Privacy Policy

Privacy Policy – 24x7 Stop

Introduction

24x7 Stop (“Company”, “we”, “us”, or “our”) operates convenience stores and digital services, including our website, mobile sites, and any online services linked to this Privacy Policy (collectively, the “Services”).
This Privacy Policy explains how we collect, use, store, share, and protect your personal data when you visit our stores, use our website, interact with us online or offline, or participate in our programs.

By accessing or using our Services, you agree to the practices described in this Privacy Policy, subject to applicable laws in India, including the Information Technology Act, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, and the Digital Personal Data Protection Act, 2023 (“DPDPA”).

Scope and applicability

• This Privacy Policy applies to information collected through:
• Our websites and mobile sites related to 24x7 Stop.
• In‑store interactions, customer service, and feedback channels.
• Franchise and business enquiry forms, loyalty programs, and marketing communications.
• It does not apply to:
• Third‑party websites, apps, or services that may be linked from our Services.
• Independent franchisees or partners who operate under their own privacy practices, unless explicitly stated.

Definitions

For ease of understanding:

• “Personal Data” means any data about an individual who is identifiable by or in relation to such data, consistent with the DPDPA.
• “Sensitive Personal Data” may include financial information, payment instrument details, health data, and similar categories as defined under applicable Indian law.
• “Processing” means any operation performed on Personal Data, including collection, storage, use, sharing, disclosure, or deletion.

Information we collect

We may collect the following categories of information, depending on how you interact with us:

1. Identifiers and contact information
• Name, phone number, email address, postal address, PIN code, and city.
• Government‑issued identifiers only where required by law or for specific services (for example, certain franchise or employment processes).
2. Demographic and profile information
• Date of birth, age range, gender (if provided), language preferences, and interests.
• Loyalty or membership ID, if a loyalty program is launched.
3. Transactional and payment information
• Records of purchases made at our stores or online, including products purchased, date and time, store or channel, and payment method.
• Partial payment card details or UPI identifiers processed through secure payment gateways; full payment information is typically handled by the payment provider and not stored by us, except where legally required.
4. Online and technical information
• Device identifiers, IP address, browser type, operating system, and pages viewed on our website.
• Cookie identifiers, session information, approximate location (based on IP), and clickstream data.
5. Communications and feedback
• Messages, enquiries, complaints, feedback, and other communications sent via forms, email, messaging apps, or customer support channels.
• Survey responses, contest entries, or participation in promotions.
6. Franchise, vendor, and career information
• Business contact details, company information, location proposals, financial or commercial information shared in franchise or vendor enquiries.
• CVs, employment history, qualifications, and related information if you apply for a job.
7. In‑store CCTV and security footage (if applicable)
• Video recordings inside or around our store premises for safety, security, and loss prevention purposes.

How we collect information

We collect information in several ways:

• Directly from you
• When you fill out forms on the website (contact, feedback, franchise enquiry, careers).
• When you communicate with us by phone, email, social media, or in store.
• Automatically when you use our Services
• Through cookies, web beacons, tags, and similar technologies when you visit our website.
• Through logs generated by servers and security systems.
• From third parties (where permitted by law)
• Advertising and analytics partners, payment processors, logistics partners, or social media platforms.
• Franchise consultants, recruitment platforms, or referral partners.

Legal basis and purpose of processing

We process Personal Data for one or more of the following purposes, in line with applicable Indian law:

1. To provide and operate our Services
• Processing orders, managing deliveries or pickups, handling payments, and providing customer support.
• Operating loyalty programs, offers, and in‑store or online services you choose to use.
2. To communicate with you
• Responding to your queries, complaints, or requests.
• Sending transactional messages such as order confirmations, service alerts, or policy updates.
3. For marketing and personalization (with consent where required)
• Informing you about offers, promotions, events, and new store openings that may interest you.
• Personalizing content, recommendations, and promotions based on your interactions and purchase history.
4. For safety, security, and fraud prevention
• Protecting our customers, staff, stores, and systems; detecting, preventing, and responding to fraud or suspicious activities.
• Maintaining CCTV and access logs for safety, dispute resolution, and legal compliance.
5. For analytics, improvement, and business operations
• Understanding how our Services are used to improve store layouts, product offerings, website design, and customer experience.
• Conducting data analytics, reporting, and business planning using aggregated or de‑identified data where possible.
6. To comply with legal obligations
• Meeting obligations under applicable laws, including tax, accounting, and regulatory reporting.
• Responding to lawful requests from government authorities or law enforcement agencies.

Cookies and similar technologies

Our website may use cookies and similar technologies to:

• Remember your preferences (such as language and city selection).
• Maintain session information and secure login (if applicable).
• Measure website traffic, performance, and usage patterns for analytics and improvement.

You can manage or disable cookies through your browser settings, but certain features of the website may not function properly if cookies are disabled.

How we share your information

We may share your Personal Data with:

1. Service providers and business partners
• Payment gateways, banks, and financial institutions.
• IT, hosting, analytics, SMS/email, marketing, logistics, and customer support providers.
2. Franchisees and affiliated entities
• 24x7 Stop franchise partners and related entities that operate stores or services under our brand, only as necessary for providing services or managing customer interactions.
• Professional advisors such as auditors, accountants, and lawyers under confidentiality obligations.
3. Legal and regulatory authorities
• Government authorities, law enforcement agencies, courts, or regulators, where disclosure is required by law or to protect our legal rights, safety, or property
4. Business transfers
• In connection with any merger, acquisition, restructuring, or sale of all or part of our business, your Personal Data may be transferred as part of the transaction, subject to applicable legal safeguards.

We do not sell your Personal Data to third parties in the ordinary meaning of “sale”.

Cross‑border data transfers

Where your Personal Data is transferred outside India (for example, to cloud hosting or service providers in other countries), we ensure that such transfers comply with applicable law and that reasonable contractual, technical, and organizational safeguards are in place.

Data retention

• Personal Data is retained for as long as reasonably necessary to fulfil the purposes described in this Privacy Policy or as required by applicable laws (for example, accounting or tax requirements).
• CCTV recordings and system logs may be kept for a limited period consistent with our security policies, unless longer retention is required for investigation or legal proceedings.
• Once data is no longer required, it is securely deleted, anonymized, or archived in accordance with our retention schedules.

How we protect your information

We implement reasonable security practices and procedures to protect Personal Data from unauthorized access, alteration, disclosure, or destruction.

Measures may include:

• Role‑based access controls and “need‑to‑know” access limitation.
• Encryption or tokenization of certain data during transmission and storage, as appropriate.
• Secure configurations, firewalls, anti‑malware tools, and regular monitoring of systems.
• Employee training and internal policies on data protection and confidentiality.

However, no method of transmission over the internet or electronic storage is fully secure, and absolute security cannot be guaranteed.

Your rights and choices

Subject to applicable law, you may have the following rights in relation to your Personal Data

• Right to access: Request confirmation whether we process your Personal Data and obtain a copy or summary of such data.
• Right to correction: Request correction or updating of inaccurate or incomplete Personal Data.
• Right to deletion: Request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected or where consent is withdrawn, subject to legal obligations.
• Right to withdraw consent: Where processing is based on consent (for example, marketing communications), you may withdraw such consent at any time without affecting prior lawful processing.
• Right to grievance redressal: Lodge a complaint or escalate concerns with our Grievance Officer or, where applicable, the Data Protection Board of India.

To exercise these rights, please contact us using the details in the “Contact us / Grievance Officer” section and provide reasonable information to verify your identity.

Children’s privacy

Our Services are not intended for children below the age prescribed by applicable law (for example, below 18 years), and we do not knowingly collect Personal Data from children without appropriate consent from a parent or legal guardian where required.
If any Personal Data of a child has been collected inadvertently, it will be deleted or processed in accordance with applicable legal requirements once identified.

Marketing communications

• You may receive marketing communications (SMS, email, WhatsApp, push notifications, or phone calls) about offers, promotions, and news relating to 24x7 Stop if you have provided your contact details or consented to such communications.
• You can opt out at any time by using the unsubscribe link in emails, replying with prescribed opt‑out keywords in SMS/WhatsApp where available, or contacting us directly.

Even if you opt out of marketing, you may still receive non‑marketing communications such as transaction confirmations, important service notices, or policy updates.

Third‑party links and services

Our website or communications may contain links to third‑party websites, apps, or services (for example, payment gateways, mapping services, social media).
Those third parties operate independently and have their own privacy policies; you are encouraged to review their policies before providing any information or using their services.

Updates to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in law, technology, or our business practices.
The “Last updated” date at the top or bottom of this page indicates when this Privacy Policy was last revised, and the updated version will be effective when posted on our website unless otherwise specified.

Contact us / Grievance Officer

If you have any questions, concerns, or complaints about this Privacy Policy or our data handling practices, or if you wish to exercise your rights, please contact:

Grievance Officer / Data Protection Contact
24x7 Stop
[Insert full postal address]
[Insert email address for privacy queries]
[Insert phone number, if applicable]

In accordance with Indian law, the Grievance Officer shall acknowledge and respond to grievances within the timelines prescribed under applicable regulations.