1. Collection of personal data

We collect personal data when you register, transact, contact support, subscribe, or otherwise interact with the Platform. Data collected may include (but is not limited to):

  • Identification details: name, date of birth, gender;
  • Contact details: postal address, email address, telephone/mobile number;
  • Payment & financial data: bank account details, card data, UPI identifiers or other payment instrument details (collected with consent as required);
  • Identity documents & verification data: PAN, Aadhaar, passport, driver's licence, photos or scans of identity / address proofs (when required for services);
  • Sensitive personal data: where required and only with explicit consent — e.g., limited biometric data (face) for optional verification features, financial data for loan/payment processing;
  • Usage & device data: IP address, device identifiers, browser, cookies, location (if allowed), usage patterns and analytics;
  • Transaction records: order details, transaction history, communications with sellers or service providers.

You may opt not to provide certain personal data, but withholding required information may prevent us from providing particular services.

2. Use of personal data

We use personal data for the following purposes:

  • To provide, operate and maintain the Platform and Services;
  • To process and fulfil orders, payments, refunds and shipping;
  • To verify identity and comply with statutory, regulatory or KYC requirements;
  • To communicate with you about your orders, updates, offers and support;
  • To personalize and improve your experience, content and recommendations;
  • To detect, prevent and respond to fraud, abuse, security incidents and other illegal activities;
  • To enforce our Terms of Use, resolve disputes, and as necessary for legal compliance.

If you do not consent to certain uses (e.g., marketing), you may opt out where applicable.

3. Sharing and disclosure

We may share personal data in the following ways:

  • Within group: with our affiliates and group companies to provide services;
  • Service providers: third-party processors (payment gateways, logistics partners, analytics providers, cloud hosting providers, CRM and support platforms);
  • Sellers and partners: when required to fulfil orders or provide services you request;
  • Legal & safety: with government, regulatory or law enforcement agencies where required by law or to protect rights, safety or property;
  • Business transfers: in connection with mergers, acquisitions, reorganizations or asset sales (with notice to users where required).

When we share data with third parties, we use contracts and safeguards to ensure they process data only for permitted purposes and in compliance with applicable laws.

4. Security precautions

We follow reasonable security practices and procedures to protect personal data from unauthorized access, disclosure, misuse or loss. These include administrative, technical and physical safeguards such as encryption, access controls, and secure servers. However, transmission of data over the internet is not completely secure — users acknowledge inherent risks of data transmission.

5. Data retention & deletion

We retain personal data only as long as necessary to fulfil the purposes described or to comply with legal obligations. When retention is no longer necessary, we will delete or anonymize personal data. You may request deletion of your account via your profile/settings or by contacting our Grievance Officer — note that deletion may be delayed or refused where required for pending transactions, legal obligations, fraud prevention or legitimate business purposes.

6. Your rights

Subject to applicable law, you may have the right to access, correct, update, port, restrict or erase your personal data. You may also object to processing or withdraw consent where processing is based on consent. To exercise these rights, use the Platform functions or contact our Grievance Officer (details below). We may verify requests to protect privacy and security.

7. Cookies & tracking

We use cookies, web beacons and similar technologies for analytics, personalization and advertising. Cookies may be essential for Platform functionality. You may manage or block cookies via your browser settings but blocking cookies may affect the Platform experience.

8. Third-party platforms

If you access or transact on third-party partner platforms (seller websites, payment partners), their privacy policies may apply. We are not responsible for third-party privacy practices — please review their policies before sharing personal data with them.

9. International transfers

Personal data is primarily processed in India. If data is transferred or stored outside India (for example, to cloud providers), we will ensure appropriate safeguards and legal mechanisms are in place to protect your data in accordance with applicable law.

11. Changes to this Policy

We may update this Privacy Policy from time to time. We will post the updated policy on the Platform with a revised Effective Date. Where required by law, we may notify you of material changes by e-mail or Platform notice.

12. Grievance Officer & contact

Grievance Officer
Name: [Insert Officer Name]
Designation: [Insert Designation]
Company: Gupta Tech Hub – Nayasetu
Address: 21, Rampura Chamunda Mata, Dhanmandi, Manasa, Madhya Pradesh, India
Email: info@nayasetu.in
Phone: +91 92431 66429
Office hours: Monday – Friday, 09:00 – 18:00 IST

13. Governing law

This Privacy Policy is governed by the laws of India. Any dispute arising out of or in connection with this Policy shall be subject to the exclusive jurisdiction of the courts at Rampura, Madhya Pradesh.