Who controls your data
FatSo is the data fiduciary for personal data collected through fatso.co.in. For privacy requests, email hello@fatso.co.in with the subject “Privacy Request”.
What we collect
- Identity and contact details such as your name, email address, mobile number, and delivery address.
- Order details such as products, quantities, discounts, delivery status, and support history.
- Technical data such as IP address, browser, device, pages viewed, and cookie identifiers.
- Marketing preferences and any information you choose to share with support.
Why we use it
We process personal data for clear, specific purposes and seek consent where required under India’s Digital Personal Data Protection Act, 2023.
- To accept payment, fulfil orders, send service updates, and handle support.
- To prevent fraud, secure the site, meet tax and food-safety obligations, and resolve disputes.
- To measure site performance and improve products and shopping journeys.
- To send offers only where you have opted in. You can unsubscribe at any time.
Payments
Payments are processed by our payment provider. FatSo does not store full card numbers, CVVs, UPI PINs, or banking credentials. The provider may process payment identifiers, fraud signals, and transaction status under its own privacy terms.
Cookies and analytics
Essential cookies keep the cart, checkout, security, and admin areas working. With consent where required, analytics cookies help us understand visits and purchases. You may block non-essential cookies in your browser; some features may then work differently.
Who receives data
We share the minimum needed with payment processors, delivery partners, hosting and database providers, analytics services, customer-support tools, and professional advisers. We do not sell personal data.
Retention and security
We keep data only as long as needed for the stated purpose, legal records, fraud prevention, and dispute resolution. We use access controls, encryption in transit, secure providers, and monitoring, but no internet service can promise zero risk.
Your DPDP rights
- Ask for a summary of personal data being processed and the processing activities.
- Request correction, completion, updating, or erasure where legally available.
- Withdraw consent as easily as it was given; earlier lawful processing remains valid.
- Raise a grievance and nominate another person to exercise rights in the event of death or incapacity.
Children and changes
Our store is intended for adults. A parent or lawful guardian must place orders for children. We may update this policy when our services or the law changes; the date above shows the latest version.