Privacy Policy

We, Falcon Internet Private Limited, a company incorporated under the Companies Act, 2013 with its registered office at No.1668A, G+5, RJP Towers, 27th Main Road Parangipalya, 2nd Sector HSR Layout, Bangalore, 560102 (hereinafter referred to as “we”, “us”, “our” or "Company") recognize the importance of privacy as well as maintaining confidentiality of the personal information shared by its users (hereinafter referred to as "User" or "you" or "your") while they access, use or avail any services from its technology platform, website (https://www.gostor.com) and mobile application thereof (collectively referred to as "Platform"). This privacy policy describes the type of information that Company may collect from you when you access or use our Platform and the practices for collecting, using, maintaining, protecting, and disclosing such information. ) and mobile application thereof (collectively referred to as "Platform"). This privacy policy describes the type of information that Company may collect from you when you access or use our Platform and the practices for collecting, using, maintaining, protecting, and disclosing such information.

By browsing, accessing or using the Platform or its services and/or registering an account with Platform, you agree to this privacy policy and you are consenting to Company's collection, use, disclosure, retention, and protection of your personal information as described here. If you do not provide the information we may require, we may not be able to provide all our services to you. If you do not agree with any of the terms of this privacy policy, please do not use the Platform.

This privacy policy applies to the information company collects and receives from you through the Platform, or while rendering services thereto, in email, text and other electronic communications sent through or in connection with its services.

All capitalized terms not defined in this document shall have the meanings ascribed to them in the Terms of Use of the Platform, which can be found here, that are applicable for a Seller or a Buyer, as the case may be. This privacy policy shall be read in conjunction with the Terms of Use.

This privacy policy is an electronic record in the form of an electronic contract formed under the Information Technology Act, 2000 and the rules made thereunder and the amended provisions pertaining to electronic documents / records in various statutes as amended by the Information Technology Act, 2000. This privacy policy does not require any physical, electronic or digital signature.

This document is published and shall be construed in accordance with the provisions of the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, Information Technology (Reasonable security practices and procedures and sensitive personal data of information) Rules, 2011 and such other rules and regulations prevailing from time to time and implemented under Information Technology Act, 2000, as may be prevailing from time to time.

I. COLLECTION OF INFORMATION

We collect personally identifiable information (email address, name, phone number, etc.) from you when you set up an account on the Platform. While you can browse some sections of our site without being a registered member, certain activities (such as placing an order) do require registration. We do use your contact information to send you offers based on your previous orders and your interests. We may also maintain a record of your product interests and acquire information about you for our present and/or future affiliates.

We may collect the following types of information from and about you, including but not limited to:

• (a) any information, documents, or details that relate to you and/or any third party, which indirectly or directly or in combination with other information available with us, can lead to your and/or such third party's identification which includes without limitation, name, address, postal code, recent photograph, financial information including bank account details, accounting information, phone number, fax number, email address and any other, sensitive personal data as defined under Information Technology (Reasonable security practices and procedures and sensitive personal data or information) Rules, 2011 ("Personal Information");
• (b) information that you provide on the Platform for availing services from us;
• (c) information about your geographical location, internet connection, the equipment/ device you use to access the Platform, the type of browser, and your usage details;
• (d) In connection with any communication or transaction and payment services or any other services that you may avail using the Platform, information, including without limitation, bank account numbers, billing and delivery information, credit/debit card numbers and expiration dates and tracking information from cheques or money orders may be collected, among other things, to facilitate transactions made for the products or services that have been procured by you through this Platform.
• (e) information relating to communications or transactions, the types and specifications of the products, pricing and delivery information;
• (f) your search history, browsing activities on Platform including but not limited to IP addresses, browsing patterns and user behavioural patterns;
• (g) communications between you and us or with third party service providers that are providing services via the Platform;
• (h) any content, feedback, reviews etc. you may have uploaded or provided to the Company or on the Platform;
• (i) statistical information and details of the visitors to the Platform including, but not limited to, IP addresses, browser software, operating system, software and hardware attributes, pages viewed, number of sessions.
• (j) access to your images and videos on your device, camera, mic, bluetooth, and device location at the time of using or accessing the Platform;
• (k) in order to enhance our ability to provide valuable services and experiences to the user, we may: (i) automatically receive, collect and analyse your location information which may be accessed through a variety of methods including, inter alia, IP address, and location; and (ii) collect information pertaining to your device and your usage thereof, including, inter alia, the names of the other applications on your mobile device and how you use them, information about your device, and information about your use of features or functions on your device;
• (l) you may choose to provide us with access to certain Information stored by third parties like social networking sites or e-commerce websites (e.g. Facebook and Twitter). We will have access to such information to the extent allowed by the user's privacy settings on that site and the user's specific authorization. In the event the user associates a user account managed by us with an account maintained with any third party to enable us to access certain information maintained in such third party managed accounts, the user agrees that we may collect, store and use such information in accordance with this policy.

In the event, you do not provide sufficient information about you, we might not be able to complete the registration process or enable you to access or use the Platform or its services or provide you with information about our products and services to the fullest.

We may collect this information directly from you when you provide it to us or automatically as you navigate through the Platform (information collected automatically may include usage details, IP addresses and information collected through cookies, web beacons and other tracking technologies).

In the event, you do not provide sufficient personal information about you, we might not be able to complete the registration process or enable your access or use to the Platform or its services or provide you with information about our products and services to the fullest.

We may collect this information directly from you when you provide it to us or automatically as you navigate through the Platform (information collected automatically may include usage details, IP addresses and information collected through cookies, web beacons and other tracking technologies).

II. USE OF INFORMATION

If you provide information to us, you are deemed to have authorized and expressly consented to us collecting, retaining and using your information for the below-mentioned purposes, including without limitation:

• (a) to verify the identity of the User onboarded on the Platform;
• (b) to facilitate your use of the Platform and provide services to you;
• (c) to process user's registration by providing the User with a log-in ID and/or one-time password for accessing the Platform;
• (d) communicate and share necessary product and/or service-related information, from time to time;
• (e) to allow you to receive customer care services and responding to your queries, claims, disputes or any other concerns;
• (f) administer our services and diagnose technical problems;
• (g) carry out our obligations and enforce our rights arising from any contracts entered into between you and us, including for billing and collection;
• (h) to comply with applicable laws, rules and regulations;
• (i) to provide you with information with respect to offers on products and services, updates, promotions and schemes related to our services or associated with our service providers, group companies, affiliates and/or partners, that we believe would be of interest to you;
• (j) performing research or statistical analysis in order to improve the content and layout of the Platform, to improve our product offerings and services;
• (k) for assessment, evaluation, statistical, market and product analysis and/or market research and to monitor, improve and administer the Platform and its services;
• (l) to respond to your inquiries or fulfil your requests for information about the various services ordered on the website;
• (m) to process and complete the orders placed with the third party sellers on the Platform and is shared as needed to process and complete the orders;
• (n) to ensure that orders have are successfully delivered on time, and to keep you informed on the status of your order;
• (o) to send you important information regarding the website, changes in terms and conditions, user agreements, and policies and/or other administrative information;
• (p) to send you surveys and marketing communications;
• (q) to personalize your experience on the Platform by presenting advertisements, services and orders tailored to your preferences;
• (r) to help you address your problems incurred on the Platform including addressing any technical problems;
• (s) if you avail of any service from the Platform, to complete and fulfil the same.
• (t) to protect the integrity and for proper administering of the Platform;
• (u) to conduct internal reviews and data analysis for the Platform;
• (v) to respond to legal, judicial, quasi-judicial process and provide information to law enforcement agencies or in connection with an investigation on matters related to public safety, as permitted by law;
• (w) to implement information security practices;
• (x) to determine any security breaches, computer contaminant or computer virus;
• (y) to investigate, prevent, or take action regarding illegal activities and suspected fraud,
• (z) to undertake forensics of the concerned computer resource as a part of investigation or internal audit; (aa) to process any job application you may submit;
• (aa) to process any job application you may submit;
• (bb) to trace computer resources or any person who may have contravened, or is suspected of having or being likely to contravene, any provision of law including the Information Technology Act, 2000 that is likely to have an adverse impact on the services provided on any website or by the Company; and
• (cc) to enable a potential service recipient or investor to evaluate the business of the Company.

[individually and collectively referred to as ("purposes")] you hereby agree and acknowledge that the information so collected is for lawful purpose connected with a function or activity of the Company or any person on its behalf, and the collection of information is necessary for the purposes.

We use the information provided by you for the provision of services. To the extent we use your information for the purposes mentioned above, to the extent permissible by applicable laws, we will provide you the ability to opt-out of such uses.

In our efforts to continually improve our product and service offerings, we collect and analyze demographic and profile data about our users' activity on our website. We identify and use your IP address to help diagnose problems with our server, and to administer our website. Your IP address is also used to help identify you and to gather broad demographic information. We will occasionally ask you to complete optional online surveys. Surveys may ask you for contact information and demographic information (like zipcode, age, or income level). We use this data to tailor your experience at our site, providing you with content that we think you might be interested in and to display content according to your preferences.

III. DISCLOSURE OF USER INFORMATION

You agree that we may disclose information that we collect, or you provide, as described in this Policy, in the following ways:

• (a) To our subsidiaries, group companies and/ or affiliates under the common ownership or control of our parent company.
• (b) To third party service provider(s) whom we may use for our business and operational purposes or for the performance of any lawful contractual obligation entered into with such service provider(s).
• (c) In connection with the services being rendered through the Platform.
• (d) To third-party service providers (located within or outside India) who perform services on our behalf which may include without limitation data entry, database management, promotions or marketing activities, products and services alerts, authentication and verification services etc. These third-party service providers shall be under an obligation of confidentiality and will be permitted to use your Personal Information only in connection with the purposes specified in clause II mentioned herein above.
• (e) To our professional advisers, law enforcement agencies, insurers, government and regulatory and other organizations or in compliance with court orders, requests/order, notices from legal authorities or law enforcement agencies compel us to make such disclosure.
• (f) To third-parties to market / make available their products or services to you if you have consented to receive such updates. We contractually require these third-parties to keep Personal Information confidential and use it only for the purposes for which we disclose it to them.
• (g) To third parties from whom you avail logistics services, delivery services, payment services etc. while placing your order on the Platform in order to complete and fulfil your transaction via the Platform.
• (h) To help investigate, prevent or take action regarding unlawful and illegal activities, suspected fraud, potential threat to the safety or security of any person or other user, violations of the Platform's terms of use or to defend against legal claims.
• (i) We may share information with third parties including without limitation, banks, financial institutions, credit agencies, or vendors to enable such third parties to offer their products or services to you. While we will endeavour to have in place internal procedures to keep information secure from intruders, there is no guarantee that such measures/procedures can eliminate all of the risks of theft, loss or misuse.
• (j) We may share your information, when we believe such disclosure is mandated by applicable law. This may include exchanging or sharing information with other companies, organisations, banks, government or regulatory authorities. However, this does not include selling, renting, or otherwise disclosing information for commercial purposes in a way that is contrary to applicable laws.
• (k) If we believe disclosure is necessary or appropriate to protect the rights, property, or safety of the Company, our customers or others. This includes exchanging information with other companies and organizations for the purposes of fraud protection and credit risk reduction.
• (l) We may share your information with any third party in any other circumstances where we have your consent.
• (m) We may share aggregated anonymized (and de identified) information about you with third parties at our sole discretion.
• (n) The Company may share statistical data and other details (other than your Personal Information) without your express or implied consent to facilitates various programmes or initiatives launched by the Company, its affiliates, agents, third party service providers, partners or banks & financial institutions, from time to time. We may transfer/disclose/share information (other than your Personal Information) to those parties who support our business, such as providing technical infrastructure services, analyzing how our services are used, providing merchants services, facilitating payments, or conducting academic research and surveys. These affiliates and third party service providers shall adhere to confidentiality obligations consistent with this privacy policy.
• (o) We will share some or all of your Personal Information with another business entity should we (or our assets) plan to merge with, or be acquired by that business entity, or re-organization, amalgamation, restructuring of business. Should such a transaction occur that other business entity (or the new combined entity) will be required to follow this privacy policy with respect to your Personal Information.

IV. THIRD PARTY OFFERS

• (a) We may establish relationships with other parties and websites to offer you the benefit of products and services which we do not offer. We may offer you access to these other parties and/or their websites.
• (b) This policy does not apply to the products and services enabled or facilitated by such third parties. The privacy policies of those other parties may differ, and we have no control over the information that you may submit to those third parties. You should read and understand the relevant privacy policy for those third parties before responding to and availing any offers, products or services advertised or provided by those third parties.
• (c) The Company hereby expressly disclaims all liabilities with respect to the manner in which the other website(s) collects and/or uses your information. Such third parties may place or recognize a unique "cookie" on your browser and may use information about your visits to the Platform and other websites in order to provide advertisements about goods and services of interest to You. We shall, in no event, be liable for any unauthorized or unlawful disclosures of your Personal Information or any other information made by advertisers, who are not subject to our control.

V. RETENTION OF INFORMATION

We will retain your information for as long as it is necessary to fulfil the purposes set forth herein, and for a reasonable time thereafter for the furtherance and completion of any of our services to you, and for such time as may be necessary in order to comply with any legal obligation or compliance under applicable laws.

We may be required to retain your information post termination of our business relationship with you for fraud prevention purposes and use such information for the exercise/defense of a legal claim or for providing evidence in legal proceedings or as may be required to comply with applicable laws.

Post termination or deactivation of your user account with the Company,

• (i) Company is not responsible for retaining any of your information or any backups of such information, you shall have no right to request Company for any of their information in any form post termination or deactivation of your account for any reason whatsoever;
• (ii) Company may continue to use your anonymized data aggregated or in combination with anonymized data of other users. We use this aggregated anonymized data for data analysis, profiling and research purposes, for example to gain insights about our users and their profiles;
• (iii) We may keep your information along with your application details (if any) and use such information for fraud prevention purposes and for the exercise/defense of a legal claim or for providing evidence in legal proceeding(s) or as may be required to comply with applicable laws;
• (iv) We may retain information to be in compliance with applicable laws and / or if we are under a contractual obligation to retain such information for a specified period of time;
• (v) We may use information in compliance with applicable laws.

VI. COOKIES

We may use data collection devices such as "cookies" on certain pages to help analyse our web page flow, measure promotional effectiveness, and promote trust and safety. "Cookies" are small files or small amount of data that is sent to your browser and stored on your device. If you do not de-activate or erase the cookie, each time you use the same device to access the Platform, our services will be notified of your visit to the Platform and in turn we may have knowledge of your visit and the pattern of your usage. Generally, We use cookies to identify User and enable us to:

• (a) access your information so you do not have to re-enter it;
• (b) gather statistical information about usage by you;
• (c) research visiting patterns and help target advertisements based on your interests;
• (d) assist our partners to track your visits to the Platform and browsing history; and
• (e) track progress and participation on the Platform. You can determine if and how a cookie will be accepted by configuring the browser which is installed in your device. If you choose, you can change those configurations. If you reject all cookies by choosing the cookie-disabling function, you may be required to re-enter information on the Platform more often and certain features of the Platform may be unavailable to you.

VII. REVIEW OF INFORMATION

You may review, correct, update, change or delete your information, either through the login page on the Platform (collectively referred to as "your account"). You can request for change in the information provided to us by you by contacting us atcustomersupport@gostor.com.

VIII. SECURITY

We have employed appropriate electronic, and managerial procedures to safeguard and help prevent unauthorized access to your Personal Information and to maintain data security. These safeguards take into account the sensitivity of the information that we collect, process and store and the current state of technology. We follow generally accepted industry standards to protect the information submitted to us, both during transmission and once we receive it. Although we will endeavour to safeguard the confidentiality of your personally identifiable information, transmissions made by means of the internet cannot be made absolutely secure. By using this Platform, you agree that the Platform will have no liability for disclosure of your information due to errors in transmission or unauthorized acts of third parties.

Notwithstanding anything contained in this policy or elsewhere, we shall not be held responsible for:

• (a) any security breaches on third-party websites or applications or for any actions of third-parties that receive your Personal Information; or
• (b) any loss, damage or misuse of your Personal Information, if such loss, damage or misuse is attributable to a Force Majeure Event. For the purpose of this policy, a "Force Majeure Event" shall mean any event that is beyond our reasonable control and shall include, acts of God, fire, explosions, wars or other hostilities, insurrections, revolutions, strikes, labour unrest, earthquakes, floods, pandemic, epidemics or regulatory or quarantine restrictions, unforeseeable governmental restrictions or controls or a failure by a third party hosting provider or internet service provider or on account of any change or defect in the software and/or hardware of your computer system.

IX. RIGHT TO WITHDRAW CONSENT

You agree and acknowledge that you are providing your information out of your free will. You have an option not to provide or permit the Company to collect your personal information or later on withdraw your consent with respect to such information so provided herein by sending an email to the grievance officer or such other electronic address as may be notified to you.

In case of withdrawal of your consent, we reserve the option not to provide the services for which such information was collection by us. Your withdrawal will become effective upon the receipt of an acknowledgment by you from us. We may be required to retain the information post withdrawal of your consent for complying with applicable laws and/or use such information as per clause V. (Retention of Information) above.

X. UPDATING THE INFORMATION

To correct or update any information you have provided, the Platform allows you to do it online or by contact the Grievance Officer. In the event of loss of access details, you can send an e-mail to the Grievance Officer.

You will not be able to update the information you have provided in an application on our Platform after a decision has already been made on it; however, you may create and submit a new application with your updated information.

XI. CHANGES TO THIS POLICY

We may amend, amend and restate, modify or replace this policy from time to time and your continued use of the Platform and its services after it makes any change is deemed to be acceptance of those changes. You are advised to check this policy periodically for any updates. Once posted on the Platform, the new policy will be effective immediately. You agree that any information we hold about a user will be governed by the latest version of the policy.

XII. MINORS

The Platform and its contents are not intended for user(s) who are minors (those under 18 years of age). However, we have no way of distinguishing the age of individuals who access our Platform. If we become aware that a person submitting information is under the permissible age, we will delete the account and any related information as soon as possible. If you believe we might have any information from or about a user under the permissible age, please contact the Grievance Officer.

XIII. GRIEVANCE OFFICER

In accordance with Information Technology Act 2000 and rules made there under as may be prevailing, from time to time, the name and contact details of the grievance officer are provided below: