Privacy Policy

This Privacy Policy describes how Let's Grow Bhaarat Networks Private Limited (“LGBN”, “we”, “us”) processes your personal data when you visit our website, register as a Member, or use the member dashboard (the “Platform”).

We are committed to handling your data responsibly and in accordance with the Digital Personal Data Protection Act, 2023, the Information Technology Act, 2000 and the SPDI Rules, 2011, and the Consumer Protection (E-Commerce) Rules, 2020. By using the Platform, you consent to the practices described here.

For the purposes of applicable law, LGBN is the Data Fiduciary (data controller) in respect of the personal data described below, and you are the Data Principal.

We collect the following categories of personal data:

• To create, verify, secure and administer your member account.
• To complete KYC and comply with tax (PAN/GST), anti-money-laundering and applicable e-commerce obligations.
• To process your orders, apply member pricing and rewards, and manage deliveries and returns.
• To process payments and record transaction references and confirmations.
• To provide customer support, process grievances, and send service and transactional communications.
• To detect and prevent fraud, abuse and security incidents, and to comply with legal obligations.
• With your consent, to send promotional updates about products and offers (you can opt out anytime).

We process your personal data on one or more of the following bases:

• Consent — which you give at sign-up and can withdraw at any time (this will not affect processing already carried out).
• Performance of a contract — to deliver the membership and services you have signed up for.
• Legal obligation — for KYC, taxation, and regulatory record-keeping.
• Legitimate use — for security, fraud prevention, and improving the Platform, balanced against your rights.

The UPI/bank details you provide are used to process payments, issue refunds where due, and generate payment instructions for your orders. You are responsible for keeping these details accurate and up to date.

We do not sell your personal data. We share it only as necessary and with appropriate safeguards:

• Order & delivery partners — logistics, courier and fulfilment partners receive only the information needed to deliver your orders (such as your name, address and contact number). Sensitive KYC data is never shared with delivery partners.
• Service providers — payment, KYC verification, hosting, communications and analytics partners who process data under contract and only on our instructions.
• Legal & regulatory — authorities, courts or regulators where required by law, or to protect rights, safety and prevent fraud.
• Business transfers — to a successor entity in the event of a merger, acquisition or reorganisation, subject to this policy.

We use cookies and similar technologies to keep you signed in, remember preferences, secure your session, and understand how the Platform is used. You can control cookies through your browser settings; disabling essential cookies may affect functionality. Analytics data is used in aggregate to improve the experience and is not used to identify you for marketing without consent.

• Encryption of data in transit (HTTPS/TLS) and at rest for sensitive fields.
• Role-based access controls, so staff access data only on a need-to-know basis.
• Hashing of passwords and secure handling of authentication tokens.
• Routine monitoring, logging, and periodic security reviews.

While we take reasonable security measures, no method of transmission or storage is completely secure. You are responsible for keeping your login credentials confidential and for notifying us promptly of any suspected unauthorised access.

We retain your personal data only for as long as necessary for the purposes set out in this policy, or as required by law. KYC, tax and transaction records are typically retained for at least eight (8) years after account closure to meet statutory obligations. When data is no longer required, it is securely deleted or anonymised.

Subject to applicable law, you have the right to:

• Access the personal data we hold about you and request a summary of how it is processed.
• Correct or update inaccurate or incomplete data.
• Withdraw consent for processing that relies on consent, and opt out of marketing.
• Request erasure of your data where it is no longer needed and no legal obligation requires us to keep it.
• Nominate another individual to exercise your rights in the event of death or incapacity.
• Lodge a grievance with our Data Protection Officer and escalate to the Data Protection Board of India.

To exercise any right, contact our Data Protection Officer (below). We may need to verify your identity before acting on a request and will respond within the timelines required by law.

The Platform is intended for individuals aged 18 and above. We do not knowingly collect personal data from minors. If we learn that we have collected data from a minor without verifiable parental consent, we will delete it promptly.

We may update this Privacy Policy to reflect changes in law or our practices. The updated version will be posted here with a revised “Last updated” date, and material changes will be communicated through the Platform. Please review it periodically.

If you have questions, requests, or complaints about your data, please contact our Data Protection / Grievance Officer:

Officer

Data Protection Officer, LGBN Compliance Cell

Email

privacy@lgbn.in

Registered office

Let's Grow Bhaarat Networks Pvt Ltd, New Delhi, India

Response time

Acknowledgement within 48 hours; resolution endeavoured within 30 days.

This policy should be read together with our Terms & Conditions.