Privacy Policy

1. Introduction

Welcome to NearbyBazaar ("we," "our," or "us"). We are committed to protecting your privacy and personal data in accordance with the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection Act, 2023 (DPDP Act).

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our e-commerce marketplace platform at www.nearbybazaar.com and related mobile applications.

By using NearbyBazaar, you consent to the data practices described in this policy. If you do not agree with this policy, please do not use our services.

2. Information We Collect

2.1 Personal Information

We collect the following personal information when you register, make purchases, or interact with our platform:

• Identity Information: Name, date of birth, gender
• Contact Information: Email address, phone number, delivery address
• Financial Information: Payment card details, UPI ID, bank account information (processed securely through payment gateways)
• Account Credentials: Username, password (encrypted)
• Business Information: GST number, business name, PAN (for vendors)

2.2 Automatically Collected Information

• Device Information: IP address, browser type, device type, operating system
• Usage Data: Pages visited, time spent, search queries, products viewed
• Location Data: GPS coordinates (with your consent) for nearby services and delivery
• Cookies and Tracking: Session cookies, analytics cookies, advertising cookies

2.3 Information from Third Parties

• Social media login data (Google, Facebook) if you choose to sign in via these platforms
• Payment gateway transaction confirmations
• Shipping partner delivery status updates

3. How We Use Your Information

We use your personal information for the following purposes:

• Order Processing: To process and fulfill your orders, arrange delivery, and provide customer support
• Account Management: To create and manage your account, authenticate users, and prevent fraud
• Payment Processing: To process payments securely through authorized payment gateways
• Communication: To send order confirmations, shipping updates, promotional offers, and important notices
• Personalization: To recommend products, customize your shopping experience, and show relevant advertisements
• Analytics: To analyze user behavior, improve our platform, and develop new features
• Legal Compliance: To comply with Indian laws, regulations, and legal processes
• Security: To detect and prevent fraud, unauthorized access, and other illegal activities
• Vendor Services: To facilitate vendor registration, product listings, and order management

4. Legal Basis for Processing (DPDP Act 2023)

Under the Digital Personal Data Protection Act, 2023, we process your data based on:

• Consent: You have explicitly consented to the processing of your personal data
• Contractual Necessity: Processing is necessary to fulfill our contract with you (e.g., order delivery)
• Legal Obligation: We are required by law to process certain data (e.g., GST compliance, tax records)
• Legitimate Interest: Processing is necessary for our legitimate business interests (e.g., fraud prevention, analytics)

5. Data Sharing and Disclosure

We may share your information with:

• Vendors: Your name, delivery address, and contact details are shared with vendors to fulfill orders
• Payment Processors: Razorpay, Paytm, and other authorized payment gateways for secure transactions
• Logistics Partners: Delhivery, Blue Dart, and other shipping companies for order delivery
• Service Providers: Cloud hosting (AWS, Google Cloud), analytics (Google Analytics), email services
• Legal Authorities: When required by law, court order, or government request
• Business Transfers: In case of merger, acquisition, or sale of assets (with prior notice)

We do NOT sell your personal data to third parties for marketing purposes.

6. Data Security

We implement industry-standard security measures to protect your data:

• Encryption: SSL/TLS encryption for data transmission, AES-256 encryption for stored passwords
• Access Controls: Role-based access control (RBAC) to limit employee access to personal data
• Secure Servers: Data stored on secure cloud servers with regular backups
• Payment Security: PCI-DSS compliant payment processing
• Regular Audits: Periodic security audits and vulnerability assessments
• Incident Response: Data breach notification within 72 hours as per DPDP Act requirements

7. Your Rights Under DPDP Act 2023

You have the following rights regarding your personal data:

• Right to Access: Request a copy of your personal data we hold
• Right to Correction: Update or correct inaccurate personal information
• Right to Erasure: Request deletion of your personal data (subject to legal retention requirements)
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Withdraw Consent: Withdraw consent for data processing at any time
• Right to Grievance Redressal: File complaints with our Data Protection Officer or the Data Protection Board of India

To exercise these rights, contact us at: privacy@nearbybazaar.com

8. Data Retention

We retain your personal data for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required by law:

• Account Data: Retained until account deletion + 90 days
• Order History: Retained for 7 years (as per GST and tax laws)
• Payment Records: Retained for 10 years (as per RBI guidelines)
• Marketing Data: Retained until consent is withdrawn
• Analytics Data: Anonymized after 24 months

9. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience:

• Essential Cookies: Required for login, cart functionality, and security
• Analytics Cookies: Google Analytics to understand user behavior
• Advertising Cookies: Google Ads, Facebook Pixel for targeted advertising
• Preference Cookies: Remember your language, location, and settings

You can manage cookie preferences in your browser settings. Disabling cookies may affect platform functionality.

10. Children's Privacy

NearbyBazaar is not intended for children under 18 years of age. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal data, please contact us at privacy@nearbybazaar.com to request deletion.

11. International Data Transfers

Your data is primarily stored on servers located in India. If we transfer data outside India (e.g., to cloud service providers), we ensure adequate safeguards are in place as required by the DPDP Act 2023, including:

• Standard Contractual Clauses (SCCs)
• Data Processing Agreements with third-party vendors
• Compliance with approved countries list by the Data Protection Board of India

12. Grievance Redressal Officer

In accordance with the Information Technology Act, 2000 and DPDP Act 2023, we have appointed a Grievance Redressal Officer to address your privacy concerns:

13. Third-Party Links and Services

Our platform may contain links to third-party websites, payment gateways, and social media platforms. We are not responsible for the privacy practices of these external sites. We encourage you to read their privacy policies before providing any personal information.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or business operations. We will notify you of significant changes via:

• Email notification to your registered email address
• Prominent notice on our website homepage
• In-app notification (for mobile app users)

Your continued use of NearbyBazaar after such changes constitutes acceptance of the updated policy.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

16. Compliance with Indian Laws

This Privacy Policy is compliant with:

• Information Technology Act, 2000
• Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011
• Digital Personal Data Protection Act, 2023 (DPDP Act)
• Consumer Protection Act, 2019
• Goods and Services Tax (GST) Act, 2017
• Payment and Settlement Systems Act, 2007

17. Consent

By using NearbyBazaar, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. You consent to the collection, use, storage, and disclosure of your personal information as described herein.

If you do not agree with any part of this Privacy Policy, please discontinue use of our services immediately.