RecommerceX Pvt. Ltd. Privacy Policy

1. Introduction

RecommerceX Pvt. Ltd. (“we”, “us”, “our”) is committed to protecting your personal data. This Privacy Policy outlines how we collect, process, store, share, and protect your information in compliance with:

– Information Technology Act, 2000

– Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (“SPDI Rules”)

– Digital Personal Data Protection Act, 2025 (“DPDP Act”)

By accessing our website or services, you consent to the practices described in this policy.

2. Information We Collect

We may collect the following categories of personal data:

**a. Personal Data**

– Full name

– Email address

– Phone number

– Billing and shipping address

– User account details

**b. Sensitive Personal Data (as per SPDI Rules)**

– Financial information (bank details, UPI ID, card details)

– Passwords or authentication information

**c. Device & Usage Data**

– IP address

– Browser type

– Device identifiers

– Cookies and tracking data

**d. Transactional Data**

– Order details

– Payment status

– Product purchase history

3. Purpose of Processing

Your personal data is processed for the following purposes:

– User registration and account creation

– Order processing, fulfillment, and delivery

– Customer support and grievance handling

– Fraud detection and prevention

– Marketing communication (with consent)

– Website analytics and improvements

– Compliance with legal obligations

4. Legal Basis for Processing (DPDP Act 2025)

We process your data under the following lawful bases:

– Your consent

– Performance of a contract

– Compliance with applicable law

– Legitimate business interests, ensuring no harm to your rights

5. Consent Withdrawal

You may withdraw your consent at any time by emailing: tech@recommercex.com

Withdrawal does not affect processing done prior to withdrawal.

6. Data Sharing & Disclosure

Your information may be shared with:

– Logistics partners

– Payment service providers

– Third-party service providers (hosting, analytics, customer support)

– Government authorities when required by law

We do NOT sell personal data.

7. Cross-Border Data Transfer

If data is transferred outside India:

– Adequate safeguards will be ensured

– Transfers comply with the DPDP Act

8. Data Retention

Data is retained only as long as necessary for the purposes outlined:

– User accounts: until deletion request

– Transactions: as required by tax & accounting laws

– Logs & analytics: as per internal policies

9. Security Practices

We follow ISO/IEC 27001-aligned security practices as required under the SPDI Rules:

– Encryption of sensitive data

– Access controls and role-based permissions

– Secure payment gateway integrations

– Regular vulnerability assessments

10. Your Rights Under the DPDP Act

You are entitled to:

– Right to access your data

– Right to correction or update

– Right to deletion (“Right to Erasure”)

– Right to data portability

– Right to grievance redressal

– Right to nominate another person to exercise rights in case of incapacity

Requests may be submitted to tech@recommercex.com.

11. Grievance Officer

In accordance with SPDI Rules:

Name: Mr. Aadesh Saraswat

Email: tech@recommercex.com

Response Time: Within 30 days

**12. Cookies & Tracking Technologies**

We use cookies for:

– Improving website performance

– Personalizing user experience

– Analytics and marketing (with consent)

Users can disable cookies from browser settings.

13. Children’s Privacy

Our services are intended for users above 18. We do not knowingly collect data from minors.

14. Updates to This Policy

We may update this policy periodically. Continued use of the website constitutes acceptance of the revised policy.

15. Contact Us

For privacy-related queries: