Privacy Policy

Effective Date: 17 February 2026

At SIDS Farm Private Limited (including its subsidiaries or affiliated entities, hereinafter referred to as “SIDS Farm”, “we”, “us” or “our”), we are committed to processing digital personal data in a lawful, fair, transparent and secure manner in accordance with the current laws. SIDS Farm is committed to adopting appropriate technical, administrative and organizational safeguards to ensure the security and confidentiality of your personal information.

SIDS Farm operates a Delivery Partner mobile application and an in-house ERP Platform to support onboarding, attendance tracking, delivery operations, payouts, incentives, asset tracking, and exit processes (collectively, the “Services”). This Privacy Policy describes our policies and procedures on the collection, use, access, correction, storage, and disclosure of personal information in connection with the Services.

This Privacy Policy applies only to Delivery Partners and authorized users of the in-house ERP Platform. It does not apply to customers placing orders or to third-party applications or services not owned or controlled by SIDS Farm.

By using our Services, you acknowledge that you have read and understood this Privacy Policy.

1. Definitions

"Delivery Partner” means an individual engaged by SIDS Farm for last-mile delivery operations who uses the Services.

"In-house ERP Platform" means the internal enterprise resource planning system developed or operated by SIDS Farm for managing delivery partner onboarding, attendance, payouts, operational data, reporting, and administrative functions, access to which is restricted to authorized users.

"ERP Platform User" means any employee, contractor, or authorized personnel of SIDS Farm who is granted access to the In-house ERP Platform.

"Personal Information” means any digital personal data as defined under the DPDP Act, including information that, alone or together with other data, relates to an identifiable Delivery Partner or ERP Platform User.

"Sensitive Personal Data" means biometric data facial recognition data, government IDs, financial account information and location data.

"Third-Party Services” means external applications, systems, or services that are not owned or controlled by SIDS Farm, which may be linked to or integrated with the Services.

2. Data Fiduciary

For the purposes of applicable data protection laws, including the Digital Personal Data Protection Act, 2023 (“DPDP Act”), SIDS Farm Private Limited is the Data Fiduciary (as defined under the DPDP Act) of personal data processed through the Services.

Delivery Partners and ERP Platform Users are Data Principals in respect of their personal data processed by Sids Farm. Where SIDS Farm engages vendors or service providers to support the Services (such as cloud hosting, messaging, analytics, or operational tooling), such entities act as Data Processors and process data under SIDS Farm's instructions and contractual obligations.

3. Information We Collect and How We Use It

3.1 Personal Information

We collect personal information provided by Delivery Partners during onboarding or engagement and personal information of ERP Platform Users for access control and system administration. This may include name, mobile number, email address, date of birth, gender, residential address, profile photograph, emergency contact details, bank account details for payouts, login credentials, and government-issued identifiers (such as Aadhaar, PAN, or Driving License) where legally required.

We use this information to onboard and verify Delivery Partners, manage engagement records, administer ERP Platform access, process payouts and incentives, comply with legal obligations, and provide operational support.

3.2 Location Information

Where enabled for the Services, we may collect location information of Delivery Partners at login, logout, or during active delivery sessions. Location data is intended to be collected only during active work periods and not for continuous background tracking.

Location information is used for attendance verification, route and delivery validation, operational audits, and service quality assurance.

Disabling mandatory location permissions during active delivery sessions may result in inability to perform assigned deliveries and may affect attendance or payout eligibility.

3.3 Attendance, POD & Operational Delivery Data

We collect and process attendance and operational delivery data such as login and logout timestamps, attendance logs, proof of delivery (POD) timestamps, delivery completion events, and related activity metadata. Such data may be captured directly through the Services or retrieved via integrations with operational systems.

For example, the Services may integrate with route management, delivery management, or internal operational systems (such as Mojro, SF Admin, or similar platforms) to obtain POD timings or delivery activity used for attendance validation, payout and incentive computation, and operational accuracy.

Operational data, including POD timestamps and system logs shall constitute official business records of SIDS Farm and may be relied upon for attendance determination, payout computation, disciplinary action, audit, legal defense and dispute resolution.

3.4 Biometric and Facial Recognition Data

If SIDS Farm enables biometric or facial recognition mechanisms, such data may be processed solely for attendance verification and identity validation. Biometric or facial data is not used for surveillance or any purpose unrelated to attendance, payouts, or operational integrity.

3.5 Device and Usage Information

When Delivery Partners or ERP Platform Users access the Services, we may automatically collect device and usage information such as device type, operating system version, IP address, application usage logs, access logs, and diagnostic information. This information is used to maintain platform security, prevent misuse, investigate incidents, and improve performance and reliability.

We may deploy monitoring systems to detect fraud, misuse, abnormal login activity or unauthorized data extraction attempts.

5. Sharing of Information

We do not sell personal information. We may share personal information with service providers who support the Services (including cloud hosting, messaging, analytics, and operational systems), auditors or professional advisors under confidentiality obligations, and government or statutory authorities where required by law or to protect legal rights and safety. All third parties are required to process personal data only for authorized purposes and in accordance with applicable laws.

6. Third-Party Services

The Services may integrate with or link to Third-Party Services. This Privacy Policy does not apply to such Third-Party Services, and users are encouraged to review the privacy policies of those services where applicable. SIDS Farm shall not be liable for data processing practices of Third Party services not directly controlled by it.

7. Data Retention

Personal data is retained for as long as necessary to provide the Services, meet operational needs, comply with legal obligations, resolve disputes, and enforce agreements. Certain records, including attendance and payout records, may be retained for longer periods where required by law. Backup copies may be retained for limited durations for business continuity, subject to appropriate safeguards.

8. Data Storage and Transfers

Personal data is stored on secure infrastructure used by SIDS Farm and its contracted service providers. Where data is processed or stored outside your jurisdiction, reasonable safeguards are implemented in accordance with applicable data protection laws. Cross Border data transfers, if any, shall comply with restrictions under the DPDP Act.

9. Security Measures and Misuse

We implement reasonable technical and organizational measures to protect personal data, including access controls, monitoring, encryption where feasible, and confidentiality obligations for personnel.

Unauthorized access, misuse, disclosure, or leakage of personal data by ERP Platform Users or any other authorized users is strictly prohibited. SIDS Farm reserves the right to immediately suspend access, initiate disciplinary action, terminate access, and pursue civil or criminal legal action, including claims for damages, against any individual or entity responsible for a data breach, data leakage, or violation of this Privacy Policy.

10. Rights of Delivery Partners and ERP Platform Users

Subject to applicable law, Delivery Partners and ERP Platform Users may have rights to request access to their personal data, request correction of inaccurate or incomplete information, withdraw consent where applicable, and raise grievances regarding the processing of personal data.

11. Grievance Redressal

If you have questions or concerns regarding this Privacy Policy or our data practices, you may contact:

Grievance Officer

SIDS Farm Private Limited

Email: finance@sidsfarm.com

Address: PLOT NO. 108, LIG, DHARMA REDDY COLONY, PHASE-1, KUKATPALLY, KPHB COLONY, HYDERABAD - 500085, TELANGANA, INDIA

We will make reasonable efforts to respond within timelines prescribed under applicable law.

12. Changes to This Privacy Policy

SIDS Farm may modify this Privacy Policy from time to time. The current version of this Privacy Policy will be made available through the Delivery Partner application or other official communication channels. Continued use of the Services constitutes acceptance of the applicable Privacy Policy.