Privacy Policy

Account data: name, email address, phone number, password (stored as a one-way hash), company name and GSTIN where you provide them for business accounts.

Order and delivery data: shipping/billing addresses, order history, invoices and payment references processed via our payment provider.

Usage data: device/browser information, IP address, cookies or similar technologies needed for security, session management and improving the storefront.

Communications: messages you send to support, quote requests and consent records (privacy, terms and privacy declaration).

Enquiry location (optional): when you submit a business quote request and give separate consent, we may collect approximate device GPS coordinates (latitude/longitude and accuracy), city, state, country and postal code you provide or that we derive from coordinates, plus a hashed client IP for abuse prevention. Location is never required to submit an enquiry.

Visit location (optional): when you first browse the storefront we may show a location prompt. Only if you choose Allow do we ask your browser for GPS and may store approximate coordinates and derived city/state, with a hashed client IP. Choosing Not now lets you browse fully; we do not record a decline on our servers.

We process personal data to create and manage your account, fulfil orders, issue GST invoices, provide customer support, prevent fraud, improve our services, and meet legal obligations.

Registration requires your free, specific, informed and unambiguous consent to this Privacy Policy, our Terms & Conditions, and the Privacy Declaration. Optional marketing consent is collected separately and can be withdrawn at any time.

Visit and enquiry location are processed only with your free, specific, informed and unambiguous consent, to understand demand by locality, assess serviceability, and route sales follow-up. You may decline location and still use the site or submit a quote. You may withdraw location consent by emailing us; we will stop using location for that purpose going forward, subject to legal retention.

Site visit purpose: understand visitor demand by city/state, plan serviceability, and improve the storefront. Enquiry purpose: identify the locality of a quote so we can assess delivery/serviceability and route sales follow-up.

Consent: a storefront prompt asks before any browser GPS request; quote forms also have a separate location checkbox. Declining does not block browsing or enquiries. Browser permission dialogs remain under your control.

Retention: visit location records are kept for demand/serviceability analysis; enquiry location is kept with the quote. Both are deleted or anonymised when no longer required for that purpose or for legal compliance.

Sharing: location is available only to authorised DigiBazaarOnline staff. We do not sell location data or use it for unrelated profiling.

Rights: email support@digibazaaronline.com with subject “DPDP location / data request” to access, correct, erase (where legally permitted) or withdraw consent for location processing.

Personal data fields (including name, phone, addresses, company and GSTIN) are stored in encrypted form at rest using application-level encryption. Passwords are hashed with a modern password hashing algorithm and are never stored in plaintext.

Access to decrypted personal data is limited to authorised systems and personnel who need it to operate the storefront, fulfil orders, or comply with law. Transmission uses HTTPS where configured in production.

We may share data with payment processors, logistics partners, cloud/hosting providers and professional advisers strictly as needed to deliver the service, under appropriate contractual safeguards. We do not sell personal data.

We retain account and order data for as long as your account is active and thereafter as required for tax, accounting, dispute resolution and legal compliance, after which data is deleted or anonymised where feasible.

Subject to applicable law, you may request access to your personal data, correction of inaccurate data, erasure (where retention is not legally required), withdrawal of consent for processing based on consent, and grievance redressal.

To exercise rights, email support@digibazaaronline.com with the subject “DPDP data request”. We will respond within the timelines required by law.

Our services are intended for adults capable of contracting under Indian law. We do not knowingly create accounts for children without verifiable parental consent where required.

We may update this Policy from time to time. The “Last updated” date will change, and material updates may require renewed consent where the DPDP Act so requires.