N
CartSign in
These documents describe how this platform currently operates. They are provided for transparency and are not a substitute for review by a qualified Indian lawyer or compliance professional before this site is used to transact with real customers.

Privacy Policy

Last updated: 2026-08-21

This Privacy Policy explains what personal data ASMY GLOBAL TRADING & CONSULTANCY INDIA PRIVATE LIMITED ("the Platform", "we", "us") collects when you use this website, why we collect it, how it is used and stored, who it is shared with, and the rights you have over it. It is written to align with the Digital Personal Data Protection Act, 2023 (DPDPA) and the Information Technology Act, 2000 and its rules.

1. What we collect

  • Account data — name, email address, and profile photo, provided by Google when you sign in with Google OAuth. We do not receive or store your Google password.
  • Contact and delivery data — phone number, delivery address, and (for shop owners) shop name, address, and business contact details.
  • Transaction data — orders placed, subscription schedules, wallet top-ups and balances, vouchers applied, and refund history.
  • Payment data — payments are processed by Cashfree, our payment gateway partner. We do not receive or store your card, UPI PIN, or net-banking credentials; we retain only the payment reference/transaction ID Cashfree returns to confirm a payment.
  • Location data — this platform does not currently request or collect device GPS/location data. If a "find shops near me" feature using device location is introduced in future, it will only run after you explicitly grant permission through an on-screen consent prompt, and this policy will be updated first.
  • Usage and device data — pages visited, actions taken (e.g. cart activity), IP address, and browser/device information, collected via server logs and essential session cookies. See our Cookie Policy for details.

2. Why we collect it

  • To create and secure your account and authenticate sign-in.
  • To process orders, deliveries, subscriptions, and payments.
  • To operate the wallet and voucher features you choose to use.
  • To respond to support requests and grievances.
  • To detect fraud, abuse, and rate-limit misuse of the platform.
  • To comply with tax, accounting, and legal record-keeping obligations.

3. How data is stored and secured

Data is stored in an access-controlled PostgreSQL database. Money values and financial mutations are processed with row-level locking and audit logging so that every payment, wallet, and refund change is traceable to an actor and timestamp. Access to administrative and financial data is restricted by role (see our role-based access control) — only authorised operators/admins can view records beyond your own.

4. Who your data is shared with

  • Cashfree (payment gateway) — to process payments and refunds. Cashfree acts as an independent data controller for the payment details you provide directly to it.
  • Google — for authentication, if you sign in with Google.
  • The shop you order from — receives only what is necessary to fulfil your order: your name, delivery address, phone number, and order contents. Shop owners never receive your precise device location or payment credentials.
  • We do not sell personal data to third parties, and we do not share it for third-party advertising.

5. Data retention

Account and order data is retained for as long as your account is active and thereafter as required for tax, accounting, dispute, and legal record-keeping purposes. Grievance records are retained to demonstrate compliance with grievance-redressal timelines. You may request erasure of data that is not otherwise required to be retained by law (see "Your rights" below).

6. Your rights

Under the DPDPA and applicable law, you have the right to:

  • Access the personal data we hold about you.
  • Request correction or updating of inaccurate data.
  • Request erasure of your data, subject to our legal obligation to retain certain records (e.g. transaction and tax records).
  • Withdraw consent for optional processing at any time.
  • Raise a grievance about how your data is handled (see below).

7. Consent

By creating an account you agree to this Privacy Policy and our Terms & Conditions. We record when and against which version of this policy your consent was given, so it can be demonstrated if required. You may withdraw consent for non-essential communications at any time from your profile settings.

8. Grievance / privacy contact

For any question or complaint about how your personal data is handled, contact our Grievance Officer — see the Grievance Redressal page — or write to support@bkesari.com.