Privacy Policy

1. Introduction

Fulcrum Retail Solutions (“Fulcrum”, “we”, “us”) operates the Fulcrum Retail App, a VRM (Visibility, Relationship & Marketing) platform for retail business owners. This policy explains how we collect, use, and protect your information.

2. Information we collect

• Information you provide directly: Name, mobile number, date of birth, pin code, and gender.
• Information collected automatically: Device information, IP address, browser type, approximate location (based on pincode / IP), purchase history, transaction points earned or redeemed, and store interaction data.

3. Purpose of collection — why we are a VRM

• Visibility: To provide business owners with anonymized insights on customer trends, purchase patterns, and store performance.
• Relationship: To manage your account, loyalty points, and customer service.
• Marketing: To deliver relevant in-app offers and rewards, and to conduct market research and surveys.

4. Legal basis (DPDP Act 2023 & GDPR)

We process your data based on:

• Your explicit consent at the time of registration.
• Performance of a contract (loyalty and rewards).
• Compliance with legal obligations.

5. Data sharing

We do not sell your Personally Identifiable Information. We do not share your name, mobile number, DOB, pincode, or gender with our Business Partners or affiliated businesses. We may use anonymized and aggregated segments (e.g., “customers who purchase monthly in Hoskote”) to enable relevant promotions. All offers from Business Partners are delivered only by Fulcrum inside the Fulcrum Retail App, without disclosing your personal data to the partner. Business Partners never receive your personal data directly from us.

6. Data retention

We retain your data for 10 years from your last transaction or interaction, or until you request deletion of your account, whichever is earlier. Anonymized analytics data may be retained for longer for business insights.

7. Your rights

You have the right to:

• Access your data.
• Correct or update your data.
• Withdraw consent.
• Request deletion of your account and data.
• Opt out of promotional communications.

To exercise these rights, write to us at the contact email above.

8. Data security

We implement reasonable security practices including encryption in transit, access controls, and role-based access to protect your data.

9. Grievance Officer (required under DPDP Act)

10. Changes to policy

We will notify you of material changes via the App.