Retailer Privacy Policy

Last Updated: Festive Season 2026 • Effective for Promotional Offer Portal

1. Introduction

This Privacy Policy governs the collection, processing, and handling of retailer data on the QCrate Retailer Offers promotional portal (powered by Quadoria). We are committed to transparency and adherence to applicable Indian data privacy regulations, including the Digital Personal Data Protection Act (DPDPA).

2. What Data We Collect

When you access our promotional portal through the QCrate mobile application or web browser, we may collect:

Retailer Identity: Retailer name, Indian mobile number, and registered email address provided via URL parameters or signed application tokens.
Interaction Metadata: The timestamp of your first visit (first_clicked_at) and subsequent visit event counts.
Location Data: Latitude and longitude coordinates (if permission is granted) and reverse-geocoded administrative region (city, district, state).
Technical Security Data: A SHA-256 one-way cryptographic hash of your client IP address and browser User-Agent string for fraud detection and rate limiting.

3. Why We Collect This Data

We process your data exclusively for the following specified business purposes:

Retailer Verification: Ensuring that promotional gift rewards are allocated strictly to verified, authorized store partners.
Sales Circle Offer Selection: Accurately presenting circle-specific promotions based on verified geographic eligibility.
Duplicate Prevention: Ensuring that each retailer mobile number is registered only once to maintain fair distribution of gifts.
Operational Analytics & Dispute Resolution: Verifying qualifying purchases and payment timestamps against promotional deadlines.

4. Geolocation Permission & Processing

Location detection is performed via the browser's navigator.geolocation interface.

Consent-Driven: Location access requires your explicit permission. You can accept or deny this request at any time.
Optional Access: If you decline permission, you can still view offers by manually selecting your sales circle.
Third-Party Geocoding: To resolve geographic boundaries, coordinates may be evaluated against our internal GeoJSON boundary maps or transmitted over HTTPS to open reverse-geocoding services (such as OpenStreetMap Nominatim) strictly for address resolution. No personal identity details (name or mobile) are ever transmitted to geocoding services.

5. Sharing with QCrate Services & Third Parties

Your details are shared solely with authorized backend systems within the QCrate and Quadoria ecosystem responsible for retailer order processing and gift fulfillment. We do not sell, rent, or trade your personal information with external advertisers or commercial data brokers.

6. Data Retention & Security

Retailer registration records are retained in our secure database (offer_click) for the duration of the promotional campaign and any subsequent gift audit period (typically up to 90 days after campaign conclusion). Access is restricted via PDO prepared statements, rate limiting, and encrypted HTTPS connections.

7. Retailer Rights (Access, Correction, Deletion)

Under applicable privacy laws, you have the right to request access to the personal data we hold about you, request corrections to erroneous details, or request deletion of your promotional visit record (provided there are no pending fulfillment or legal audit obligations).

To exercise these rights, please contact our Privacy Officer at:

Email: privacy@qcrate.in (Placeholder)
Support Desk: support@qcrate.in (Placeholder)
Entity: Quadoria Technologies Private Limited / QCrate Operations