Privacy Policy

1. Introduction

Butch (“we”, “us”, or “our”) operates an online marketplace connecting customers with local butcher shop partners. This Privacy Policy explains what personal data we collect, why, how we use and share it, how long we keep it, and the rights you have over it.

This policy is drafted to align with the Digital Personal Data Protection Act, 2023 (“DPDP Act”) and the Digital Personal Data Protection Rules, 2025 (“DPDP Rules”), and with the Information Technology Act, 2000 and applicable rules made under it.

Unlike a general acceptance of Terms & Conditions, your consent to specific processing purposes described below is sought separately, as required under the DPDP Act, and you may give or withdraw it independently of using the rest of the platform where the purpose is not necessary to fulfil your order.

2. Personal Data We Collect

We collect the following categories of personal data (referred to as “Data Principal” information under the DPDP Act) when you register, place an order, or interact with our support team:

• Identity information: your name
• Contact information: mobile number and email address
• Delivery information: your delivery address
• Payment information: UPI transaction references and payment confirmation details (we do not store full payment credentials)
• Order history: details of past purchases made through Butch

We may also collect non-personal, aggregated analytical data (such as page visits, click behaviour, and device type). Where such data can identify you directly or indirectly, it is treated as personal data under this policy.

3. Purpose of Processing and Consent

At the time of account creation, we present two separate consent checkboxes rather than a single bundled acceptance:

• A mandatory checkbox confirming your agreement to our Terms & Conditions and this Privacy Policy, covering the processing necessary to fulfil orders, coordinate delivery, process payments, and provide support. This is required to create an account, since Butch cannot operate without it.
• A separate, unticked-by-default checkbox for marketing communications via WhatsApp and email. Leaving this unchecked has no effect on your ability to create an account or place orders.

The purposes covered under the mandatory acceptance are:

• To process and fulfil your orders (necessary for performance of contract)
• To coordinate delivery with our third-party logistics partners
• To process payments and maintain transaction records
• To communicate with you regarding your orders, including status updates and support queries
• To analyse platform usage and improve our services

The purpose covered under the optional marketing checkbox is:

• To send you promotional offers, new listings, or service updates via WhatsApp and email — only where you have separately opted in

We will not use your personal data for any purpose beyond those to which you have consented, without seeking fresh consent. You may withdraw the marketing opt-in at any time as described in Section 4, without affecting your account or active orders.

4. Withdrawal of Consent

You may withdraw your consent to any processing purpose at any time, with withdrawal being as easy as giving consent. You can withdraw consent by:

• Emailing our Grievance Officer (see Section 12) with your withdrawal request

Withdrawing consent will not affect the lawfulness of processing carried out before withdrawal, and will not affect the transactional messages necessary for orders already placed. Withdrawing consent necessary to fulfil an active order may result in our inability to complete that order.

5. Sharing of Your Information

We do not sell your personal data to any third party. We share your data only to the extent necessary, and only with parties who are contractually required to handle it securely and solely for the purpose for which it was shared:

• Butcher shop partners: your name, contact number, and delivery address, to prepare and hand over your order
• Delivery partners: your name, contact number, and delivery address, to facilitate delivery (e.g. Rapido, Porter)
• Payment processors: transaction-related information, to complete your payment
• Analytics and marketing tools: aggregated or pseudonymised usage data (e.g. Google Analytics, Meta Pixel), only where you have opted in to analytics/marketing cookies or tracking

6. Data Storage, Security & Breach Notification

Your personal data is stored on systems located within India. We implement reasonable technical and organisational security safeguards to protect your data against unauthorised access, loss, alteration, or misuse, in line with the DPDP Rules.

In the event of a personal data breach, we will notify the Data Protection Board of India and affected Data Principals without undue delay, in the manner and within the timelines prescribed under the DPDP Rules, including the nature of the breach, likely consequences, and mitigation steps taken.

7. Data Retention

We retain your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law, subject to the following general guidance:

• Order and transaction records: 7 years
• Account and profile information: retained while your account is active, and deleted or anonymised within 30 days of account deletion request
• Support/complaint records: 10 days from resolution, for dispute-handling purposes

Where you withdraw consent or request erasure and no legal ground exists for continued retention, we will erase or anonymise your personal data within a reasonable time.

8. Children’s Data

The Butch platform is intended for use only by individuals who are at least 18 years of age and legally capable of entering into a binding contract (“Data Principal” eligibility). We do not knowingly process personal data of any individual under the age of 18 (“Child” under the DPDP Act).

We do not undertake tracking, behavioural monitoring, or targeted advertising directed at children. If we become aware that a child has provided us with personal data, we will take steps to promptly delete such information and, where applicable, terminate the associated account.

If you believe a child has used our platform or that we hold a child’s personal data, please contact our Grievance Officer immediately (see Section 12).

9. Your Rights as a Data Principal

Under the DPDP Act, you have the right to:

• Obtain a summary of the personal data we hold about you and the processing activities carried out on it
• Request correction, completion, or updating of inaccurate or incomplete personal data
• Request erasure of your personal data, unless retention is required for a legal purpose
• Withdraw consent at any time, as described in Section 4
• Nominate another individual to exercise your rights on your behalf in the event of death or incapacity
• File a complaint with our Grievance Officer, and if unresolved, escalate to the Data Protection Board of India

To exercise any of these rights, please contact our Grievance Officer at the details in Section 12. We will respond within the timeframe prescribed under the DPDP Rules.

10. Cross-Border Transfer

Your personal data is currently stored and processed within India. If this changes, we will update this policy to identify any countries to which data may be transferred, subject to any restrictions notified by the Central Government under the DPDP Act.

11. Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The revised policy will be posted on our platform with an updated effective date. Material changes affecting the purposes for which we process your data will require fresh consent where required under the DPDP Act.

12. Grievance Officer & Contact Us

For any privacy-related queries, complaints, or requests to exercise your rights, please contact our Grievance Officer:

• Name: Mohammad Jaabir
• Email: grievance@butch.in
• Support hours: 8:00 AM – 8:00 PM IST

General queries may also be directed to support@butch.in. If your grievance is not resolved to your satisfaction, you may approach the Data Protection Board of India.

© 2026 Butch. All rights reserved.