What they may do · DPDP §6(4)
What Flipkart does with your data
Flipkart builds a picture of your tastes from what you browse and buy, and lets its group companies and advertising partners use it — including ad networks that also watch your visits to other websites.
-
Shares your data with partners
Passed to group companies, advertisers or analytics firms you never chose.
What this costs you. Your number and habits travel to companies you have never heard of and never agreed to. This is the step where the spam calls start.
Show me where they say that
Flipkart’s own policy says “We may share personal data with Flipkart group companies including Flipkart Advanz Private Limited, Scapic Innovations Private Limited”
Our summary shares personal data with named Flipkart group companies.
-
Builds an advertising profile of you
They watch what you view, tap and buy, and use it to decide which ads you see.
What this costs you. Your attention gets priced. What you hesitate over becomes a bid — and a profile built to predict you is a profile built to persuade you.
Show me where they say that
Flipkart’s own policy says “These group companies, affiliates, related companies, business partners and third-parties may use such insights for promotions, advertisements and marketing”
Our summary group companies, affiliates, business partners and third parties may use profile insights for promotions, advertisements and marketing.
-
Follows you onto other websites and apps
Their tracking carries on after you leave, through pixels and SDKs embedded elsewhere.
What this costs you. You get recognised on sites that have nothing to do with them. Closing the app does not close the file.
Show me where they say that
Flipkart’s own policy says “These companies may use information (not including your name, address, email address, or telephone number) about your visits to this and other websites in order to provide personalized advertisements about goods and services of interest to you.”
Our summary advertising companies may use information about your visits to this and other websites to serve personalised ads.
What the policy does not mention
These are uses Flipkart’s policy is silent on. Silence is not a promise — it means the document does not say, and we do not infer either way.
- Keeps your records long-term
- Processes your face or other biometrics
- Trains AI models on your content
Who to write to at Flipkart
Flipkart names its Grievance Officer on the privacy policy itself, with a full postal address. Two warnings, because both cost people a reply: the address you want is privacy.grievance@, not the similar-looking grievance.officer@, which is the general marketplace contact and not the privacy one. And several third-party directories still list a different officer name; the live policy says Karthik R.
- Grievance Officer
- Mr Karthik R Associate Director, Flipkart Internet Pvt. Ltd.
- Post
- Flipkart Internet Pvt. Ltd., Embassy Tech Village, 8th Floor, Block ‘B’, Devarabeesanahalli Village, Varthur Hobli, Bengaluru East Taluk, Bengaluru District, Karnataka, India – 560103
- Do not use
- grievance.officer@flipkart.com General marketplace grievances, not privacy. Flipkart Health+ is a separate entity again with its own officer.
- Phone / DPO
- Neither is published
Show me where they publish that
Flipkart’s privacy policy says“In accordance with Information Technology Act 2000 and rules made there under, the name and contact details of the Grievance Officer are provided below: Mr Karthik R, Associate Director, Flipkart Internet Pvt. Ltd., Embassy tech village, 8th floor Block ‘B’ Devarabeesanahalli Village, Varthur Hobli, Bengaluru East Taluk, Bengaluru District, Karnataka, India, 560103. Email: privacy.grievance@flipkart.com”
Source flipkart.com/pages/privacypolicy, read on 12 August 2026.
What you can withdraw, and what will outlive the request
Flipkart’s retention clause is the part worth reading twice: it is open-ended, and it names no end date.
You can stop this now
- Marketing and promotional contact — unsubscribe links and in-app notification settings.
- Promotional calls and SMS from registered senders, through 1909 / DND under TRAI’s TCCCPR. This is the one revocation channel that is actually enforceable today.
This will survive it
- Order, invoice and payment records, kept for contractual and tax reasons.
- Anything held under the policy’s own fraud-prevention and legal-claims clause. That clause is open-ended and states no retention period.
Not flagged above, but worth knowing. The policy says that if you use voice commands or the virtual try-and-buy features, or take part in surveys involving voice or video recording, that content is collected. It does not describe face recognition or biometric processing, so we do not score it as biometrics — but you should know it is collected.
The legal position, stated straight. The DPDP Act’s consent-withdrawal right in section 6(4) is not in force today — sections 3 to 17 are on a staged commencement running to 14 May 2027. A request sent now asks for voluntary compliance and puts the date on record, which is what any later escalation rests on. There is no 90-day statutory erasure deadline, and the ₹250 crore figure is the penalty for failing to secure data against a breach — not for ignoring your request.
Flipkart is one app. How many are on your phone?
Most people carry twenty to forty. Add yours and see the total in one screen — how many share your data, profile you for ads, or follow you across the web. Then take it back from all of them at once.
Manage my data with Saaph.in →Free to check · no account needed · built in India for the DPDP Act
Questions
What does Flipkart do with my personal data?
According to Flipkart's own privacy policy, read on 2026-08-12, it discloses 3 of the six uses we track: shares your data with partners, builds an advertising profile of you, follows you onto other websites and apps.
Can I withdraw my consent from Flipkart?
Section 6(4) of India's Digital Personal Data Protection Act 2023 gives you the right to withdraw consent for processing you agreed to. The Act's substantive provisions commence in stages up to May 2027, so a request made now asks for voluntary compliance and puts the date on record. Processing a company carries out under a legal obligation — such as KYC records the RBI requires — cannot be withdrawn.
Does Flipkart track me for advertising?
Yes — Flipkart's published policy discloses this. The exact sentence it is based on is quoted on this page, with the date we read it and a link to the source.
Who is Flipkart's grievance officer?
Mr Karthik R, Associate Director, at privacy.grievance@flipkart.com, named on Flipkart's own privacy policy along with a full postal address in Bengaluru. Do not use the similar-looking grievance.officer@flipkart.com, which is the general marketplace contact and not the privacy one.
Every use above is one Flipkart declared in its own published privacy policy, which we
read on 2026-08-12. Quotes are verbatim; the summary beside each one is ours
and is labelled as ours. Nothing here is inferred.
Saaph.in is a DPDP consent and request management platform operated by Ronin Works
Private Limited. It is a communication facilitator, not your legal or authorised
representative. The DPDP Act 2023 commences in stages up to May 2027, so a request
made today asks for voluntary compliance and records the date you asked.
Our privacy policy