Privacy policy

1. Data we collect

We collect only what we need to run your account and your orders.

• Account details — your first and last name, email address, password and, if you give them, your mobile number, date of birth and profile photo. Your password is stored only as a one-way hash; we cannot read it.
• Delivery addresses — address line, landmark, city, state, pincode, the contact name and phone number for delivery, and, if you pin it on the map, the address’s map coordinates.
• Location — only when you ask the app to find your current location while adding or choosing an address. The app asks for location permission “while using the app” only and does not track you in the background. Your location is used to fill in the address and to show shops that deliver to it.
• Orders — what you ordered, from which shops, prices, delivery and platform fees, any promotion code used, payment method, order status history, receipts, and loyalty points earned or redeemed.
• Photo orders — if you send a photo of a shopping list, the photos, any note you add and the delivery address you choose.
• Things you post or send us — product reviews and ratings (and any photos attached to them), support requests and the messages in them, and order disputes.
• Shopping activity — your cart, your wishlist, and a record of searches you make and items you remove from your cart or wishlist, which we use to suggest products you may want.
• Device and session data — a push-notification token for your device, your notification preferences, and, each time you sign in, your IP address and the browser or device type, kept with your session.

Payments. At present, orders on Nedyway are paid cash on delivery. We do not collect or store card, UPI or bank account details. If we add online payment, it will be handled by a payment gateway and we will update this policy before it goes live.

No advertising or third-party tracking. Nedyway does not include advertising or third-party analytics tools, does not track you across other companies’ apps or websites, and does not sell your personal data.

2. Why we use it

• To create and secure your account and sign you in.
• To take, prepare, deliver and support your orders, including sending your order to the shop and to the person delivering it.
• To send you messages about your account and orders: email verification codes, password-reset codes, order updates and support replies, by email and push notification.
• To send you offers and announcements by push notification, which you can turn off in the app’s notification settings or your phone’s settings.
• To suggest products based on your searches and shopping activity.
• To keep the service safe — preventing fraud and abuse, enforcing our Terms of service — and to meet our legal obligations, such as keeping tax and accounting records.

We process your data on the basis of the consent you give when you create an account and use the service, and for the legitimate uses the DPDP Act allows, such as complying with the law. You can withdraw consent at any time by deleting your account (see section 7); withdrawing does not affect processing that took place before.

3. Who we share it with

• The shops you order from receive your name, phone number, delivery address and what you ordered, so they can prepare and deliver the order. Shops are independent businesses.
• Delivery partners receive your name, phone number and delivery address for the orders they deliver.
• Service providers who process data for us, only to provide their service:
  • Zoho ZeptoMail, to send transactional email;
  • Google Firebase Cloud Messaging and Apple Push Notification service, to deliver push notifications;
  • map providers, to show maps and turn a location into an address: Apple Maps or Google Maps (depending on your phone) in the app, and OpenStreetMap on the website;
  • our hosting and backup-storage providers.
• Authorities, when the law requires it or to protect the rights and safety of our users and the public.

Some of these providers may process data outside India. Where they do, we rely on the transfer being permitted under the DPDP Act.

4. How long we keep it

• Your account data is kept while your account is open. When you delete your account we delete or anonymise it, except what we must keep by law (for example, order and invoice records needed for tax and accounting).
• Sign-in sessions expire after 7 days.
• Email verification and password-reset codes expire after 10 minutes.
• Database backups are kept for up to 30 days on our servers and up to 90 days in off-site storage, after which they are deleted. Data you delete may remain in these backups until they expire.

5. How we protect it

Data travels between your device and our servers over encrypted HTTPS connections, passwords are stored only as one-way hashes, and access to our systems is restricted to the people who need it. No system is perfectly secure; if a personal data breach occurs we will notify you and the Data Protection Board of India as the DPDP Act requires.

6. Your rights

Under the DPDP Act you have the right to:

• get a summary of the personal data we hold about you and how it is used;
• correct, complete or update it — most of it you can edit yourself in the app under Profile;
• have it erased, by deleting your account;
• withdraw your consent;
• have your grievances addressed; and
• nominate another person to exercise these rights if you die or become unable to.

To exercise any of them, write to our Grievance Officer (section 9). We will respond within the time the law allows.

7. Deleting your account

You can ask us to delete your account and personal data at any time. See Delete your account for the steps.

8. Children

Nedyway is meant for people aged 18 and over. We do not knowingly collect personal data from children. If you believe a child has given us personal data, contact us and we will delete it.

9. Grievance Officer and contact

For questions, requests or complaints about your personal data, contact our Grievance Officer:

Navjot Singh
Nagi Traders
H.No. 201/3 Ext., Vasant Vihar, Trikuta Nagar, Jammu, Jammu and Kashmir
Email: storenedyway@gmail.com

If you are not satisfied with our response, you may complain to the Data Protection Board of India.

10. Changes to this policy

We will post any change on this page and update the date at the top. If a change is significant we will also tell you in the app or by email before it takes effect.