Privacy Policy
We are committed to protecting your personal information and being transparent about how we use it.
Last updated: March 4, 2026
Khatakhat Logistics Pvt. Ltd. (CIN: U49230MN2025PTC015455), operating under the brand name "Khatakhat", is a technology-driven hyperlocal commerce platform headquartered in Imphal, Manipur, India. This Privacy Policy explains how we collect, use, store, and protect your information when you use our website (khatakhat.in), mobile applications, vendor partner apps, and related services (collectively, the "Platform").
By accessing or using the Platform, you agree to the practices described in this policy. If you do not agree, please discontinue use of the Platform.
1. Information We Collect
a) Personal Information
When you register, place an order, or use our services, we may collect:
- Full name and contact details (phone number, email address)
- Delivery addresses and saved locations
- Payment information (processed securely via Razorpay; we do not store card details)
- Order history and transaction records
b) Vendor & Partner Information
For registered vendors and delivery partners, we additionally collect:
- Business name, location, and type
- KYC documents (GSTN, FSSAI, Aadhar, Driver's License, Vehicle RC) for verification
- Credit limits, ledger entries, and payout records
c) Automatically Collected Information
- Device information (device type, OS version, unique device identifiers)
- IP address and browser type
- App activity, usage patterns, and interaction logs
- GPS location data (delivery partners only, when online and on-task)
2. How We Use Your Information
We use the information we collect to:
3. Consent
In accordance with the Digital Personal Data Protection Act, 2023 (DPDPA), we process your personal data based on your free, specific, informed, and unambiguous consent.
By registering on the Platform, placing an order, or submitting any form, you expressly consent to the collection and processing of your personal data as described in this Privacy Policy.
You may withdraw your consent at any time by contacting us at support@khatakhat.in. Please note that withdrawal of consent will not affect the lawfulness of processing carried out before such withdrawal, and may result in limited access to certain features of the Platform.
For vendor and delivery partner accounts, consent is obtained during the onboarding and KYC verification process.
4. What We Do NOT Do
5. Data Sharing & Disclosure
We may share your information only in the following limited circumstances:
- 1.Service Providers: With trusted partners like Razorpay (payments), AWS (hosting), and Gupshup/Twilio (WhatsApp/SMS notifications) — strictly for operational purposes under contractual obligations.
- 2.Order Fulfillment: Delivery addresses and contact details are shared with assigned delivery partners solely to complete your delivery.
- 3.Legal Requirements: When required by law, regulation, or government authority in India, including compliance with the Digital Personal Data Protection Act, 2023.
- 4.Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred as part of the transaction, with prior notice to affected users.
6. Cross-Border Data Transfer
Some of our service providers (such as AWS for cloud hosting and Razorpay for payment processing) may store or process data on servers located outside India.
In such cases, we ensure that your data is transferred only to countries or entities that are not restricted by the Central Government of India under the Digital Personal Data Protection Act, 2023. All such transfers are governed by appropriate contractual safeguards to ensure the same level of data protection.
7. Data Security
We implement reasonable security practices and procedures as required under the DPDPA and IT Act, 2000:
Encryption in Transit & at Rest
All data is encrypted using SSL/TLS during transmission and encrypted at rest on our servers.
Secure Infrastructure
Hosted on AWS with industry-standard access controls, monitoring, and regular backups.
Authentication
OTP-based login with secure JWT session management via HTTP-only cookies.
Access Control & Logging
Role-based access with audit logging ensures only authorized personnel can view sensitive data.
8. Data Breach Notification
In the event of a personal data breach, we will:
- Notify the Data Protection Board of India as required under the DPDPA, 2023.
- Inform affected Data Principals (users, vendors, or partners) promptly about the nature and scope of the breach.
- Take immediate corrective measures to contain the breach and prevent recurrence.
9. Data Retention & Account Deletion
We retain your personal information for as long as your account is active or as needed to provide services to you.
Transaction records and financial data (including vendor ledger entries and payout history) are retained as required by Indian tax and commercial laws.
How to Delete Your Account
You can request complete deletion of your account and associated personal data at any time by:
- Emailing us at support@khatakhat.in with the subject "Account Deletion Request"
- Using the "Delete Account" option within your app profile settings
Upon request, your personal data will be erased from our active systems within 90 days, except where retention is required by applicable Indian law (e.g., tax records under the Income Tax Act, 1961).
10. Your Rights as a Data Principal
Under the Digital Personal Data Protection Act, 2023, you have the following rights:
- 1Right to Access: Request a summary of your personal data being processed and the processing activities.
- 2Right to Correction & Erasure: Update inaccurate data or request deletion of your personal data.
- 3Right to Withdraw Consent: Withdraw your consent at any time; this will not affect prior lawful processing.
- 4Right to Grievance Redressal: File a complaint with our Grievance Officer or escalate to the Data Protection Board of India.
- 5Right to Nominate: Nominate another person to exercise your rights in the event of your death or incapacity, as provided under the DPDPA.
To exercise any of these rights, contact our Grievance Officer (details in Section 16 below) or email support@khatakhat.in.
11. Cookies & Tracking Technologies
We use cookies and similar technologies to maintain your session, remember your preferences, and improve your experience. These include:
- Essential Cookies: Required for authentication and core platform functionality.
- Analytics Cookies: Help us understand platform usage to improve our services.
We do not use advertising or third-party marketing cookies.
12. Third-Party Services & SDKs
Our Platform integrates with the following third-party services:
- Razorpay — Payment processing (UPI, cards, COD)
- Google Maps SDK — Navigation and delivery tracking
- Gupshup / Twilio — WhatsApp and SMS notifications
- AWS (Amazon Web Services) — Cloud infrastructure and hosting
Each of these services has its own privacy policy. We encourage you to review them independently. We are not responsible for their data practices.
13. Children's Privacy
Our Platform is intended for users aged 18 and above. We do not knowingly collect personal information from children under the age of 18. In compliance with the DPDPA, 2023, we do not engage in tracking, behavioral monitoring, or targeted advertising directed at minors. If we become aware that we have inadvertently collected data from a minor, we will take prompt steps to delete such information.
14. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make significant changes, we will notify you via the Platform, email, or in-app notification. The "Last updated" date at the top of this page indicates when this policy was last revised. Continued use of the Platform after changes constitutes acceptance of the updated policy.
15. Governing Law
This Privacy Policy is governed by and construed in accordance with the laws of India, including but not limited to:
- The Digital Personal Data Protection Act, 2023 (DPDPA)
- The Information Technology Act, 2000 and IT Rules, 2011
- The Indian Contract Act, 1872
Any disputes arising under this policy shall be subject to the exclusive jurisdiction of the courts in Imphal, Manipur, India.
16. Grievance Officer & Contact Us
In accordance with the Information Technology Act, 2000 and the DPDPA, 2023, the details of our Grievance Officer are as follows:
Grievance Officer
Name: The Grievance Officer, Khatakhat Logistics Pvt. Ltd.
Email: grievance@khatakhat.in
Phone: +91 96121 87787
Address: Paona Bazar, Imphal 795001, Manipur, India
The Grievance Officer shall acknowledge your complaint within 48 hours and resolve it within 30 days of receipt.
General Support
support@khatakhat.inPhone
+91 96121 87787Registered Office
Khatakhat Logistics Pvt. Ltd.
CIN: U49230MN2025PTC015455
Paona Bazar, Imphal 795001
Manipur, India
If you are unsatisfied with the resolution provided by our Grievance Officer, you may file a complaint with the Data Protection Board of India as established under the DPDPA, 2023.