Privacy Policy

Last updated: 5 November 2026

Privacy Policy

Effective Date: 10 Oct 2026
Last Updated: 10 Oct 2026

1. Introduction

This Privacy Policy explains how Susritha Enterprises, operating the Chota Box platform ("Chota Box", "we", "us", or "our"), collects, uses, stores, discloses, and protects personal information when you access our website, mobile application, seller services, delivery services, or customer support channels.
By using Chota Box, you acknowledge that you have read this policy. Where consent is required by law, we will seek it appropriately.

1. Information We Collect

Depending on how you use our services, we may collect:

Customer Information

• Name, mobile number, email address, and account details.
• Delivery addresses and delivery instructions.
• Order history, selected products, subscription details, and preferences.
• Customer support messages, feedback, and complaints.

Seller Information

• Name, business details, contact information, and operating address.
• Applicable identity, business, FSSAI, GST, and bank verification details.
• Product listings, menus, prices, photographs, and order records.

Delivery Partner Information

• Contact details, identity and eligibility documents, vehicle information, and settlement details.
• Delivery assignment records and delivery status.
• Location information when necessary for an enabled delivery or safety feature and subject to applicable permissions and law.

Technical Information

• Device type, application version, IP address, diagnostic logs, and usage information, where collected.
• Cookies and similar technologies, where used and legally permitted.
Payment card credentials, UPI authentication PINs, passwords, and OTPs should not be requested by Chota Box support staff.

3. How We Use Information

We may use personal information to:

• Create and manage accounts.
• Process orders, payments, cancellations, and refunds.
• Coordinate sellers, delivery partners, and customers.
• Provide order updates and delivery notifications.
• Manage food subscriptions and related requests.
• Verify sellers and delivery partners.
• Respond to support requests and investigate complaints.
• Detect fraud, abuse, and security incidents.
• Improve the performance and reliability of our platform.
• Meet applicable legal, accounting, tax, and regulatory obligations.
• Send promotional communications where permitted and, where required, with consent.

4. Sharing of Information

We may share relevant information with:

• Sellers, to prepare and fulfil customer orders.
• Delivery partners, to complete assigned deliveries.
• Payment gateways and financial service providers, to process transactions.
• Technology, hosting, messaging, analytics, and customer support service providers.
• Government authorities, courts, or regulators where required or legally permitted.
• Professional advisers and other parties where necessary for legitimate business, legal, or security purposes.

We share only the information reasonably necessary for the relevant purpose, subject to applicable law and contractual safeguards.

5. Location Information

Location information may be used to identify supported delivery areas, allocate delivery assignments, provide navigation, or update delivery status.
Location access may depend on your device settings and the features you use. You can manage location permissions through your device settings, although some delivery features may not work without them.

6. Data Security and Retention

We use reasonable technical and organisational safeguards designed to protect personal information against unauthorised access, disclosure, alteration, or loss.
No internet-based service can guarantee absolute security. We retain information for as long as reasonably necessary for the purposes described in this policy, including legal, accounting, tax, dispute resolution, and regulatory requirements.

7. Your Privacy Rights

Subject to applicable law, you may be entitled to:

• Request access to certain personal information.
• Request correction or updating of inaccurate information.
• Request deletion of personal information where legally permissible.
• Withdraw consent where processing is based on consent.
• Raise a privacy complaint or grievance.
• Exercise other rights available under applicable data protection law.

Some information may need to be retained where required by law or necessary to establish, exercise, or defend legal claims.

8. Cookies and Notifications

Our website or application may use cookies, device identifiers, or similar technologies for essential functionality, security, analytics, and preferences. You can manage available permissions through your browser or device settings.

You may opt out of promotional communications using the available unsubscribe or preference controls. Essential service notifications may still be sent.

9. Children's Privacy

Our platform is intended for use by individuals legally capable of entering into the relevant transactions. Orders or accounts involving minors must comply with applicable law and any required parental or guardian involvement.

We do not knowingly seek unnecessary personal information from children.

10. Third-Party Services

Our platform may contain links to third-party websites or services. Their privacy practices are governed by their own policies. We encourage you to review those policies before providing information.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The revised version will be published with an updated effective date. Where legally required, we will provide notice or obtain consent for material changes.

12. Contact and Grievances

For privacy-related requests or complaints, contact:

Business: Susritha Enterprises — Chota Box
Email: support@chotabox.com
Phone: 7093434609
Address: 8-1-284/OU/521/11, OU Colony, Shaikpet, Hyderabad - 500008

Grievance Officer: Vishnu Kumar Medukonduru, Founder & CEO, Chota Box

We will handle privacy requests and complaints in accordance with applicable law.