Privacy Policy

Last updated: 15 June 2026

This Privacy Policy explains how A M Agency ("Town Basket", "we", "us") collects, uses, stores and protects your personal data when you use our website and grocery delivery service. We are committed to handling your data responsibly and in accordance with applicable Indian law, including the Digital Personal Data Protection Act, 2023 (DPDP Act).

1. Data we collect

We collect the following personal data when you place an order or contact us:

• Name — to identify and address you.
• Phone number — to confirm and coordinate deliveries.
• Delivery address — to deliver your order and confirm it is within our service area.
• Order history — to process orders, handle refunds and provide support.

Payments are processed by our payment provider (Paytm Payment Gateway). We do not collect or store your full UPI credentials, card numbers or banking passwords; these are handled directly by the payment provider under their own security standards.

2. Why we collect it (purpose)

We use your personal data only for the following purposes:

• To accept, process, pack and deliver your orders.
• To communicate order status, confirmations and delivery updates.
• To process payments, cancellations and refunds.
• To provide customer support and respond to your queries.
• To comply with legal, tax and regulatory obligations.

3. Consent and lawful basis

We process your personal data based on the consent you provide when you place an order or share your details with us, and where necessary to fulfil the order you have requested. You may withdraw your consent at any time (see "Your rights" below); however, this may prevent us from fulfilling pending or future orders.

4. How we store and protect your data

We retain your personal data only for as long as necessary to fulfil the purposes described above or as required by applicable law (for example, tax and accounting records). We apply reasonable technical and organisational security measures to protect your data against unauthorised access, loss or misuse. Personal data is stored on systems located in India or with reputable service providers.

5. Sharing your data

We do not sell your personal data. We share it only with:

• Our delivery staff/partners, to fulfil your order.
• Our payment provider (Paytm Payment Gateway), to process payments and refunds.
• Authorities or regulators, where required by law.

6. Your rights under the DPDP Act, 2023

As a Data Principal, you have the right to:

• Access a summary of the personal data we hold about you and how it is processed.
• Request correction or updating of inaccurate or incomplete data.
• Request erasure of your personal data where it is no longer required.
• Withdraw consent previously given.
• Nominate another individual to exercise your rights in case of death or incapacity.
• Raise a grievance with us regarding the handling of your data.

To exercise any of these rights, contact our Grievance Officer using the details below. We will respond within the timelines required by applicable law.

7. Cookies and analytics

Our website may use minimal cookies or similar technologies necessary for basic functionality. We do not use them to track you across other websites. [Update this section if analytics or marketing cookies are added later.]

8. Children's data

Our services are intended for users aged 18 and above. We do not knowingly collect personal data of children. If you believe a child has provided us data, please contact us so we can remove it.

9. Grievance Officer / contact for data matters

For any questions, requests or grievances about your personal data, please contact:

10. Changes to this policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with a revised "Last updated" date.