CornerInch Technologies Private Limited

A. Introduction

This Privacy Policy ('Policy') will help you understand how CornerInch Technologies Private Limited ("CornerInch" or the 'Company') collects, processes, uses, and safeguards the personal information and data you provide when you visit, use, or access the Store, create or use a Store account, or make a purchase on the Store. This Policy applies to personal data collected directly through the Store, including data you provide, data generated through your use of the Store, and data shared with us by Sellers, logistics partners, payment gateways, or other service providers in connection with transactions carried out on the Store.

The Store may integrate or redirect you to third-party platforms such as payment gateways, logistics tracking portals, or external links. Such third-party platforms operate under their own privacy policies and terms. We are not responsible for the privacy practices of such third parties.

This Policy is intended to supplement and operate in conjunction with the Terms of Use of the Store (which can be accessed at www.cornerinch.com) ("Terms") and the Store Policies. Any term not specifically defined herein shall have the meaning ascribed to it in the Terms.

The Company reserves the right to, from time to time, amend and modify this policy. The User acknowledges and accepts that they may also be subject to receiving periodic communications from the Company related to their obligations under this Policy. It is the sole responsibility of the User to stay informed of any updates, or policy amendments or modifications issued by Company, as more particularly detailed in Section K (Amendments and modifications to the Terms or the Store Policies) of the Terms.

In the event of any inconsistency between this Policy and applicable law, the provisions of applicable law, including any statute, rule, regulation, notification, guideline, circular, direction, order, or judicial decision, as enacted, issued, interpreted, or amended from time to time, whether now in force or enacted in the future, shall prevail to the extent of such inconsistency.

This document is an electronic record in terms of the Information Technology Act, 2000 and rules thereunder as applicable and the amended provisions pertaining to electronic records in various statutes as amended by the Information Technology Act, 2000. This electronic record is generated by a computer system and does not require any physical or digital signatures.

B. User Consent and Lawful Processing

By accessing and using the Store, and by providing data to us, the User agrees and provides its free, specific, informed, unconditional, and unambiguous consent to the collection, use, storage, transfer, disclosure, and sharing of their data strictly for the limited and specified purposes described in this Privacy Policy and in accordance with applicable law.

Certain processing activities are necessary for the performance of services requested by you, including account creation, order processing, payment coordination, fraud prevention, customer support, grievance handling, and compliance with legal obligations. If you choose not to provide information that is necessary for these purposes, you may not be able to access or use certain features of the Store.

C. Collection of Information

When you access or use the Store, we collect and process personal data necessary to operate the marketplace, facilitate transactions between you and Sellers, coordinate payments and logistics, provide customer support, and comply with applicable law. The nature and extent of data collected depends on how you use the Store and which Products or services you choose. We do not collect personal data that is not reasonably required for these purposes. We collect the following categories of information:

i. Account and Contact Information

When you create an account or place an order, we may collect your name, email address, mobile number, billing and shipping address, and recipient details (if different from you). Where required under applicable law or for fraud prevention, we may collect limited identification information or verification details.

ii. Order and Transaction Information

In connection with purchases made on the Store, we may collect and maintain:

• Order details (Product name, quantity, price, order ID, invoice details)
• Payment status information (such as successful, failed, refunded, or chargeback)
• Payment method type (e.g., UPI, card, wallet), and masked instrument identifiers as provided by the payment gateway
• Refund, cancellation, and return history
• Gift card or digital voucher usage (where applicable)

Payments are processed through independent payment gateways. We receive only transaction confirmations and limited payment metadata necessary for reconciliation and compliance.

iii. Shipping and Fulfilment Information

To enable delivery of Products, we may process:

• Delivery address and contact number
• Courier partner details and tracking numbers
• Delivery status, proof of delivery, and delivery attempt records
• Return pickup details and inspection outcomes

Such information may be shared with the relevant Seller and logistics partner strictly for order fulfilment purposes.

iv. Device and Technical Information

When you access the Store, we may automatically collect limited technical data necessary for security, fraud prevention, performance monitoring, and basic analytics. This may include:

• IP address
• Browser type and device type
• Operating system
• Pages visited and interaction logs
• Error reports and security logs

We do not use this data to build extensive behavioral profiles. Technical data is used primarily to maintain platform functionality, detect misuse, and improve Store performance.

v. Customer Support and Grievance Data

If you contact customer support or raise a grievance, we may collect:

• Communication records (emails, chat transcripts, call recordings, where applicable)
• Photographs or videos submitted
• Supporting documents provided in connection with disputes or verification

This information is used solely to resolve your query or comply with legal obligations.

vi. Cookies and Similar Technologies

We use cookies and similar technologies to enable core Store functionality, maintain session security, and generate aggregated analytics. For detailed information on the types of cookies used and how you may manage them, please refer to our Cookies Policy at www.cornerinch.com.

D. How Do We Collect Your Data?

We, and trusted third parties acting on our behalf, collect data through the following sources, depending on how you interact with the Store:

i. Information You Provide Directly

We collect information directly from you when you:

• Create or update a Store account
• Place an order or enter delivery details
• Initiate a return, cancellation, or refund request
• Contact customer support or raise a grievance
• Submit reviews, ratings, or feedback
• Participate in surveys, promotions, or campaigns

The information collected depends on the nature of the interaction and the services requested.

ii. Information Collected Automatically

When you access or use the Store, certain technical and usage information is collected automatically to ensure platform functionality, security, and performance monitoring. This may include:

• IP address
• Device type, browser type, and operating system
• Session identifiers
• Pages viewed, cart activity, and navigation patterns
• Error logs and system activity

We use cookies and similar technologies to enable essential Store functions, maintain session integrity, and generate aggregated analytics. Some analytics tools may be provided by third-party service providers acting on our behalf.

For more information about how cookies and similar technologies are used, please refer to our Cookies Policy at www.cornerinch.com.

iii. Information from Payment Gateways and Logistics Partners

Payments are processed through independent payment gateways. We do not collect or store full card details. We may receive limited transaction related information from such gateways, including:

• Payment status
• Masked payment instrument identifiers
• Authorization or settlement confirmation
• Refund or chargeback status

We may also receive delivery and fulfilment information from logistics providers and Sellers, including tracking details, delivery confirmations, and return status updates. This information is used solely to manage transactions, provide support, and maintain records.

iv. Information from Sellers

As a marketplace, certain order related information may be shared between you and the relevant Seller to enable order fulfilment, returns, warranty support, and dispute resolution. We may receive status updates and related information from Sellers in connection with such transactions.

v. Device Permissions (Where Applicable)

In limited circumstances, certain device-based permissions may be requested to enable specific Store features. For example:

• Access to camera functionality for uploading images related to return or defect claims
• Access to location data to determine serviceability or estimate delivery timelines

Such access is requested only when necessary for a specific feature and can be managed through your device settings. We do not access device functionalities beyond what is reasonably required for Store operations.

vi. Social Media or Connected Accounts

If you choose to link your Store account with a third-party social network or service, we may receive limited profile information as permitted by your privacy settings on that service.

E. How Do We Use Your Data?

We use personal data collected through the Store only for legitimate and specific purposes connected with operating the marketplace, facilitating transactions between Users and Sellers, maintaining platform integrity, conducting performance marketing, and complying with applicable law. We do not sell your personal data to third parties for monetary consideration. Depending on how you interact with the Store, we may use your data for the following purposes:

i. Account Creation and Store Access

• Create and manage your Store account
• Authenticate logins and maintain account security
• Maintain your profile information and preferences
• Enable access to order history and account features

ii. Order Processing and Marketplace Operations

• Process and confirm orders placed on the Store
• Coordinate with Sellers for fulfilment, warranty, and after-sales support
• Facilitate shipping, delivery, and proof-of-delivery processes
• Handle returns, replacements, cancellations, and refunds
• Maintain transaction and invoice records
• Issue statutory invoices and comply with tax and e-commerce regulations

iii. Payments and Financial Reconciliation

• Confirm payment authorization and settlement status
• Process refunds and manage chargebacks
• Maintain accounting and financial compliance records

We do not store full payment card details — the storage, if any, is done in accordance with applicable law including RBI guidelines in this regard. Payment processing is handled by independent payment gateways.

iv. Customer Support and Dispute Resolution

• Respond to queries, complaints, and support requests
• Review evidence submitted for return or defect claims
• Facilitate dispute resolution between Users and Sellers
• Address grievances in accordance with applicable law

v. Fraud Prevention, Risk Monitoring, and Security

• Detect and prevent fraudulent or suspicious transactions
• Investigate misuse of the Store
• Enforce the Terms of Use and Store Policies
• Protect the integrity, security, and lawful operation of the Store

vi. Analytics and Platform Improvement

• Monitor usage trends and performance metrics
• Improve navigation, search functionality, and user experience
• Identify and correct technical issues

Where reasonably possible, analytics data is used in aggregated or de-identified form.

vii. Marketing Communications and Promotions

• Send transactional communications relating to your orders, account activity, and policy updates
• Inform you about promotions, offers, new Products, or Store features
• Administer contests, deals, and reward programs

Where required under applicable law, promotional communications will be sent only with your consent. You may opt out of marketing communications at any time.

viii. Performance Marketing and Advertising

We may use limited technical and usage information to measure the effectiveness of advertising campaigns and to display relevant advertisements for the Store on third-party platforms. This may include:

• Measuring whether an advertisement led to a Store visit or purchase
• Understanding which campaigns result in conversions
• Displaying advertisements to users who have previously interacted with the Store

Such activities may involve cookies, pixels, or similar tracking technologies provided by advertising partners. Where required under applicable law, we will obtain your consent before deploying non-essential advertising or marketing trackers. You may manage advertising-related preferences in accordance with our Cookies Policy.

ix. Legal and Regulatory Compliance

We may use the data collected to fulfil our legal or contractual obligations, as required by applicable law, or as requested by legal, regulatory, or investigatory authorities. Upon receipt of a valid and lawful order from a court or a government agency authorized to carry out investigative, protective, or cybersecurity functions, we will provide information in our control or possession, or other required assistance, as soon as reasonably possible and no later than seventy two (72) hours from receipt of such order, or within such other time as may be prescribed by applicable law, including but not limited to the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021.

We will not use personal data collected from you for any purpose other than those described in this Policy, unless we update this Policy and, where required by law, obtain your consent before such use.

F. Rights of User(s)

Subject to and in accordance with applicable law, including the Digital Personal Data Protection Act, 2023, Users (as Data Principals) have the following rights in relation to their personal data processed by the Company:

i. Access

User shall have the right to request from the Company, information about personal data including, a summary of personal data which is being processed and the processing activities undertaken by the Company with respect to such personal data.

ii. Right to Correction, Completion, Updating, and Erasure

User shall have the right to seek correction, completion, updating, and erasure of his/her personal data for the processing of which consent has been previously given.

Upon receipt of a request from a User for correction, completion, or updating of personal data, the Company shall correct inaccurate or misleading personal data, complete the incomplete personal data, and update such personal data, as applicable, within a reasonable period.

User may also request erasure of her personal data through the manner made available by the Company. Upon receipt of such a request, the Company shall erase the personal data unless retention of such data is necessary for the specified purpose or for compliance with any law for the time being in force.

iii. Withdrawal of User's consent

User shall have the right to withdraw such consent at any time by selecting the 'opt-out' option made available on the Platform, provided such withdrawal of consent shall not affect the legality of processing carried out before such withdrawal.

Upon withdrawal of consent, or where it is reasonable to assume that the specified purpose for which the personal data was collected is no longer being served, the Company shall, unless retention is required for compliance with any law for the time being in force, erase such personal data within a reasonable period.

iv. Grievance redressal

User shall have the right to have readily available means of grievance redressal provided by the Company, as set forth in Section G (Grievance Redressal) of the Terms.

v. To nominate another individual

User shall have the right to nominate one or more individuals who shall, in the event of death or incapacity of the user, to exercise the rights of such user in accordance with the provisions of this Policy and the applicable law.

G. Storage, Retention and Security

i. Security Measures

We implement reasonable administrative, technical, and physical safeguards designed to protect personal data against unauthorised access, unlawful interception, disclosure, alteration, misuse, or destruction. Such safeguards include:

• Role-based access controls and need-to-know restrictions
• Encryption or comparable security measures during transmission and storage, where appropriate
• Secure network architecture and system monitoring
• Internal policies governing data handling and access

Access to personal data is limited to authorized employees, partners, and service providers who require such access for legitimate business purposes and who are bound by confidentiality and data protection obligations.

Where third parties process personal data on our behalf, we enter appropriate contractual arrangements requiring compliance with applicable law and implementation of reasonable security measures.

While we take appropriate steps to protect personal data, no system can be guaranteed to be completely secure. In the event of a data breach, we will take appropriate action in accordance with applicable law.

ii. Storage of Personal Data

Personal data is primarily stored in electronic form on secure servers or cloud infrastructure managed by us or authorized service providers. In limited circumstances, certain records may be maintained in physical form where required for operational or legal purposes.

iii. Retention of Personal Data

We retain personal data for as long as necessary to:

• Fulfil the purposes for which it was collected.
• Comply with legal, tax, accounting, or regulatory obligations.
• Resolve disputes, enforce agreements, or prevent fraud.
• Maintain records required under applicable law.

Upon account cancellation or withdrawal of consent (where applicable), we will erase or anonymize personal data unless continued retention is required for compliance with applicable law or legitimate legal purposes.

In accordance with applicable law, including the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, we may retain certain account-related information for up to one hundred and eighty (180) days following cancellation or withdrawal, or for such longer duration as may be required under applicable law.

H. With Whom Do We Share Your Data?

We share personal data only where necessary to operate the Store, facilitate marketplace transactions, comply with legal obligations, or support business continuity. We do not sell personal data for monetary consideration. Personal data may be shared with the following categories of recipients:

i. Third-Party Service Providers

We engage third-party service providers to assist in operating the Store and providing related services. These may include:

• Payment gateways and deferred payment service providers
• Logistics and delivery partners
• Cloud hosting and infrastructure providers
• SMS, email, and communication service providers
• Customer support service providers
• Marketing and analytics service providers
• Professional advisors and consultants

Such service providers process personal data only on our behalf and for specified purposes, including payment processing, shipping and delivery, handling returns and refunds, customer communications, performance marketing, analytics, and system operations.

All such service providers are bound by written agreements requiring them to process personal data only in accordance with our instructions; implement appropriate administrative, technical, and organizational security safeguards; maintain confidentiality of personal data; and comply with applicable data protection laws.

ii. Marketplace Sellers and Business Partners

As the Store operates as a marketplace, certain personal data is shared with the relevant Seller to enable order fulfilment, delivery, warranty support, returns, and dispute resolution. We may also share limited information with business partners, aggregators, or financial institutions where necessary to facilitate transactions, offers, or services connected to the Store. Such recipients may process personal data in accordance with their own privacy policies, subject to applicable law and contractual safeguards where required.

iii. Legal Compliance

We may disclose personal data where required to:

• Comply with applicable law, regulation, or legal process.
• Respond to lawful requests from courts, regulators, or government authorities.
• Protect our rights, property, or safety, or that of Users or third parties.
• Enforce our Terms of Use and Store Policies.

iv. Business Transfers

In the event of a merger, acquisition, restructuring, sale of assets, or other business transfer, personal data may be transferred as part of such transaction, subject to appropriate confidentiality and legal safeguards in accordance with applicable law.

v. Cross-Border Data Transfer

Personal data processed by us may be transferred, processed, and stored anywhere in the world, including, but not limited to countries within the European Economic Area ('EEA'), the United Kingdom ('UK'), the United States of America, the Republic of Korea and others, which may have data protection laws that are different from the laws where you live. We ensure that any such transfer is subject to contractual safeguards or adequacy mechanisms as required by applicable law.

I. Social Media or Third-Party Login (Where Applicable)

If you choose to log in or register using a third-party account (such as Google or another social platform), we may receive limited profile information such as your name, email address, and profile picture, as permitted by your settings on that platform.

Linking a third-party account is optional. You may disconnect such accounts through your account settings or the relevant third-party platform.

For information about how the third-party platform processes your data, please refer to its privacy policy.

J. Miscellaneous

• You are responsible for ensuring that the personal data you provide to us is accurate, complete, and up to date, and that you have the necessary rights, permissions, and consent to provide such information.
• The Store may contain links to third-party websites or services that are not owned, operated, or controlled by us. This Privacy Policy applies solely to personal data collected through the Store and does not apply to third-party websites.
• We do not endorse and are not responsible for the privacy practices or content of such third-party websites. We encourage you to review their respective privacy policies before providing any personal data.

K. Marketing Communications and Opt-Out

You may opt out of receiving promotional or marketing communications from us at any time by:

• Using the "unsubscribe" link included in our marketing emails; or
• Updating your communication preferences in your Store account (where available); or
• Contacting us at hello@cornerinch.com

We will process opt-out requests within a reasonable period in accordance with applicable law. Please note that even if you opt out of marketing communications, we may continue to send you transactional or service-related communications, including messages relating to your orders, account activity, security alerts, policy updates, and other essential notifications.

L. Grievance Redressal Mechanism

If you have any questions, concerns, or grievances relating to the processing of your personal data under this Privacy Policy, you may raise a complaint in accordance with the Grievance Redressal Mechanism set out in Section M of the Terms.

The designated Grievance Officer and the procedure for submission, acknowledgment, and resolution of complaints are detailed therein.

Grievances relating specifically to personal data will be handled in accordance with applicable law, including the Information Technology Act, 2000, the Consumer Protection (E-Commerce) Rules, 2020, and the Digital Personal Data Protection Act, 2023 (as applicable).

M. Contact and Support

For support regarding how we collect and process your data, who we share your data with, or any other concerns related to this Policy, you may contact the Store Customer Support at hello@cornerinch.com.