Privacy Policy

KARTSEEK operates a multi-service platform in United States covering marketplace, grocery, food delivery, pharmacy, and related services. For personal data collected from users in United States, KARTSEEK acts as the data controller.

This notice is issued under CCPA/CPRA and comparable state privacy statutes. Our processing in United States is supervised by the California Privacy Protection Agency and state attorneys general.

We collect only what a given service needs to work, and we tell you at the point of collection why we need it.

• •Account details — name, mobile number, email address, and password credentials.
• •Delivery details — the addresses you save, and the location you share when you ask us to find nearby stores.
• •Order and payment records — what you bought, when, and the payment method used. Card numbers are handled by our payment providers and are never stored on KARTSEEK systems.
• •Device and usage data — the pages you visit and the device you use, for security and for the analytics you have consented to.
• •Support correspondence — messages you send us and our replies.

We process personal data to perform our contract with you, to comply with legal obligations, and for our legitimate interests in operating and securing the platform.

Where we rely on your consent — for marketing and for optional analytics — you can withdraw it at any time from Privacy Settings in your account.

State privacy laws gives you the following rights over your personal data. You can exercise any of them from Privacy Settings in your account, or by contacting our Data Protection Officer at [email protected]. We respond within 30 days.

• •Know what is collected
• •Delete
• •Correct
• •Opt out of sale or sharing
• •Limit use of sensitive data
• •Non-discrimination

We share personal data only with parties who need it to deliver the service you asked for:

• •The seller or restaurant fulfilling your order — your name, contact number and delivery address.
• •The delivery partner assigned to your order — the same details, for the duration of the delivery.
• •Payment providers licensed in United States, to take and settle your payment.
• •Service providers who host and secure our systems, bound by written processing agreements.
• •Public authorities, where we are legally required to disclose.
• •We do not sell personal data.

Personal data collected from users in United States may be processed by service providers in other countries. Where that happens we rely on the transfer mechanisms State privacy laws permits and put contractual safeguards in place that carry the same level of protection.

We keep your account while it is open. Order, payment and invoice records are retained for 7 years to meet commercial and tax record-keeping obligations in United States, after which they are deleted or irreversibly anonymised.

When you delete your account we remove your profile and contact details immediately, and retain only the transaction records we are required to keep.

Data is encrypted in transit and at rest, access is restricted to staff who need it for their role and is logged, and payment card data never touches our systems.

If a breach affects your personal data we notify the California Privacy Protection Agency and state attorneys general and the individuals concerned within 72 hours of becoming aware of it, as State privacy laws requires.

KARTSEEK is not intended for anyone under 13. We do not knowingly collect personal data from children below that age; where we learn that we have, we delete it.

Alongside State privacy laws, our operations in United States are subject to:

• •FTC Act Section 5
• •COPPA
• •State e-commerce disclosure rules

Data Protection Officer — [email protected].

If you are not satisfied with our response you can complain to the California Privacy Protection Agency and state attorneys general.