Privacy Policy

This Privacy Policy explains how DLCityShop Pvt. Ltd. (trading as "Qwik Now", "we", "us", or "our") collects, uses, stores, and shares your personal information when you use our website, mobile app, or physical shops. We are committed to protecting your privacy in accordance with the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and applicable Indian consumer law.

1. Information we collect

We collect the following categories of information:

• Identity & contact: name, phone number, email (optional), delivery and billing addresses.
• Sign-in: a one-time password sent to your phone or your Google account, handled by Firebase Authentication; passwords, where used, are stored as salted hashes. We never see your Google password or your OTP after it is verified.
• Location: your pincode, or your GPS position if you allow it, to find the nearest open shop, show a delivery estimate and route the rider. The pin is kept on your device and sent to us with each request; we do not track your location in the background.
• Delivery proof: the photo the rider takes at hand-over, the delivery OTP, the receiver's name and any open-box notes, kept to settle disputes about a delivery.
• Order & transaction: items purchased, order history, payment method (we do not store your full card number — payments are handled by Razorpay).
• Device & usage: IP address, browser type, pages visited, referral source, and cookies used to personalise your experience.
• Communication: emails, SMS, or chat messages you send to our support team.

2. How we use your information

• To process your orders, arrange delivery, and handle returns/refunds.
• To send order confirmations, shipping updates, and customer support responses.
• To personalise product recommendations and improve the shopping experience.
• To prevent fraud, abuse, and unauthorised access to accounts.
• To comply with legal obligations (tax, GST invoicing, court orders, etc.).
• With your consent, to send marketing emails or SMS about offers — you can unsubscribe any time.

3. How we share your information

We share your data only with trusted third parties who help us run the business:

• Payment processor (Razorpay): to process card, UPI, netbanking, and wallet payments.
• Riders and partner shops: the rider delivering your order and the shop packing it see your name, delivery address, phone number and the items ordered, only for that order.
• Courier partners: your name, address, and phone for orders shipped outside town.
• Parcels to other towns: when you send a parcel to another town, the receiver's name, phone number and address go to Shiprocket and the courier company it assigns, only to deliver that parcel and to bring it back if it cannot be delivered. We remove the phone numbers, photos, courier label and tracking updates of a parcel 180 days after it is closed.
• Image and map services: product, category and delivery-proof photos are stored with Cloudinary; the live tracking map uses a map provider that receives the rider's position, not your identity. Our maps show OpenStreetMap map images, which your browser fetches from tile.openstreetmap.org: that service receives your device's internet (IP) address, which part of the map is on your screen and our website address, never your name or account. When you place a pin or search for a place, the area and address names come from OpenStreetMap's Nominatim service and, when we switch it on, from Ola Maps (ANI Technologies Pvt. Ltd. / Krutrim SI Designs Pvt. Ltd.). Both are asked only by our own servers, never by your browser: they receive the pinned point (rounded to about 11 metres, so close to your door) or the words you searched for, never your name, phone number, account or IP address. When a rider rides to you, the road route is asked by our own servers from Ola Maps (when we switch it on) or the OpenStreetMap route service (OSRM): they receive the rider's position and your delivery point, never your name, phone number, account or address.
• Email/SMS providers: to send order notifications.
• Cloud hosting: for secure data storage.
• Government authorities: only when legally required (e.g. court order, tax authority request).

We do not sell your personal information to anyone.

4. Cookies

We use cookies and similar technologies to keep you logged in, remember your cart, and understand which products are popular. You can disable cookies in your browser settings, though some parts of the site may stop working correctly.

5. Data retention

We retain your account and order data as long as your account is active, and for up to 7 years after that to meet tax and legal obligations under Indian law. You can request deletion earlier (see "Your rights" below), except where we are legally required to retain records.

6. Data security

We use industry-standard measures to protect your data: HTTPS everywhere, password hashing, access controls, and encrypted backups. However, no system is 100% secure; please use a strong, unique password and keep your login details confidential.

7. Your rights

You have the right to:

• Access the personal data we hold about you.
• Correct inaccurate information.
• Request deletion of your account and associated data.
• Withdraw consent for marketing communications at any time.
• File a complaint with us or with the appropriate Indian data-protection authority.

To exercise any of these rights, email privacy@palmultistore.com from the email address associated with your account.

8. Children's privacy

Qwik Now is not directed at children under 18. We do not knowingly collect data from minors. If you believe a child has provided us information, please contact us and we will delete it.

9. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be notified on this page and, where appropriate, by email. The "Last updated" date above shows when the policy was last revised.

10. Grievance officer

In accordance with the Information Technology Act, 2000 and Rules made thereunder, the name and contact details of the Grievance Officer are:

We will acknowledge your grievance within 48 hours and resolve it within 15 days of receipt.