Privacy Policy

How we collect, use and protect your information.

This privacy policy explains how QCkart ("we", "us") collects, uses, shares and protects your personal information when you use the QCkart mobile app, our website and our customer support. It is written to follow the Digital Personal Data Protection Act, 2023, the Information Technology Act, 2000 and the rules made under them.

By creating an account, placing an order or using our app or website, you agree to this policy. If you do not agree, please do not use our services.

1. Who we are

QCkart sells certified refurbished and pre-owned smartphones and laptops in India.

Business address: Building No. 02, Thadhi Bhawanipur Ward No. 02, Thadhi Bhawanipur, Tharhi Bhawanipur, Supaul, Bihar – 852218
GSTIN: 10PFIPK7840J1Z2
Email: qckart.care@gmail.com
Phone and WhatsApp: +91 85445 16274

We decide how and why your personal information is used, so under Indian law we are the "data fiduciary" for it.

2. Information we collect

Information you give us

Account details: your name and email address, and your phone number when you add one. If you sign in with Google, we receive your name, email address and Google profile photo from Google. We never receive your Google password.
Delivery details: the addresses you save, including the name, phone number, pincode, city and state for each one.
Order details: the products you buy, the options you choose (storage, colour, condition grade), coupons you apply, and your delivery instructions.
Payments: the payment method you choose and its status (paid, pending, failed or refunded) and the Razorpay payment reference. You enter card, UPI, net banking and wallet details on Razorpay's secure checkout. We never see or store your card number, CVV, UPI PIN or bank login.
Reviews and questions: product reviews and ratings you write, photos you choose to attach to a review, and questions you ask about products.
Support messages: what you write to us in the app, by email, on WhatsApp or by phone, and the order it is about.
Refunds for cash on delivery orders: if you ask for a refund of a cash payment, the bank account or UPI ID you give us for that refund.

Information collected automatically

App usage: which screens you open and actions such as signing in or signing up, collected with Google Firebase Analytics. We use a scrambled (hashed) ID for this, not your name or email.
Crash reports: when the app stops working, a report with the device model, Android version, app version and the technical error, collected with Google Firebase Crashlytics.
Notification token: a code from Google Firebase Cloud Messaging that lets us send order updates to your phone.
Technical data: IP address, device type and browser type in our server logs, used for security and to fix problems.
Website cookies: the website uses only a basic session cookie needed for it to work. We do not use advertising or tracking cookies on the website.

Information we do not collect

We do not collect your location, contacts, call logs, SMS, calendar, files, or photos (other than ones you choose to attach to a review). The app does not use an advertising ID and does not show ads.

Information from others

Google: your name, email and profile photo when you sign in with Google.
Razorpay: whether a payment succeeded, its amount and reference number.
Courier partners: delivery status, such as shipped, out for delivery, delivered or returned.

3. How we use your information

We use your information only for these purposes:

To run your account: create it, sign you in and keep it secure.
To sell and deliver products: process orders and payments, collect cash-on-delivery advances, pack and ship your order, and give your address and phone number to the courier.
To issue GST invoices and keep the tax and accounting records the law requires.
To keep you updated: order confirmations, shipping, delivery, payment and refund updates by app notification, email, SMS or WhatsApp.
To provide support: answer questions and handle warranty, replacement, return and refund requests.
To show reviews: publish approved reviews, with your first name and any photo you attached, on the product page.
To prevent fraud and misuse: detect fake orders, payment fraud and abuse of coupons, and protect our customers and business.
To improve our service: understand how the app is used, fix crashes and make the app and website better.
To meet legal duties: respond to lawful requests from government authorities and courts, and comply with tax, consumer protection and other laws.

We do not use your information for advertising, and we do not sell it.

4. When we share your information

We share only what each organisation needs to do its job for us. They may use it only for that purpose.

Razorpay receives the order amount and your name, email and phone number, to take online payments and process refunds.
Google Firebase receives sign-in details, the notification token, app usage and crash reports, for sign-in, app notifications, usage statistics and crash reports.
SMS and WhatsApp providers receive your phone number and the message, to send login codes and order updates.
Courier partners receive your name, phone number and delivery address, to deliver your order.
Our hosting provider stores the data on our servers, to run our website, app server and database.

We may also share information:

When the law requires it, for example with tax authorities, police or courts under a valid legal request.
To protect rights and safety, for example to prevent fraud.
If our business changes hands, in which case the new owner must protect your information as this policy describes.

5. Where your information is stored

Our website, app server and order database run on our hosting provider's servers. Some of our service providers, such as Google Firebase, may process data on servers outside India. Where this happens, they protect it under their own security and privacy commitments, and only as Indian law allows.

6. How long we keep your information

Account, addresses, cart and wishlist: until you delete your account.
Orders and GST invoices: as long as Indian tax law requires.
Support messages: as long as needed to resolve the issue and keep a record of it.
Reviews: until you ask us to remove them, or we remove them.
App usage statistics and crash reports: for the period set by Google Firebase, after which they are deleted automatically.
Server logs: only as long as needed for security and fixing problems.

When we no longer need information, we delete it or remove the details that identify you.

7. How we protect your information

All information between the app, the website and our servers is encrypted (HTTPS). The app refuses unencrypted connections.
Your sign-in on your phone is stored encrypted and is not included in phone backups.
Payment details are handled only by Razorpay, which is PCI-DSS certified.
Only staff who need your details to handle your order can see them. Admin accounts are protected by passwords, failed sign-ins are limited, and admin actions are logged.
We keep our software up to date and check it for security problems.

No system is completely secure. If a breach affects your personal information, we will inform you and the authorities as Indian law requires.

8. Your rights

Under the Digital Personal Data Protection Act, 2023 you can:

Access: ask for a summary of the personal information we hold about you and how we use it.
Correct and update: change your name, email and addresses in the app under Account, or ask us to correct anything else.
Erase: delete your account in the app (Account > Account settings > Delete account) or ask us by email. Some records, such as tax invoices, must be kept by law.
Withdraw consent: stop using the app, turn off notifications, or delete your account. This does not affect orders already placed.
Nominate: name someone to exercise these rights for you in case of death or incapacity.
Complain: contact our grievance officer (section 12). If you are not satisfied, you can approach the Data Protection Board of India.

To use any of these rights, email qckart.care@gmail.com from your registered email address or include your registered phone number. We reply within 30 days.

9. Your choices

Notifications: turn off app notifications in your phone's settings. We will still send essential order emails or messages.
Reviews: ask us to remove a review you posted.
Guest browsing: you can browse products in the app without signing in. You need an account only to order.

10. Children

Our app and website are meant for people aged 18 and over. We do not knowingly collect information from children. If you believe a child has given us personal information, contact us and we will delete it.

11. Links to other services

Our app and website link to other services, such as Google sign-in, Razorpay checkout, WhatsApp and courier tracking pages. Their own privacy policies apply when you use them.

12. Grievance officer

For questions, complaints or requests about your personal information, contact our grievance officer:

Email: qckart.care@gmail.com
Phone: +91 85445 16274
Address: Building No. 02, Thadhi Bhawanipur Ward No. 02, Thadhi Bhawanipur, Tharhi Bhawanipur, Supaul, Bihar – 852218

We acknowledge complaints within 48 hours and aim to resolve them within 30 days.

13. Changes to this policy

We may update this policy when our services or the law change. The latest version is always on this page. If we make important changes, we will tell you in the app or by email before they take effect.

14. Contact us

QCkart, Building No. 02, Thadhi Bhawanipur Ward No. 02, Thadhi Bhawanipur, Tharhi Bhawanipur, Supaul, Bihar – 852218. Email qckart.care@gmail.com, phone +91 85445 16274. Support hours: Mon - Sat: 10:00 AM - 7:00 PM, Sunday: closed (email support only).