Legal
Privacy Policy
Last updated 10 September 2026
This policy explains how Gbay Supermart Pvt Ltd ("haaat", "we", "us") collects, uses, shares, and protects personal data when you use the haaat app, website, and related services as a customer, restaurant partner, or delivery partner. By using haaat, you agree to the practices described here.
Information we collect
We collect information you give us, information created when you use haaat, and information from partners who help us run the service.
Information you provide
- Account details such as your name, mobile number, email address, and password.
- Delivery addresses, saved locations, and landmarks you add to your account.
- Order details, including the dishes you buy, cart contents, and delivery instructions.
- Payment information collected by our payment partners. We do not store full card numbers or UPI credentials on our systems.
- Ratings, reviews, support tickets, and any other messages you send us.
- Details submitted through our restaurant partner and delivery partner forms, including business or verification documents.
Information collected automatically
- Device information such as model, operating system, app version, and unique device identifiers.
- Location data, when you allow it, to show nearby restaurants and to route deliveries. You can turn location access off in your device settings.
- Usage data such as pages viewed, searches, features used, and time spent in the app.
- Log and diagnostic data, including IP address, crash reports, and performance metrics.
- Cookies and similar technologies on our website. See the cookies section below.
Information from other sources
- Restaurant partners and delivery partners, for order status and delivery updates.
- Payment processors, for transaction confirmations, refunds, and chargebacks.
- Marketing and analytics providers, where you have interacted with our campaigns.
How we use your information
We use personal data to run the haaat platform and to meet our legal obligations. Specifically, we use it to:
- Create and manage your account and verify your identity.
- Take payment, process orders, and share them with the relevant restaurant.
- Assign delivery partners, provide live order tracking, and support delivery.
- Send transactional messages about orders, payments, refunds, and account activity.
- Provide customer support and investigate complaints and disputes.
- Personalise restaurant recommendations, search results, offers, and rewards.
- Detect and prevent fraud, abuse, and activity that breaks our terms.
- Improve the service through analytics, testing, and product research.
- Send marketing communications where you have consented, and honour your choice when you opt out.
- Comply with applicable law, and respond to lawful requests from authorities.
How long we keep your data
We keep personal data only as long as we need it for the purposes set out in this policy. Order and transaction records are kept for as long as required under tax, accounting, and other applicable laws. Where we no longer need your data, we delete it or anonymise it so it can no longer identify you.
How we protect your data
We use reasonable technical and organisational safeguards, including encryption in transit, access controls, and monitoring, to protect personal data against unauthorised access, disclosure, alteration, and loss. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. Keep your account credentials confidential and tell us immediately if you suspect unauthorised use of your account.
Your rights and choices
Subject to applicable law, including the Digital Personal Data Protection Act, 2023, you may:
- Access the personal data we hold about you and request a summary of how it is processed.
- Correct or update inaccurate, incomplete, or outdated information.
- Request deletion of your personal data, where we are not required to keep it.
- Withdraw consent you previously gave, without affecting processing already carried out.
- Opt out of marketing messages using the unsubscribe link or your app notification settings.
- Turn off location access, camera access, and notifications in your device settings.
- Nominate another individual to exercise these rights on your behalf in the event of your death or incapacity.
- Raise a grievance with us, and escalate it to the Data Protection Board of India if you are not satisfied.
To exercise any of these rights, write to us at info@haaat.in. We may need to verify your identity before we act on a request.
Children's privacy
haaat is not intended for children under 18. We do not knowingly collect personal data from children without verifiable parental consent. If you believe a child has given us personal data, contact us and we will delete it.
Third-party links and services
Our website and app may link to third-party sites and services, including app stores, payment gateways, and restaurant websites. This policy does not cover how those third parties handle your data. Read their privacy policies before you share information with them.
Changes to this policy
We may update this policy as our services change or as the law requires. When we make a material change, we will update the date at the top of this page and, where appropriate, tell you in the app or by email. Please review this page from time to time.
Contact us
For questions about this policy, or to exercise your rights, contact our Grievance Officer. We acknowledge grievances within 24 hours and aim to resolve them within 15 days.
- Grievance Officer: Arghya Das
- Entity: Gbay Supermart Pvt Ltd
- Email: info@haaat.in