Privacy Policy – HOTNUTS

PERSONAL INFORMATION OF USERS

This Privacy Policy describes how Hotnuts and its affiliates (collectively “Hotnuts, we, our, us”) collect, use, share, protect, or otherwise process your information/personal data through our website https://hotnuts.in/ (referred to as “Platform”). Please note that you may be able to browse certain sections of the Platform without registering with us. We do not offer any product/service under this Platform outside India, and your personal data will primarily be stored and processed in India. By visiting this Platform, providing your information or availing any product/service offered on the Platform, you expressly agree to be bound by the terms and conditions of this Privacy Policy, the Terms of Use, and the applicable service/product terms and conditions, and agree to be governed by the laws of India, including but not limited to the laws applicable to data protection and privacy. If you do not agree, please do not use or access our Platform.

Who we are

Suggested text: Our website address is: https://hotnuts.in.

Comments

Suggested text: When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.

An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.

Media

Suggested text: If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.

Cookies

Suggested text: If you leave a comment on our site you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.

If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.

When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select "Remember Me", your login will persist for two weeks. If you log out of your account, the login cookies will be removed.

If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.

Embedded content from other websites

Suggested text: Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.

Who we share your data with

Suggested text: If you request a password reset, your IP address will be included in the reset email.

How long we retain your data

Suggested text: If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue.

For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.

What rights you have over your data

Suggested text: If you have an account on this site, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.

Where your data is sent

Suggested text: Visitor comments may be checked through an automated spam detection service.

1. Collection

We collect your personal data when you use our Platform, services or otherwise interact with us during the course of our relationship. Some of the information that we may collect includes but is not limited to:

Name, date of birth, address, telephone/mobile number, email ID

Proof of identity or address

Sensitive personal data (with your consent), such as:

Bank account/credit/debit card or other payment information.

Biometric data (e.g., facial features), if you opt-in to such features.

You always have the option to not provide information by choosing not to use a particular service or feature on the Platform.>

We may track your behaviour, preferences, and other information you choose to provide on our Platform. This information is compiled and analysed on an aggregated basis.

We also collect data related to your transactions on our Platform and those of third-party business partners. You will be governed by their privacy policies when they collect data directly from you. We are not responsible for third-party practices.

Warning: If you receive an email or call from someone claiming to be from Hotnuts and asking for sensitive information like banking PINs or passwords, do not share such information. Report it immediately to appropriate authorities.

2. Usage

We use your personal data to:

Provide services requested by you
Assist sellers/business partners in order fulfilment
Enhance user experience
Troubleshoot problems and resolve disputes
Inform you about offers, products, services, and updates
Prevent fraud, enforce our terms, and for legal compliance
Conduct marketing research and surveys

You may opt out of marketing uses at any time. Note: Denying permissions may affect access to certain services.

3. Sharing

We use your personal data to:

We may share your personal data with:

Internal group entities and affiliates
Sellers, business partners, and third-party service providers (e.g., logistics, payments, reward programs)
Government or law enforcement agencies as required by law
Others if necessary to protect our legal rights or user safety

These parties may contact you for purposes outlined in this Policy, unless you opt out.

You may opt out of marketing uses at any time. Note: Denying permissions may affect access to certain services.

4. Security Precautions

We follow reasonable security practices to protect your personal data. Information stored on our servers is safeguarded, and we employ secure access methods. However, transmission over the internet is never 100% secure.

You are responsible for maintaining confidentiality of your login credentials.

5. Data Deletion and Retention

You can delete your account from your profile/settings. Alternatively, contact us via the details below. Account deletion may be delayed if services or claims are still pending.

We retain your data only as long as needed for business or legal purposes. Some anonymised data may be retained for analytics and research.

6. Your Rights

You may access, rectify, or update your personal data through your account on the Platform.

7. Consent

By using our Platform or providing your information, you consent to the collection, usage, storage, and sharing of your data per this Privacy Policy.

If providing personal data of others, you confirm you have their permission.

You may withdraw your consent by writing to our Grievance Officer at the contact provided below with the subject “Withdrawal of consent for processing personal data.”

Please note:

Withdrawal of consent is not retrospective.

Certain services may be restricted following withdrawal.