Privacy Policy

Welcome to AstoBag (operating through https://www.astobag.com, associated subdomains, and our mobile applications). This Privacy Policy describes how we collect, store, protect, use, and share personal information gathered from our users.

We operate in full compliance with the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection (DPDP) Act, 2023. By accessing our platform or providing us with your details, you consent to the practices outlined in this policy.

To process your orders and ensure smooth doorstep deliveries, we collect only necessary personal data:

• Contact & Account Details: Your full name, mobile phone number, email address, and account credentials when you register or sign in.
• Delivery & Location Information: Accurate shipping address, pin code, landmark, and optional delivery instructions needed by our logistics partners to deliver your goods.
• Order & Purchase History: Cart items, order history, timestamps, invoice details, refund records, and return requests.
• Communications & Feedback: Records of customer care interactions, support tickets, product reviews, and feedback provided to us.
• Device & Technical Identifiers: Browser type, operating system, IP address, and basic usage logs to maintain platform stability and prevent fraudulent activities.

We use collected information solely for legitimate business operations and service fulfillment:

• Order Fulfillment: Picking, packing, dispatching, and doorstep delivery of ordered groceries, daily necessities, and products.
• Transactional Updates: Sending SMS, WhatsApp, or email notifications containing OTP verifications, order confirmations, dispatch alerts, and digital tax invoices.
• Customer Support: Resolving cancellation requests, answering questions, issuing refunds, and troubleshooting issues.
• Fraud Prevention & Security: Detecting duplicate accounts, preventing payment abuse, and protecting account integrity.
• Service Improvements: Enhancing website performance, optimizing delivery routes, and maintaining system availability.

Our platform uses minimal essential cookies and browser local storage to provide core functions:

• Session Authentication: Remembering your logged-in state across pages securely.
• Cart & Checkout State: Ensuring items added to your shopping cart are preserved as you browse products.
• User Preferences: Storing UI preferences such as light or dark theme and selected language.

You can disable cookies in your browser settings at any time; however, certain interactive features such as shopping cart checkout or account sign-in may not function properly without essential session cookies.

Security is central to our checkout process:

• Encrypted Communications: All communication between your device and our servers is secured using modern TLS/SSL 256-bit encryption.
• PCI-DSS Compliant Gateways: Online transactions (UPI, Debit/Credit Cards, Net Banking) are processed directly by certified payment partners adhering to PCI-DSS standards.
• Cash on Delivery (COD): For cash payments, no sensitive financial information is requested or collected.

We only share minimal information with verified third-party partners strictly necessary to fulfill your orders:

• Logistics & Delivery Drivers: Delivery personnel receive only your name, shipping address, landmark, and phone number to navigate and complete your delivery.
• SMS & Notification Providers: Secure gateways used solely for dispatching transactional alerts (order confirmation, OTPs, tracking).
• Statutory Authorities: If required by valid legal process, judicial order, or statutory regulation under the laws of India.

You retain total control over your personal information. You have the right to request permanent account closure and erasure of personal data at any time:

• Self-Service Erasure: Visit our dedicated deletion portal at https://www.astobag.com/delete-account or click "Delete Account" in your profile settings.
• Zero Data Retention: When your request is confirmed, your account credentials, saved addresses, profile information, and personal identifiers are permanently wiped from our active databases.

Our services are intended for individuals who are at least 18 years of age or possess legal capacity to form binding contracts. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal information without parental consent, please contact us at support@astobag.com so we can promptly remove the data.

We maintain organizational and technological security safeguards to protect your data against loss, unauthorized access, or alteration:

• Access Controls: Strict role-based permissions ensuring only authorized personnel have access to operational customer data.
• Server Hardening: Firewalls, automated patch management, and encrypted backups.
• Retention Periods: Data is retained only for as long as necessary to fulfill order delivery, address potential returns or warranty claims, and comply with statutory taxation or accounting requirements under Indian law.

As a valued user, you have clear rights regarding your personal data:

• Access & Review: You can review and view your registered profile, address book, and order logs inside your account dashboard.
• Correction & Update: You may edit and update inaccurate profile information, phone numbers, or delivery addresses at any time.
• Withdraw Consent & Deletion: You may close your account and revoke consent for future data processing via our account deletion process.

We may periodically update this Privacy Policy to reflect operational improvements, changes in services, or new regulatory guidelines. When changes are made, the revised effective date will be posted at the top of this page. We encourage you to review this policy periodically.