Privacy Policy

Minimal collectionPhone, name, addresses, orders, and support chats — only what running the service requires.

Payments stay with the gatewayCard, UPI, and banking credentials are captured directly by PCI-DSS-compliant gateways, never by us.

Delete your account anytimeIn-app (Profile → Settings → Delete account) or by email — profile data removed within 30 days.

Indian law compliantPublished under the IT Act, 2000, SPDI Rules, 2011, and the DPDP Act, 2023, with a named Grievance Officer.

On this page

Who We Are & What This Policy Covers
Information We Collect
How We Use Your Information
Who We Share Data With
How We Protect Your Data
How Long We Keep Data
Your Rights & Choices
Account & Data Deletion
Children’s Privacy
Cookies & Similar Technologies
Changes to this Policy & Contact

01Who We Are & What This Policy Covers

This Privacy Policy explains how SHOP RIGHTEPAY CORPORATION LIMITED (“RightPay Shop”, “we”, “us”), registered office at First floor, Arabindapally Gopalpur Uttarpara, Paschim Bardhaman, West Bengal -713212, collects, uses, shares, and protects your personal data when you use the website www.rightpayshop.com and the RightPay Shop mobile application (together, the “Platform”), covering shop orders, Satvik Bhog food orders, and home service bookings.

This policy is published in accordance with the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection Act, 2023 (“DPDP Act”). It is available publicly, without login, at https://www.rightpayshop.com/privacy.html. By using the Platform you consent to the practices described here.

02Information We Collect

We collect only what we need to run the Platform. Specifically:

Category	Data	When it’s collected
Identity & contact	Name, mobile number, receiver name and phone for deliveries.	Account creation (OTP sign-in), address book.
Addresses & location	Saved delivery addresses, pincode, and — only with your permission — precise device location used to pin your address on the map.	When you add or select an address.
Orders & bookings	Items ordered, food preferences, service intake answers, order history, delivery instructions (including optional voice notes you record).	When you shop, order food, or book a service.
Payments	Transaction reference, amount, payment status, and payment method type. We never receive or store card numbers, CVVs, UPI PINs, or banking passwords — these go directly to the payment gateway.	At checkout.
Support & communications	In-app support chat messages, complaint details, photos you upload as evidence for damage/return claims, and call-back records.	When you contact support.
Rewards	R-Coins balance, Spin & Win participation, coupon usage.	When you use reward features.
Device & usage	Device type, app version, IP address, crash and security logs (e.g. content-security violation reports), and basic usage analytics.	Automatically, to keep the Platform secure and working.

We do not collect biometric data, and we do not use your camera or microphone except for features you actively invoke (such as recording a voice delivery instruction or attaching a photo to a claim).

03How We Use Your Information

To provide the service: create your account, verify you via OTP, process orders and bookings, deliver to your address, estimate delivery times, and assign service professionals.
To process payments and refunds through our payment gateway partners, and to issue invoices.
To support you: operate in-app chat, resolve complaints, process return/refund/damage claims, and arrange agent call-backs.
To run rewards and offers: credit and redeem R-Coins, apply coupons, and administer Spin & Win.
To communicate: send transactional messages (OTPs, order status, delivery updates) by SMS, WhatsApp, and in-app notifications; and, with your consent where required, promotional offers you can opt out of at any time.
To keep the Platform safe: detect fraud, false claims, and abuse; secure our systems; and comply with legal obligations.

We do not sell your personal data, and we do not use it for third-party advertising.

We share personal data only with parties who need it to serve you, under contractual confidentiality and security obligations:

Payment gateways and aggregators (currently PhonePe) — to process payments and refunds. They act under their own RBI-regulated compliance frameworks.
OTP and messaging providers — to deliver SMS/WhatsApp OTPs and order notifications to your number.
Google Maps Platform — to display maps, help you pin addresses, and estimate travel times. Location data is processed per Google’s privacy policy.
Delivery partners, service professionals, and kitchen staff — they see only what is needed to fulfil your order: receiver name, address, phone number, order contents, and delivery instructions.
Professional advisers and authorities — where required by law, court order, or to establish or defend legal claims, or to investigate fraud.

If our business is reorganised, merged, or acquired, personal data may be transferred to the successor entity under this policy’s protections. We do not otherwise disclose your personal data to third parties.

05How We Protect Your Data

All Platform traffic is encrypted in transit using HTTPS/TLS.
Payment credentials are handled exclusively by PCI-DSS-compliant payment gateways; they never touch our servers.
Access to production systems and databases is restricted to least-privilege accounts, and secrets are stored outside the web root.
We enforce a strict Content Security Policy, monitor security logs, and apply rate-limiting and OTP lockouts to protect accounts.
Support staff access customer records only as needed to resolve your request.

No system is perfectly secure; if a data breach affecting you is identified, we will notify you and the relevant authorities as required under applicable law.

06How Long We Keep Data

Data	Retention
Account profile & addresses	Until you delete your account, plus a short deactivation window.
Order, booking & invoice records	8 years, as required by Indian tax and accounting law.
Support chats & claim evidence	Up to 24 months after the ticket is closed.
Voice delivery instructions	Deleted after order fulfilment, and in any case within 30 days.
Security & server logs	Up to 12 months.

When retention periods end, data is deleted or irreversibly anonymised.

07Your Rights & Choices

Under the DPDP Act, 2023 and applicable law, you have the right to:

Access a summary of the personal data we hold about you;
Correct inaccurate or incomplete data (name, addresses, and numbers can be edited directly in the app);
Erase your personal data, subject to legal retention requirements (see Account & Data Deletion below);
Withdraw consent for optional processing — e.g. disable location permission in device settings (you can still type addresses manually) or opt out of promotional messages via the opt-out link/instruction in the message or by writing to us;
Grievance redressal — complain to our Grievance Officer, and thereafter to the Data Protection Board of India;
Nominate another individual to exercise your rights in case of death or incapacity.

To exercise any right, email support@rightpayshop.com from your registered contact details. We respond within the timelines prescribed by law.

08Account & Data Deletion

Two ways to delete your account and data In the app: Profile → Settings → Delete account, then confirm via OTP.
By email: write to support@rightpayshop.com with the subject “Delete my account” from your registered number/email.

On deletion, your profile, saved addresses, reward balances, and preferences are removed within 30 days. Transaction and invoice records are retained only as long as tax, accounting, and fraud-prevention law requires (see Retention above), after which they are deleted or anonymised. Deleting your account forfeits unused R-Coins and cannot be undone.

09Children’s Privacy

The Platform is intended for users aged 18 and above and is not directed at children. We do not knowingly collect personal data from anyone under 18. If you believe a minor has provided us personal data, contact us and we will delete it.

10Cookies & Similar Technologies

The Platform uses strictly necessary cookies and local storage to keep you signed in, remember your cart and selected address, and protect against fraud. We do not use third-party advertising or cross-site tracking cookies. Embedded services (such as Google Maps or YouTube videos) may set their own cookies governed by their policies. You can clear cookies in your browser or app settings; some features may stop working without them.

11Changes to this Policy & Contact

We may update this policy from time to time; the “Last updated” date above reflects the current version, and material changes will be announced in the app before they take effect.

Data / Grievance Officer: Mr. Sanjoy Moni, SHOP RIGHTEPAY CORPORATION LIMITED, First floor, Arabindapally Gopalpur Uttarpara, Paschim Bardhaman, West Bengal -713212 — support@rightpayshop.com (subject: “Privacy”). Complaints are acknowledged within 48 hours and resolved within 30 days.

Questions about this policy?

Write to support@rightpayshop.com or use the in-app Need Help? Chat with us option on any order, booking, or food order. Grievance Officer details are listed in Section “Grievance Redressal” of our Terms & Conditions.

SHOP RIGHTEPAY CORPORATION LIMITED · First floor, Arabindapally Gopalpur Uttarpara, Paschim Bardhaman, West Bengal -713212 · CIN/GSTIN: U45400WB2011PLC161876