Privacy Policy

www.challengerate.com  |  Effective Date: March 2026  |  India

1. Introduction

This Privacy Policy explains how Challenge Rate and its affiliates (collectively referred to as "Challenge Rate", "we", "our", or "us") collect, use, store, share, and protect your personal data when you access or use our platform at https://www.challengerate.com (the "Platform").

By visiting the Platform, registering an account, or availing any product or service offered on the Platform, you expressly agree to the terms of this Privacy Policy, our Terms of Use, and any applicable service-specific terms. If you do not agree with any part of this Policy, please refrain from using the Platform.

Note: Our products and services are exclusively offered within India. Your personal data will primarily be stored and processed in India, and your use of the Platform is governed by the laws of India, including applicable data protection and privacy regulations.

2. Information We Collect

We collect personal data in the ordinary course of our relationship with you — including when you register, use our services, or interact with us in any way. The types of information we may collect include:

2.1 Personal Identification Information

• Full name and date of birth
• Residential or business address
• Mobile number and email address
• Government-issued identity or address proof documents

2.2 Financial & Sensitive Personal Data (with your explicit consent)

• Bank account details, debit/credit card numbers, or other payment instrument information
• Biometric data such as facial features or physiological information (where applicable and opted in by the user)

2.3 Platform Usage & Transaction Data

• Browsing behaviour, preferences, and interactions on the Platform
• Transaction records and order history
• Data shared through third-party partner platforms used in conjunction with our services

Important: You always have the option to not provide certain information by simply not using the specific feature or service for which it is required. You may also browse certain sections of the Platform without registering.

Security Advisory: Challenge Rate will never ask you for sensitive credentials such as your debit/credit card PIN, net-banking password, or mobile banking password via email, call, or message. If you receive such a request from anyone claiming to represent Challenge Rate, do not share any information and report it immediately to the relevant law enforcement authority.

3. How We Use Your Information

We process your personal data for legitimate business purposes directly related to the services we provide. Specifically, we use your data to:

• Provide, operate, and improve the products and services you request
• Facilitate order fulfilment and assist sellers and business partners in processing your transactions
• Enhance your experience on the Platform through personalisation
• Resolve disputes, troubleshoot issues, and provide customer support
• Notify you about new products, services, offers, and platform updates (you may opt out of marketing communications at any time)
• Conduct internal research, analysis, and surveys to improve our Platform
• Detect, prevent, and investigate fraud, errors, and other illegal or unauthorised activities
• Enforce our Terms of Use and legal obligations

Note: Where we use your personal data for direct marketing, you will be provided with a clear mechanism to opt out of such communications.

4. Sharing of Your Information

We do not sell your personal data. However, we may share your information in the following circumstances:

4.1 Within the Challenge Rate Group

We may share your data with our group entities, affiliates, and corporate subsidiaries to deliver our integrated services. These entities may use your data for marketing purposes unless you explicitly opt out.

4.2 With Trusted Third Parties & Business Partners

We may share your data with:

• Sellers and vendors fulfilling your orders
• Logistics and delivery partners
• Payment processors and prepaid payment instrument issuers
• Reward programme partners and other third-party service providers

Such sharing is limited to what is necessary to fulfil your service requests, comply with our legal obligations, prevent fraud, and support our marketing activities.

4.3 With Government & Law Enforcement Authorities

We may disclose your personal data to government agencies or authorised law enforcement agencies when:

• Required to do so by law, court order, or legal process
• Necessary to protect the rights, property, or safety of our users or the general public
• Required to respond to claims that content on the Platform violates third-party rights

5. Data Security

We are committed to protecting your personal data. We implement industry-standard security measures and procedures to safeguard your information against unauthorised access, disclosure, loss, or misuse. These include:

• Secure server infrastructure with access controls
• Encryption of data during transmission where applicable
• Internal security guidelines governing access to your account information

Disclaimer: While we take all reasonable precautions, no method of transmission over the internet or electronic storage is 100% secure. By using the Platform, you acknowledge the inherent risks associated with data transmission over the internet. You are responsible for maintaining the confidentiality of your login credentials and password.

6. Data Retention & Deletion

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law.

6.1 Account Deletion

You may delete your account at any time by visiting your Profile & Settings on the Platform, or by writing to us at the contact details provided in Section 9 below. Please note that deleting your account will result in the permanent loss of all data associated with it.

We reserve the right to delay or refuse account deletion in the event of any:

• Pending grievances or disputes
• Incomplete shipments or active service requests
• Outstanding legal or compliance obligations

6.2 Retention After Deletion

Even after deletion, we may retain certain data in anonymised or aggregated form for analytical, research, or fraud prevention purposes, as permitted under applicable law.

7. Your Rights

As a user of our Platform, you have the following rights with respect to your personal data:

• Access: Request a copy of the personal data we hold about you
• Rectification: Correct inaccurate or incomplete personal data directly through the Platform's account settings
• Update: Keep your information current by updating your profile at any time
• Withdrawal of Consent: Withdraw consent for processing your personal data by writing to our Grievance Officer (see Section 9)

Please note: Withdrawal of consent is not retrospective and will be subject to the Terms of Use and applicable law. Withdrawing consent may limit your access to certain services that require the relevant data.

8. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of significant changes as required under applicable law. We encourage you to review this Policy periodically to stay informed about how we protect your information.

To request withdrawal of consent, please write to us with the subject line: "Withdrawal of Consent for Processing Personal Data". We will verify and process your request in accordance with applicable law.

© Challenge Rate. All Rights Reserved. This Privacy Policy is governed by the laws of India.