Privacy Policy

Last Updated: 18 March 2026

This privacy policy is published by Retail Pulse Labs Private Limited (CIN: U72200KA2021PTC152819), having its registered office at Site no. 1165, 5th Main Road, Sector 7, HSR Layout, Bengaluru, Karnataka – 560 102, India, a wholly owned subsidiary of Kirana Club Pte Ltd, incorporated in Singapore (UEN: 202339784H).

Retail Pulse Labs operates the Kirana Club platform (kirana.club and the Kirana Club mobile application) and is the entity responsible for collection, storage, and processing of your data under applicable Indian law.

In this policy, “Retail Pulse Labs,” “the Company,” “we,” “us,” and “our” refer to Retail Pulse Labs Private Limited unless stated otherwise.

1. Applicability

This policy applies to all personal information and sensitive personal data or information (“SPDI”) collected through the Kirana Club website, mobile application, and any related services. By accessing or using our platform, you consent to the collection, use, storage, and disclosure of your information as described in this policy.

This policy is published in compliance with the Information Technology Act, 2000 (“IT Act”) and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (“SPDI Rules”).

2. Our Platform — B2B Context

Kirana Club is a B2B platform. Our users are kirana store owners (retailers) and sellers/brands — not end consumers. The majority of information we collect is business information, including:

• Store name and trade name
• GST number (GSTIN)
• Business address and delivery address
• Business category and type

Such business information is not classified as SPDI under the SPDI Rules.

In addition, we collect limited personal data necessary to operate the platform:

• Name of the store owner or authorised representative
• Email address
• Phone number
• Delivery address

3. Information We Collect

3.1 Personal Information

We collect personal information that you voluntarily provide when registering on the platform, placing orders, contacting us, or using our services. This includes your name, email address, phone number, and delivery address.

3.2 Sensitive Personal Data or Information (SPDI)

Under Rule 3 of the SPDI Rules, sensitive personal data or information includes:

• Passwords
• Financial information (bank account, credit/debit card, or other payment instrument details)
• Physical, physiological, and mental health condition
• Sexual orientation
• Medical records and history
• Biometric information

Of these categories, we collect only:

• Passwords — for account authentication on the platform.
• Payment-related information — where applicable, to facilitate transactions on the platform.

We do not collect health data, biometric data, sexual orientation, or medical records.

Important: We do not store payment card details (credit card numbers, CVV, etc.) on our systems. All payment processing is handled by PCI-DSS compliant third-party payment gateways. We may store only transaction reference IDs and payment confirmation details for record-keeping purposes.

3.3 Log Data

When you visit our website, our servers may automatically log standard data provided by your web browser, including your device’s IP address, browser type and version, pages visited, time and date of visit, time spent on each page, and technical details related to any errors encountered. This data, by itself, may not personally identify you but could be combined with other information to do so.

4. Purpose of Collection and Use

We collect and use your information for the following purposes related to our B2B marketplace operations:

• Account creation and authentication
• Facilitating orders between retailers and brands/sellers
• Logistics and delivery coordination
• Payment processing and invoicing
• Seller and retailer onboarding
• Customer support and communication
• Platform improvement, analytics, and research
• Compliance with legal and regulatory obligations
• Sending relevant platform updates and notifications (you may opt out at any time)

Your personal information will not be used for purposes incompatible with those stated above.

5. Consent

By using the Kirana Club platform and providing your information, you consent to the collection, storage, processing, and use of your personal information and SPDI as described in this policy. Where SPDI is collected, your explicit consent is obtained at the point of collection.

Right to withdraw consent: You may withdraw your consent at any time by writing to us at legal@kirana.club. Please note that withdrawal of consent may limit your ability to access or use certain features of the platform.

6. Security of Your Information

We implement commercially reasonable security practices and procedures commensurate with the information being protected, as required under the SPDI Rules. These measures are designed to protect your information from unauthorised access, disclosure, copying, use, or modification.

While we take all reasonable precautions, no method of electronic transmission or storage is 100% secure. We will comply with applicable law in respect of any data breach.

You are responsible for maintaining the confidentiality of your account credentials and password.

7. Data Storage

Your data is stored on Google Cloud Platform (GCP) servers with encryption at rest and encryption in transit. We retain your information only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law for compliance, accounting, or reporting obligations.

When your information is no longer required, we will delete it or anonymise it by removing all identifying details.

8. Disclosure of Information

We may share your information with:

• Third-party service providers — logistics partners, payment gateways, and cloud infrastructure providers, solely for the purpose of delivering our services.
• Kirana Club Pte Ltd (parent entity) — for platform development, product improvement, and intellectual property-related purposes. This is an intra-group transfer, not a third-party disclosure.
• Legal and regulatory authorities — where required by law, court order, or government request, or to establish, exercise, or defend our legal rights.

We do not sell your personal information to third parties.

9. Cookies and Tracking Technologies

We use cookies and similar technologies to collect information about your activity on our site. A cookie is a small piece of data stored on your device that helps us understand how you use our platform and serve you relevant content.

We also use the following analytics and tracking tools:

• Google Analytics — for website traffic analysis and usage patterns.
• Google Tag Manager — for managing tracking scripts and tags.
• Mixpanel — for product analytics and user engagement tracking.

These tools may collect data such as pages visited, session duration, device type, and approximate location based on IP address. You can manage cookie preferences through your browser settings.

10. Your Rights

Under applicable law, you have the right to:

• Review the personal information we hold about you.
• Correct any information that is inaccurate, incomplete, or out of date.
• Withdraw consent for the collection and use of your information (subject to the limitations noted in Section 5).
• Request details of the personal information we hold and the purposes for which it is being used.
• Opt out of marketing communications at any time.

To exercise any of these rights, please contact us at legal@kirana.club. We may request specific information from you to verify your identity before processing your request.

11. International Transfers of Information

Your information may be transferred to and processed in locations outside India. In particular, data may be shared with our parent entity, Kirana Club Pte Ltd (Singapore), for platform development and IP-related purposes. This is an intra-group transfer within the Kirana Club group of companies.

Where we transfer information internationally, we ensure that such transfers comply with applicable law and that your information continues to be protected in accordance with this policy.

12. Children’s Privacy

Our platform is designed for business users (kirana store owners and sellers/brands). We do not knowingly collect personal information from children under the age of 18. If we become aware that we have collected information from a minor, we will take steps to delete it promptly.

13. Third-Party Links

Our platform may contain links to external websites that are not operated by us. We have no control over the content or privacy practices of those sites and cannot accept responsibility for their respective privacy policies. We encourage you to review the privacy policy of any third-party site you visit.

14. Grievance Officer

In accordance with Rule 5(9) of the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, the Company has designated the following Grievance Officer:

If you have any complaints or concerns regarding the processing of your information, you may contact the Grievance Officer at the above details. All complaints will be acknowledged and addressed within 30 days of receipt.

15. Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. Any changes will be posted at this URL. We encourage you to review this page periodically. Your continued use of the platform after any changes constitutes your acceptance of the updated policy.

16. Contact Us

For any questions or concerns about this privacy policy, please contact us at: