Privacy Policy

1. Who This Policy Applies To

This Policy applies to:

• Buyers/Users browsing or purchasing goods and booking services on the Platform;
• Sellers/Vendors who list products (electronics, grocery, medicine, apparel, home décor, car parts, etc.) via the Seller Dashboard;
• Service Professionals (e.g., salon, grooming, and other on-demand service providers) who register to offer services;
• Job Seekers / Employers using the "Looking for Job" and "Manpower Required" sections; and
• Job Applicants applying for employment with the Company itself (see also our Careers Page).

2. Information We Collect

2.1 Information You Provide Directly

• Identity/contact details: name, email address, mobile number, date of birth, gender, delivery address.
• Account credentials: username, password (stored in encrypted/hashed form).
• Payment-related information: billing address, and, where applicable, payment instrument details collected and processed directly by our RBI-regulated payment gateway partners (we do not store full card numbers or CVV on our servers).
• Seller/business information: business name, GSTIN, PAN, bank account/UPI details for settlements, business address, product catalogues.
• Service-professional information: identity proof, address proof, skill/trade certifications, photographs, appointment schedules.
• Job listing/registration information: resume/CV, work history, educational qualifications, skill sets, expected salary, and, for employers, company and vacancy details.
• Communications: information you provide when contacting customer support, submitting reviews/ratings, or raising a grievance.
• Sensitive Personal Data or Information (SPDI) under the SPDI Rules, where applicable: passwords, financial information (bank/UPI/card details), and, in respect of orders placed in the Medicine category, health-related information such as prescriptions, medical history mentioned in a prescription, or physical condition. We collect such health-related information only to the extent necessary to process a medicine order and verify it against applicable prescription requirements.

2.2 Information Collected Automatically

• Device information: IP address, browser type, operating system, device identifiers.
• Usage data: pages viewed, search queries, click-stream data, time and duration of visit.
• Location data: approximate location (via IP) or precise location (if you grant permission), used to show nearby sellers/service providers and estimate delivery.
• Cookies and similar tracking technologies (see Section 7).

2.3 Information From Third Parties

• Information from payment gateways confirming transaction status (not full payment credentials).
• Information from delivery/logistics partners regarding order fulfilment status.
• Information from social login providers (if you choose to sign in via a third-party account), limited to the data you authorise them to share.

3. How We Use Your Information

We use personal information to:

1. Create and manage your account;
2. Process orders, bookings, payments, refunds, and cancellations;
3. Connect Buyers with Sellers and Users with Service Professionals;
4. Facilitate the job-posting and job-seeker matching features;
5. Verify Seller/Service Professional credentials and, for the Medicine category, verify prescription compliance;
6. Communicate order updates, service reminders, and appointment confirmations;
7. Respond to customer support queries and grievances;
8. Detect, prevent, and investigate fraud, abuse, or violations of our Terms and Conditions;
9. Improve the Platform, perform analytics, and personalise recommendations;
10. Send promotional communications, where you have opted in (with an opt-out available at any time); and
11. Comply with applicable law, regulatory requirements, and lawful requests from government or law enforcement authorities.

4. Legal Basis for Processing

We process personal data on the basis of:

• Your consent, obtained at the point of collection (e.g., account creation, order placement, permission-based location access);
• Performance of a contract, where processing is necessary to fulfil an order, booking, or service you have requested;
• Legitimate uses recognised under the DPDP Act (e.g., fraud prevention, safety, and security of the Platform); and
• Compliance with a legal obligation, including retention of transaction records under tax, consumer protection, and drug-control laws.

You may withdraw consent at any time (see Section 9), subject to the effect withdrawal may have on your ability to use certain features (e.g., we cannot process a medicine order without prescription-related information).

5. How We Share Your Information

We may share your information with:

• Sellers and Service Professionals, to the extent necessary to fulfil your order or booking (e.g., name, delivery address, contact number, appointment details);
• Payment gateway and banking partners, to process payments and refunds;
• Logistics and delivery partners, to fulfil deliveries;
• Cloud hosting and IT service providers, under contractual confidentiality obligations;
• Professional advisors (auditors, legal counsel) where necessary;
• Government authorities, regulators, or law enforcement, where required by law, court order, or to protect the rights, property, or safety of the Company, our users, or the public; and
• A successor entity, in the event of a merger, acquisition, or sale of business assets, subject to equivalent privacy protections.

We do not sell your personal information to third parties for their independent marketing purposes.

Sellers and Service Professionals are independent data controllers/fiduciaries in respect of information you share directly with them beyond what is necessary for order fulfilment (e.g., if you communicate with a salon professional directly), and this Policy does not govern their independent use of your data. Please review their individual policies where available.

6. Cross-Border Data Transfer

Our servers and service providers may be located within or outside India. Where personal data is transferred outside India, we take reasonable steps to ensure it is protected in a manner consistent with this Policy and applicable law. As and when the Central Government notifies restricted jurisdictions under the DPDP Act, we will comply with such restrictions.

7. Cookies and Tracking Technologies

We use cookies, local storage, and similar technologies to operate the Platform, remember your preferences (e.g., cart, wishlist), authenticate sessions, and analyse usage. You can control cookies through your browser settings; disabling cookies may affect Platform functionality.

8. Data Retention

We retain personal information for as long as necessary to fulfil the purposes described in this Policy, including to comply with legal, accounting, tax, and regulatory retention requirements (for example, records relating to Schedule H/H1 medicine sales, GST records, and consumer-dispute records, which may require retention beyond account closure). Upon expiry of the applicable retention period, we securely delete or anonymise the data.

9. Your Rights

Subject to applicable law and its phased applicability, you have the right to:

• Access the personal information we hold about you;
• Correct or update inaccurate or incomplete information;
• Withdraw consent for processing (where consent is the basis for processing);
• Request erasure of your personal information, subject to our legal retention obligations;
• Nominate another individual to exercise your rights in the event of death or incapacity (once operative under the DPDP Act); and
• Grievance redressal, as set out in Section 12 below.

To exercise these rights, write to us at [privacy@myneedify.com]. We will respond within the timelines prescribed by applicable law.

10. Children's Information

The Platform is not intended for individuals under 18 years of age, and we do not knowingly collect personal information from minors, except where a parent/guardian creates an order on a minor's behalf. Job listings and service-professional registration are open only to individuals of legal working age under Indian law. If we become aware that we have inadvertently collected a minor's data without appropriate consent, we will delete it promptly.

11. Data Security

We implement reasonable security practices and procedures, including encryption of sensitive data in transit (TLS/SSL), access controls, and secure storage, in line with the SPDI Rules and internationally recognised standards (e.g., ISO/IEC 27001-aligned practices) as applicable to our scale of operations. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

12. Grievance Officer

In accordance with the Information Technology Act, 2000, the IT (Intermediary Guidelines) Rules, 2021, and the Consumer Protection (E-Commerce) Rules, 2020, the details of our Grievance Officer are:

Name: [Grievance Officer Name] Designation: Grievance Officer, My Needify Address: [Registered Office Address, Delhi] Email: [grievance@myneedify.com] Contact Number: [+91-XXXXXXXXXX] Working Hours: Monday–Friday, 9:00 AM – 6:00 PM IST

We will acknowledge complaints within 48 hours and endeavour to resolve them within one month from the date of receipt, as required under the E-Commerce Rules.

13. Changes to This Policy

We may update this Policy from time to time to reflect changes in law or our practices. The updated version will be posted on this page with a revised "Last Updated" date. Material changes will, where required, be notified to you via email or a Platform notice.

14. Contact Us

For any questions about this Privacy Policy, please contact: [Legal Entity Name], [Registered Address, Delhi, India] Email: [privacy@myneedify.com]