Privacy Policy

This Privacy Policy applies to the Gorakhnath Enterprises mobile application, the storefront available at www.gorakhnathenterprises.com and related ordering, delivery, payment, review and customer-support services.

The service is operated by Gorakhnath Enterprises, a local retailer serving customers from Bikram, Patna, Bihar and nearby areas.

Depending on how you use the service, we may collect the following:

• Customer account details: the stable Google account identifier provided by Google, verified email address, display name and optional profile picture used to create your storefront account and connect your orders.
• Order and contact details: name, mobile number, optional email address, delivery address, city, state, postal PIN code, order items, quantity, price and delivery notes.
• Payment verification details: UPI transaction reference or UTR that you choose to submit for order verification. We do not ask for or store your UPI PIN, card PIN, card CVV or banking password.
• Optional location information: approximate/current device coordinates only when you choose the location feature. We use a reverse-geocoding service to turn the coordinates into a readable locality and postal PIN, and may also create a Google Maps delivery link for your order notes. Coordinates are not retained as an analytics profile.
• Reviews and support: name, optional email, review content, ratings, chat messages and—only if you share them—your name or phone number for store follow-up.
• Usage and device information: pages visited, search terms, referrer, browser and operating-system details, device type, language, timezone, screen/viewport size, session identifiers and PWA installation events. Our server may also receive IP address and user-agent information with requests.

• Display the catalogue, recommendations, search results, cart and delivery options.
• Create and manage orders, calculate delivery charges, provide order support and communicate order or payment status.
• Authenticate your customer account and let you resume payment or view order status from My Orders.
• Match UPI transaction references to orders and verify payments submitted by customers.
• Respond to product, delivery and event-supply questions through chat, phone or WhatsApp.
• Moderate product reviews, prevent misuse, troubleshoot technical issues and protect the service.
• Understand storefront usage, improve performance and measure PWA installation or engagement.

The storefront uses browser storage to remember practical preferences such as your cart, selected delivery information, theme preference, coupon/session state, chat session and PWA installation identifier. This storage helps the service work correctly and does not itself give us access to files or contacts on your device.

After Google sign-in, we use a secure HttpOnly customer-session cookie to keep you signed in. Browser JavaScript cannot read this cookie. You can end the session using Sign out, and server-side sessions expire automatically.

We use storefront analytics, including Vercel Analytics and our own page-view, search and PWA event tracking, to understand usage and improve the service. These measurements may include device and browser details, page paths, referrer, approximate delivery area/PIN when you have saved it, and technical identifiers. Analytics requests are designed not to block shopping or checkout.

We share information only when needed to provide the service, operate the business or comply with law. This may include:

• Our store team and delivery/support personnel for order fulfilment, payment verification and customer care.
• Infrastructure, hosting, analytics and technical service providers that process data on our behalf.
• Google Identity Services when you choose or are required to sign in for checkout. Google verifies your identity and returns limited account profile information under Google's own privacy terms.
• A reverse-geocoding provider when you choose current-location support, Google Maps when you open a map link, and the postal PIN-code lookup service used to help fill city information at checkout.
• UPI apps, banks and payment networks when you choose to open an external UPI payment flow. Their own privacy policies apply to information they process.
• WhatsApp, telephone providers or other third-party apps when you voluntarily choose those contact options.
• Authorities, advisers or other parties when disclosure is required by law, necessary to protect rights or safety, or needed in a business transfer.

The support assistant may use Azure OpenAI as an AI processing provider when that feature is enabled by the store. Chat messages needed to generate a response may be sent to that provider for processing; we do not use the assistant to request UPI PINs, passwords or card security data.

Payments are made directly through UPI apps or other options shown at checkout. We do not process or store your UPI PIN, card CVV, card PIN or banking password. If you submit a UTR/reference number, we store it with the related order so the store can verify the payment.

We use reasonable administrative, technical and organisational safeguards, including access controls and protected connections where supported, to reduce the risk of unauthorised access, loss or misuse. No internet transmission or storage system can be guaranteed to be completely secure.

We retain order, payment-verification and support information for as long as reasonably needed to fulfil orders, handle returns or disputes, provide support, maintain business and tax records, prevent fraud and meet legal obligations. Analytics, review and chat information may be retained for operational, moderation and improvement purposes for a reasonable period.

Browsing does not require an account, but storefront checkout requires Google sign-in so orders and delayed payment confirmation can be recovered through My Orders. To request access, correction, session revocation or deletion of personal information, contact us using the details below and include enough information for us to identify the relevant account or order. We may retain information that we must keep for legal, accounting, payment-dispute or security reasons.

Our services are intended for general audiences and are not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided information to us, please contact us so we can review and delete it where appropriate.

The storefront may open or link to third-party services such as UPI apps, Google Maps, WhatsApp, phone dialler services, analytics providers and payment or infrastructure services. We do not control their privacy practices. Please review the privacy notice of the service you choose to use.

We may update this policy when our app, storefront, data practices or legal requirements change. The updated version will be posted on this page with a new “Last updated” date. We encourage you to review it periodically.