Privacy Policy & Data Protection
Your privacy is our priority. We are committed to transparency and security in accordance with GDPR, CCPA, and India's DPDPA 2023.
Introduction & Scope
Welcome to ApnaSell ("we," "our," "us"), operating through our digital platforms including apnasell.com and apnasell.in. This Privacy Policy governs our approach to data processing across all our services.
Our Commitment
We adhere to globally recognized privacy principles and comply with applicable data protection regulations, specifically:
- India: The Digital Personal Data Protection Act, 2023 (DPDPA)
- Europe: General Data Protection Regulation (GDPR)
- USA (California): CCPA & CPRA
apnasell.com: Serves our global user base.
apnasell.in: Specifically tailored for the Indian market compliance.
Information We Collect
Data You Provide
- Account Data: Name, email, phone (verified via OTP), and business details.
- Transactional Data: Order history, billing/shipping addresses, and payment references.
- Verification Docs: Government ID and bank details for seller payouts.
Automated Collection
We collect technical data such as IP addresses, device identifiers, browser type, and operating system details to prevent fraud and optimize user experience.
How We Use Information
We process your data for the following specific purposes:
- Service Delivery: Processing orders, payments, and logistics.
- Security: Detecting fraud, abuse, and unauthorized access.
- Communication: Sending order updates, invoices, and support responses.
- Improvement: Analyzing user behavior to enhance platform performance.
Legal Basis for Processing
- Consent: When you explicitly agree (e.g., marketing emails, cookies).
- Contract: Necessary to fulfill your order or seller agreement.
- Legal Obligation: Tax reporting and law enforcement requests.
- Legitimate Interest: Fraud prevention and network security.
International Transfers
Data may be transferred to servers located outside your country of residence. We ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) for EU data and adherence to DPDPA cross-border rules for Indian data.
Security Measures
We employ industry-standard security protocols:
- Encryption: TLS 1.3 for data in transit and AES-256 for data at rest.
- Access Control: Strict role-based access for employees.
- Audits: Regular vulnerability scanning and penetration testing.
Your Rights
Depending on your jurisdiction, you have the right to:
- Access: Request a copy of your data.
- Rectify: Correct inaccurate information.
- Delete: Request the "Right to be Forgotten".
- Portability: Receive data in a structured format.
- Withdraw Consent: Opt-out of processing at any time.
Children's Privacy
ApnaSell is not intended for users under the age of 18. We do not knowingly collect data from minors. If we discover such data, it will be deleted immediately.
Data Retention
We retain personal data only as long as necessary to fulfill the purposes for which it was collected, including satisfying any legal, accounting, or reporting requirements.
Contact Information
For privacy inquiries, data deletion requests, or grievances:
- General Privacy: privacy@apnasell.com
- Data Protection Officer: dpo@apnasell.com
- Grievance Officer (India): grievance@apnasell.in
Jurisdiction Addendums
India (DPDPA 2023)
For users on apnasell.in: We act as a "Data Fiduciary." You have the right to nominate a representative to exercise your rights in the event of death or incapacity.
California (CCPA)
California residents may request a list of third parties to whom we disclosed personal information for their own marketing purposes.