Privacy Policy

1. Introduction

Cart4Cause LLP ("we", "our", or "us") respects your privacy and is committed to protecting your personal data. This Privacy Policy outlines how we collect, process, and protect your information when you use our platform at cart4cause.in. We are governed by the laws of India, including the Digital Personal Data Protection Act (DPDPA), 2023, and the Information Technology Act, 2000.

2. Data We Collect

We may collect and process the following categories of personal data:

• Account Data: Your name, email address, and phone number when you register an account with us.
• Financial Data: UPI ID or bank account details. This information is exclusively collected for the purpose of processing withdrawal requests and transferring your earned cashback to your account. It is not used for processing donations.
• Usage Data: Information about your interactions with our platform, including shopping clicks, stores visited, cashback earned, and withdrawal history.
• Device and Technical Data: Your IP address, browser type, and device type, which are collected primarily for fraud prevention and platform security.

3. How We Use Your Data

We use the data collected for the following purposes:

• Cashback Attribution: Matching your affiliate link clicks to successful purchases to calculate your earnings.
• Withdrawal Processing: Transferring approved cashback funds from your Cart4Cause wallet to your designated bank account.
• Platform Security: Detecting and preventing fraud or unauthorised access.
• Platform Improvements: Analysing anonymised and aggregated data to enhance user experience.
• Service Communications: Sending essential notifications regarding withdrawal confirmations, cashback updates, and policy changes.

4. Legal Basis for Processing

In accordance with the DPDPA 2023, we process your personal data under the following legal bases:

• Performance of a Contract: To fulfil our obligations to you, such as tracking cashback and processing your withdrawals.
• Legitimate Interest: To secure our platform, prevent fraudulent activities, and improve our services.
• Legal Obligation: To maintain accurate financial records as mandated by Indian law.

5. Data Sharing

We do not sell your personal data to advertisers or third parties. We only share data with:

• Affiliate Partners: We share anonymous session and click data to track your purchases. We do not share your name, email, or other identifying information.
• Payment Processors: We securely transmit your bank or UPI details strictly for processing your cashback withdrawal. Cart4Cause is not a payment intermediary for donations.
• Causes: If you explicitly choose to initiate a voluntary donation to a Cause from your own bank account, the Cause will only receive your name and donation amount. Your phone number, email address, and bank details are never shared with them by us.
• Government and Law Enforcement: We may disclose information if required to comply with a legal obligation, court order, or regulatory request under Indian law.

Please note that Cart4Cause does not automatically Support anything on your behalf. All donations are voluntary transactions between you and the Cause's payment gateway.

6. Data Retention

We retain your data only for as long as necessary to fulfil the purposes outlined in this policy:

• Account Data: Retained while your account is active, and for a period of 3 years following account deletion.
• Financial and Withdrawal Records: Retained for 7 years to comply with statutory financial regulations in India.
• Click and Tracking Data: Retained for 2 years. Note that cashback expires 2 years from the date it becomes payable if unused.
• Deleted Accounts: Associated data is permanently anonymised after 90 days, excluding legally required records.

7. Your Rights under DPDPA 2023

You possess the following rights regarding your personal data:

• Right to Access: Request a summary of the personal data we hold about you.
• Right to Correction: Request correction of inaccurate, incomplete, or outdated data.
• Right to Erasure: Request the deletion of your data, except where retention is legally mandated (e.g., financial records).
• Right to Withdraw Consent: You may withdraw your consent for processing at any time, though this may impact your ability to use the platform.
• Right to Nominate: You may nominate an individual to exercise these rights on your behalf in the event of death or incapacity.
• Right to Grieve: You may file a complaint with our Grievance Officer regarding data practices.

8. Data Security

We implement robust technical and organisational measures to safeguard your data, including HTTPS/TLS encryption for all data in transit, PBKDF2 hashing for passwords, and encryption of sensitive financial data at rest. We also enforce strict role-based access controls and conduct regular security audits to protect against unauthorised access or breaches.

9. Children's Privacy

Cart4Cause is not intended for use by individuals under the age of 18. We do not knowingly collect personal data from minors. If we become aware that a minor has provided us with personal data, we will take immediate steps to delete such information.

10. International Transfers

Your personal data is securely stored on servers located within India. In the rare event that data must be transferred internationally for operational purposes, we ensure that adequate safeguards are in place in compliance with Indian law.

11. Cookies

We use cookies and similar technologies to enhance your experience and track affiliate links. For detailed information, please refer to our Cookie Policy.

12. Changes to Policy

We may update this Privacy Policy from time to time. If we make material changes, we will provide you with at least 30 days' advance notice via email or a prominent notification on our platform.

13. Grievance Officer

In accordance with the Information Technology Act 2000 and the DPDPA 2023, the contact details of the Grievance Officer are provided below. We are committed to resolving your concerns within 30 days of receipt.

• Name: [Grievance Officer Name]
• Email: [email protected]

14. Contact Us

For any questions regarding this Privacy Policy or your data rights, please contact us at [email protected] or via our physical address at Cart4Cause LLP, Chennai, Tamil Nadu, India.