driver’s live location with you. The driver may capture a delivery-proof photograph of the package or drop-off.
• Sellers & partners: Sellers, brands and stores (where applicable) to enable order fulfilment and respond to product issues or quality feedback.
• Legal & regulatory: Law enforcement, courts, government agencies, tax authorities or other third parties where required by law or to protect the safety, rights or property of Littlekart, its users or the public.
• Business transfers: In the event of a merger, acquisition, reorganization or sale of assets, personal information may be transferred as part of the transaction. We will notify users where required by applicable law.
• With consent: Other disclosures where you have provided explicit consent.

6. Payments and payment card information

Payments on Littlekart are processed through PCI‑compliant third-party payment gateways (for example, Razorpay). We do not store full payment card numbers or sensitive payment authentication data on our servers. When you make a payment, transaction details and non-sensitive payment metadata may be shared with our payment processor and bank partners to complete the transaction and for settlement.

7. Cookies and similar technologies

We and our partners use cookies, local storage, pixel tags and mobile identifiers to recognize devices, maintain sessions, store preferences and measure the effectiveness of our services and advertising. You may disable or manage cookies via your browser or device settings, but some features of the Platform may not function correctly if cookies are disabled.

8. Data retention

We retain personal information as long as necessary to provide our services, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods may vary by data type (for example, transactional records and invoices may be retained for several years to meet statutory tax or audit requirements). Print-job files are retained only as long as needed for fulfilment, reprint requests, quality, or disputes, then deleted or anonymised where feasible. Live-tracking data is used for the active order and may be kept for a limited period afterwards for safety and dispute resolution. Delivery-proof photos and chat transcripts are kept similarly for support and fraud prevention.

9. Security

We implement administrative, technical and physical controls designed to protect personal data from unauthorized access, disclosure, alteration or destruction. These controls include encryption in transit (HTTPS), access controls, monitoring and secure development practices. While we strive to protect your information, no system is completely secure—if you suspect your personal data has been compromised, contact us immediately.

We are committed to safeguarding customer privacy in our day-to-day operations. For calls between you and Littlekart (including delivery coordination or support), we may use masked or virtual numbers where that feature is available. Call masking is not guaranteed; your phone number may be shown to the assigned driver or delivery partner when masking is not used, so they can contact you to complete the delivery. Call recordings, where used, are handled for training, quality, and safety purposes in line with this Privacy Policy.

10. Your rights and choices

Subject to applicable law, you may have the right to access, correct, update, restrict or delete your personal information, and in certain jurisdictions to obtain a copy of your personal data in a portable format. You may also object to or restrict certain processing activities and withdraw consent where processing is based on consent.

To exercise your rights, please contact us using the details below. We may need to verify your identity before fulfilling such requests and certain requests may be restricted by law or our operational needs (for example, we may retain records for fraud prevention, tax or regulatory purposes).

11. Deletion of account

If you request deletion of your account through the app, we will deactivate your account and, subject to legal or operational retention obligations, delete or anonymise personal data that is no longer required. Order, invoice, and tax records may be retained as required by law even after account deletion. Backups may remain in disaster-recovery systems for a limited period. There may be a short processing or cooling-off period before deletion is completed. Your phone number may not be immediately available to register a new account.

12. Children

The Platform is not intended for children under the permissible age. We do not knowingly collect personal information from children under that age. If we learn that such information has been collected, we will take steps to delete it.

13. International transfers

Littlekart is based in India. Personal information collected through the Platform may be processed and stored in India and in other countries where our service providers operate. Where required by law, we take steps to ensure appropriate safeguards are in place for cross-border transfers.

14. How we protect personal data shared with third parties

We require third-party service providers to implement reasonable security measures and process personal information only for the purposes specified by us. These providers are contractually bound to maintain confidentiality, use the data only as permitted and comply with applicable laws.

15. Automated decision making & profiling

We may use automated means and analytics to personalize content, offers and recommendations. Automated profiling is used to improve user experience and detect fraud. If you have concerns about automated processing, contact us using the details below.

16. Marketing communications

We may send promotional messages by WhatsApp, SMS, email or push notifications where you have consented to receive them. You can opt out of marketing communications at any time through notification preferences in the app or unsubscribe instructions. Transactional messages (such as OTPs, order status, and delivery updates) may still be sent as they are required to operate the Service.

17. Maps and location services (Google)

Address search, map pins, geocoding, and related location features may use Google Maps Platform. When you use those features, information such as search text and coordinates may be processed by Google in accordance with Google’s privacy policy. We use this data to confirm your delivery location and store assignment.

18. Third-party links and services

The Platform may contain links to third-party websites or services which have their own privacy policies. We are not responsible for the content or privacy practices of those sites. Please review their privacy policies before sharing personal information.

19. Changes to this policy

We may update this Privacy Policy periodically to reflect changes in our practices, legal requirements or service features. We will post the revised policy on the Platform with an updated effective date. Your continued use of the Platform after a change will constitute your acceptance of the updated policy.

This Privacy Policy is effective as of August 2026.