PRIVACY POLICY

- The Platform may collect and process the following categories of personal and business-related information but is not limited to: (a) Business and Account Information: Business name, legal constitution, registration details, PAN, GSTIN, CIN, business address, authorised signatory details, and other on boarding or KYC information. (b) Identity and Contact Information: Name, designation, email address, phone number, and address of users or authorised representatives. (c) Transaction and Usage Data: RFQs, quotations, orders, communications, transaction records, payment details (excluding full card details), and platform usage logs. (d) Technical and Device Information: IP address, browser type, device identifiers, operating system, cookies, log files, and similar technologies. (e) Regulatory and Compliance Information: - Documents and data required for KYC, AML, tax compliance, or regulatory purposes. - The Platform does not intentionally collect personal data of minors and is intended solely for business users competent to contract. -Data is processed solely for legitimate business purposes including user verification, RFQ processing, order execution, invoicing, tax compliance, dispute resolution, and regulatory reporting. - Processing is carried out based on consent, contractual necessity, legal obligation, or legitimate business interest as recognized under applicable Indian law. Automated and Manual Processing: - Data may be processed through automated systems and manual review mechanisms, with appropriate safeguards to prevent unauthorized access or misuse. - Service provider data may be shared with payment gateways, cloud service providers, logistics partners, IT vendors, and auditors strictly on a need-to-know basis. - Data may be disclosed to government authorities, tax departments, courts, or regulators when required by law or lawful order. Cross-border data transfers, if any, shall be conducted in compliance with applicable data protection laws and safeguards recognized under Indian law. - Data shall be retained only for as long as necessary to fulfil contractual, legal, taxation, or audit requirements, and thereafter securely deleted or anonymized. - The Platform implements reasonable technical and organizational safeguards including encryption, access control, monitoring, and incident response mechanisms. - In the event of a data breach, the Platform shall follow statutory notification and mitigation obligations under applicable law. Users may request access to, correction, or updating their personal data held by the Platform. Users may withdraw consent where processing is based on consent, subject to legal and contractual limitations. Users may request deletion of data where retention is no longer legally required. Where applicable, the Platform aligns its practices with globally recognized standards such as GDPR and CCPA to the extent they apply to B2B data subjects