Jurisdiction: Jaipur, Rajasthan, India
Compliant With: DPDP Act 2023 | IT Act 2000 | IT Rules 2021 | GDPR (reference)
Your Privacy Matters to Jaldhara
This Privacy Policy explains what personal data Jaldhara collects from you, why we collect it, how we use and protect it, and what rights you have over your data. We have written this document in plain language so you understand exactly how your information is handled. Please read it carefully before using our platform.
Jaldhara is a technology-based hyperlocal water delivery subscription platform that connects Customers seeking water cans and jars with local Suppliers in Jaipur, Rajasthan, India. The Platform operates through a website and mobile application.
This Privacy Policy applies to all users of the Jaldhara Platform, including Customers (individuals who subscribe for water delivery) and Suppliers (individuals or businesses who fulfil delivery orders). It covers all personal data collected through our website, mobile application, and any communication channels associated with Jaldhara.
By registering on the Platform, subscribing to a delivery plan, listing your services as a Supplier, or otherwise using any part of the Jaldhara Platform, you consent to the collection and use of your personal data as described in this Privacy Policy.
This Privacy Policy has been prepared in compliance with the following laws and regulations:
| Law / Regulation | Relevance to Jaldhara |
|---|---|
| Digital Personal Data Protection Act, 2023 (DPDP Act) | Primary data protection law governing how Jaldhara collects, processes, and protects personal data of Indian users. |
| Information Technology Act, 2000 | Governs electronic records, digital contracts, and platform liability in India. |
| IT (Reasonable Security Practices) Rules, 2011 | Mandates security standards for protecting sensitive personal data, including financial and payment information. |
| IT (Intermediary Guidelines) Rules, 2021 | Requires publication of privacy policy and grievance redressal mechanism for digital platforms. |
| Consumer Protection (E-Commerce) Rules, 2020 | Requires disclosure of data collection practices to consumers on e-commerce platforms. |
| GDPR (EU) — Reference Only | Applied as a best-practice standard for data minimisation, consent, and user rights, for any users accessing the Platform from the European Union. |
Jaldhara follows the principle of data minimisation — we collect only the data that is necessary to provide our services effectively. The table below provides a complete breakdown of data collected, categorised by user type and purpose.
| Data Category | Specific Data Points | Purpose |
|---|---|---|
| Identity Data | Full name | Account creation, delivery coordination, and identity verification. |
| Contact Data | Mobile number, email address | OTP verification, order notifications, low-wallet alerts, and customer support. |
| Location Data | Delivery address, PIN code | Matching Customer with eligible Suppliers in the same delivery zone. |
| Schedule Data | Preferred delivery frequency and timing | Generating automated daily orders and managing subscription plans. |
| Financial Data | Wallet transaction records, payment method metadata (tokenised) | Processing Wallet top-ups, order deductions, refunds, and dispute resolution. |
| Device & Usage Data | App version, device type, interaction logs | Platform improvement, bug resolution, and fraud prevention. |
| Data Category | Specific Data Points | Purpose |
|---|---|---|
| Identity Data | Full name or registered business name | Account creation, platform communication, and settlement processing. |
| Contact Data | Mobile number, business address, operational zones | Order notifications, zone matching, and platform support. |
| Financial Data | Bank account number and IFSC code | Weekly or bi-weekly settlement of delivery earnings. |
| Tax Data | GST registration number (if applicable) | Compliance with GST invoicing and TCS obligations. |
| Location Data | Delivery coverage area within Jaipur | Allocating orders to Suppliers serving the relevant zone. |
| Operational Data | Order acceptance history, delivery records, ratings | Performance monitoring, settlement calculation, and dispute resolution. |
When you use the Jaldhara mobile application or website, we automatically collect certain technical data:
This data is collected using standard analytics tools and is used in aggregate form to improve Platform performance and user experience. It is not used to identify individual users without cause.
Jaldhara uses personal data strictly for the following purposes:
Key Point:
Jaldhara does NOT use your personal data for targeted advertising, does not sell your data to third parties, and does not share your data with any party except as described in Section 5 of this Policy.
Jaldhara does not sell, rent, or trade personal data. We share data only in the following limited and necessary circumstances:
5.1 With Suppliers (for Order Fulfilment)
When a Supplier accepts a Customer subscription request, the Platform shares the Customer's delivery address, contact number, and delivery schedule with that Supplier. This is limited to information strictly required to complete the delivery. Suppliers are prohibited from using Customer data for any purpose other than fulfilling Jaldhara orders.
5.2 With Payment Gateway — PhonePe
Payment transaction data is processed by PhonePe, our payment gateway partner. Jaldhara shares only the data necessary to process Wallet top-ups and order deductions. PhonePe processes this data under its own privacy policy and applicable RBI regulations. Jaldhara does not store full card or UPI credentials.
5.3 With Analytics and Technology Service Providers
Jaldhara may use third-party analytics or cloud infrastructure providers to support Platform operations. These providers access data only as data processors acting on Jaldhara's instructions and are contractually bound to maintain confidentiality and security standards consistent with the DPDP Act.
5.4 For Legal Compliance
Jaldhara may disclose personal data if required to do so by law, court order, or at the request of a government authority, or if Jaldhara reasonably believes disclosure is necessary to protect the rights, safety, or property of Jaldhara, its users, or the public.
5.5 Business Transfers
In the event of a merger, acquisition, or sale of business assets, personal data held by Jaldhara may be transferred to the acquiring entity. Users will be notified of any such transfer and given the opportunity to request deletion of their data prior to the transfer taking effect.
Jaldhara retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply:
| Field | Details |
|---|---|
| Active Account Data | Retained for the duration of your account and for 3 years after account closure. |
| Transaction Records | Retained for 7 years from the date of transaction, as required under applicable tax and financial laws. |
| Delivery Records | Retained for 2 years from the date of delivery for dispute resolution purposes. |
| Supplier Bank Details | Retained for 7 years after the last settlement, for financial compliance purposes. |
| Device and Usage Logs | Retained for 12 months, after which they are anonymised or deleted. |
| Complaint Records | Retained for 3 years from the date of resolution. |
After the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to an individual.
Jaldhara implements appropriate technical and organisational security measures to protect personal data against unauthorised access, loss, misuse, alteration, or destruction. Our security practices include:
Note: While Jaldhara takes all reasonable steps to protect your data, no internet-based system is completely secure. Jaldhara cannot guarantee absolute security of data transmitted over the internet. You are responsible for maintaining the confidentiality of your account credentials and for any activity conducted through your account.
Jaldhara's website uses cookies and similar tracking technologies to enhance user experience and analyse Platform usage. The following types of cookies may be used:
You may manage cookie preferences through your browser settings. Disabling non-essential cookies will not affect your ability to use core Platform features. A detailed Cookie Policy is available at jaldhara.in/cookies.
Under the Digital Personal Data Protection Act, 2023, you have the following rights as a Data Principal (the person whose data is being processed):
Your Rights as a Jaldhara User
To exercise any of these rights, contact our Grievance Officer at [email protected]. We will respond to all verified requests within 30 days. We may request proof of identity before processing certain requests to protect your data from unauthorised access.
The Jaldhara Platform is intended for use by individuals who are 18 years of age or older. Jaldhara does not knowingly collect personal data from individuals under the age of 18. If you believe a minor has provided personal data to Jaldhara without parental consent, please contact us at [email protected] immediately. We will promptly delete any such data upon verification.
All personal data collected by Jaldhara from users in India is stored and processed on servers located within the territory of India, in compliance with applicable data localisation requirements under Indian law. Jaldhara does not transfer personal data outside India, except where necessary for payment processing through PhonePe in accordance with RBI guidelines.
The Jaldhara Platform may contain links to third-party websites or integrate with third-party services (such as PhonePe for payments). Jaldhara is not responsible for the privacy practices of any third-party service. We encourage you to read the privacy policies of any third-party services you interact with through or in connection with the Jaldhara Platform.
Jaldhara reserves the right to update or modify this Privacy Policy at any time to reflect changes in our practices, services, or applicable law. When we make material changes, we will notify you through one or more of the following methods: in-app notification, push notification, or email to your registered address. The revised policy will take effect 7 days after notification.
We encourage you to review this Privacy Policy periodically. The current version will always be accessible at jaldhara.in/privacy. The Effective Date at the top of this document reflects when the most recent version came into force. Your continued use of the Platform following any update constitutes your acceptance of the revised Policy.
As required under Rule 5(9) of the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, and in alignment with the Digital Personal Data Protection Act, 2023, Jaldhara has designated a Grievance Officer for data-related complaints and privacy concerns.
| Field | Details |
| Grievance Officer Name | Ashwani Bhatt |
| Platform Name | Jaldhara |
| Registered Address | Jaipur, Rajasthan, India |
| Grievance / DPO Email | [email protected] |
| General Support Email | [email protected] |
| Response Timeframe | Within 30 days of receiving a verified complaint |
| Privacy Policy URL | jaldhara.in/privacy |
You also have the right to approach the Data Protection Board of India (once constituted under the DPDP Act) if your complaint is not resolved to your satisfaction by Jaldhara's Grievance Officer.
