Privacy Policy

Gruham ("we," "us," "our," or "Company") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose and safeguard your information when you visit our e-commerce website and mobile applications (collectively, the "Platform").

This Privacy Policy complies with the Information Technology Act, 2000, the IT Rules, 2011, the Consumer Protection Act, 2019 and the Digital Personal Data Protection Act, 2023.

2.1 Information You Provide Directly

• Account: name, email, phone, shipping/billing address, DOB.
• Purchase: product preferences, order history, delivery preferences.
• Communication: messages via email, chat, WhatsApp, phone, reviews and feedback.
• Payment: handled securely through payment gateways – we do NOT store complete payment details.

2.2 Information Collected Automatically

• Device, OS, browser, IP, device identifiers.
• Browsing activity, search queries, time spent.
• Approximate location (IP), precise GPS only with permission.
• Transaction history.

2.3 Information from Third Parties

• Payment gateways, logistics partners and analytics platforms.
• Social media platforms if you sign in using them.

3.1 Essential Service Functions

• Process orders, manage accounts, provide support.
• Process payments through secure gateways.
• Facilitate delivery, tracking, returns and refunds.
• Verify identity and prevent fraud.

3.2 Marketing & Personalization

• Send promotional emails / SMS / WhatsApp with your consent.
• Personalize shopping experience and recommendations.

3.3 Analytics & Improvement

Analyze usage to improve UX, identify trends and optimize features.

3.4 Legal & Compliance

Comply with legal obligations, court orders, government requests; prevent fraud.

We use cookies, web beacons, pixels and similar tracking technologies to remember your login, track shopping behaviour, deliver personalized content, analyze performance and measure marketing campaigns.

• Session cookies: expire when you close your browser.
• Persistent cookies: remain for extended periods.
• Essential cookies: required for basic functionality.
• Analytical cookies: help us understand usage.
• Marketing cookies: enable personalized advertising.

You can manage cookies through your browser settings. Disabling cookies may affect Platform functionality.

We do NOT sell your personal data.

5.1 Service Providers

• Payment processors (Razorpay, PayU and similar).
• Shipping & logistics partners.
• Email / SMS / WhatsApp gateway services.
• Analytics & cloud hosting providers.

5.2 Marketing & Advertising Partners

Facebook, Instagram, Google for targeted advertising; affiliate networks.

5.3 When Required by Law

Government authorities, law enforcement, legal proceedings.

5.4 Business Transfers

If Gruham is involved in a merger, acquisition or sale, your information may be transferred. Notice will be provided.

We implement SSL/TLS encryption, firewalls, password hashing, secure payment processing and database encryption. Access is controlled on a need-to-know basis, employees are trained on data protection and we run regular security audits.

While we implement robust measures, no transmission over the Internet is 100% secure. You use the Platform at your own risk and should use strong, unique passwords.

• Account data: duration of your account and as required by law (~5 years).
• Transaction data: at least 7 years per Indian tax regulations.
• Marketing data: retained until you unsubscribe.
• Analytics & logs: 12-24 months.
• Deletion requests processed within 30 days; archived backups per backup policy.

• Right to access your personal data (within 30 days).
• Right to rectification of inaccurate or incomplete data (within 15 days).
• Right to erasure (right to be forgotten), where not legally required to retain.
• Right to withdraw consent for marketing communications.
• Right to opt-out of cookies (except essential cookies).
• Right to lodge a complaint with the appropriate authority.

To exercise any of the above rights, write to support@gruham.in with your full name, registered email, request details and a copy of government-issued ID for verification.

Gruham is not intended for use by children under 18 years of age. We do not knowingly collect personal data from children. If we discover such data, we will delete it promptly.

Our Platform may contain links to third-party websites and services that are not operated by Gruham This Privacy Policy does not apply to those external sites.

• Company: Gruham
• Address: Copper Build, Police Parade ground road, Nana Mauva, Rajkot, Gujarat, 360005, India.
• Email: support@gruham.in
• Phone: +91 9664527720
• Response Time: Within 30 days.

Submit complaints in writing to support@gruham.in. We acknowledge within 24 hours and investigate within 15 days. If unsatisfied, you may escalate to the National Consumer Disputes Redressal Commission.

Your personal data is primarily stored and processed in India. We may transfer data internationally for cloud hosting or third-party services with appropriate safeguards.

We may update this Privacy Policy from time to time. Material changes will be notified via prominent notice on the Platform or via email.

• Personal Data: Any information relating to an identified or identifiable natural person.
• Sensitive Personal Data: Passwords, financial data, health, biometric data, etc.
• Processing: Any operation performed on personal data.
• Data Controller: Gruham
• Data Processor: Third parties processing on behalf of Gruham

By using Gruham's Platform, you acknowledge that you have read, understood and agree to the terms of this Privacy Policy.