Your privacy matters to us. This policy explains what data we collect, why we collect it, and how you can control it. DaaS complies with the Information Technology Act, 2000, the IT (Reasonable Security Practices) Rules, 2011, and applicable data protection guidelines issued by the Government of India.
1. Overview
DaasDotCom Private Limited ("DaaS," "we," "us," or "our") operates the DaaS online marketplace. This Privacy Policy describes how we handle personal information that we collect when you use our website, mobile applications, and related services (collectively, the "Platform").
By creating an account or using the Platform, you acknowledge that you have read, understood, and consent to the collection, storage, use, and disclosure of your personal information as described in this Privacy Policy.
2. Information We Collect
2.1 Information You Provide Directly
- Account Information: Name, email address, mobile number, date of birth, and password when you register.
- Profile Information: Profile photo, gender, and communication preferences.
- Address Information: Delivery addresses, including pincode, city, state, and landmark.
- Payment Information: We do not store full card details. Payment data is handled by PCI-DSS compliant processors. We store only masked card numbers and billing details required for invoicing.
- Communications: Messages you send to Sellers, customer support inquiries, review content, and ratings.
- KYC / Verification: Government-issued ID and bank details if you register as a Seller.
2.2 Information Collected Automatically
- Device Data: IP address, device type, operating system, browser type, and version.
- Usage Data: Pages visited, search queries, product views, add-to-cart events, purchase history, and session duration.
- Location Data: Approximate location derived from your IP address or, with your consent, precise GPS location via the mobile app.
- Cookies & Tracking Pixels: See Section 5 for details.
2.3 Information From Third Parties
- Social login providers (Google, Apple) if you choose to sign in via those services.
- Logistics partners providing shipment and delivery status updates.
- Payment gateways confirming transaction success or failure.
- Analytics providers (aggregated, non-personally identifiable data).
3. How We Use Your Information
| Purpose | Lawful Basis |
|---|---|
| To create and manage your account | Contractual necessity |
| To process and fulfil your orders | Contractual necessity |
| To send order confirmations, shipping updates, and invoices | Contractual necessity |
| To respond to your customer support requests | Legitimate interest |
| To personalise product recommendations and search results | Legitimate interest / Consent |
| To send promotional emails, offers, and newsletters | Consent (opt-out available) |
| To detect and prevent fraud and abuse | Legitimate interest / Legal obligation |
| To comply with legal and regulatory requirements | Legal obligation |
| To analyse platform performance and improve the Services | Legitimate interest |
| To display personalised advertisements | Consent |
4. Sharing Your Information
We do not sell your personal data. We share your information only in the following circumstances:
4.1 With Sellers
When you place an order, we share your name, delivery address, and contact number with the relevant Seller solely for the purpose of order fulfilment. Sellers are contractually prohibited from using your data for any other purpose.
4.2 With Logistics & Delivery Partners
Your name, contact number, and delivery address are shared with our courier and logistics partners to enable delivery of your orders.
4.3 With Payment Processors
Payment data is processed by certified third-party payment gateways. We share only the minimum information required to complete a transaction.
4.4 With Service Providers
We engage trusted service providers for cloud hosting, data analytics, email delivery, SMS services, and customer support tools. These providers process your data on our behalf under strict confidentiality agreements and are not permitted to use it for their own purposes.
4.5 For Legal Compliance
We may disclose your information to government authorities, law enforcement, or courts if required to do so by applicable law, legal process, or to protect the rights and safety of DaaS, its users, or the public.
4.6 Business Transfers
In the event of a merger, acquisition, or sale of assets, your personal data may be transferred to the successor entity, subject to the same privacy protections as described in this Policy. You will be notified in advance of such a transfer.
5. Cookies & Tracking Technologies
We use cookies and similar technologies (web beacons, pixel tags, local storage) to operate and improve the Platform, remember your preferences, and deliver relevant advertising.
| Cookie Type | Purpose | Duration |
|---|---|---|
| Essential Cookies | Required for the Platform to function (login session, cart) | Session |
| Preference Cookies | Remember your language, location, and UI settings | 1 year |
| Analytics Cookies | Understand how users interact with the Platform (Google Analytics) | 2 years |
| Marketing Cookies | Deliver personalised ads and track campaign performance | 90 days |
You can manage or withdraw your consent to non-essential cookies at any time via your browser settings or our Cookie Preference Centre accessible in the website footer. Disabling essential cookies may impair your ability to use the Platform.
6. Data Security
We implement industry-standard technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These include:
- TLS/SSL encryption for all data transmitted between your browser/app and our servers.
- AES-256 encryption for sensitive data stored at rest.
- Role-based access controls ensuring only authorised personnel can access personal data.
- Regular security audits and penetration testing.
- Two-factor authentication (2FA) available for all user accounts.
While we take all reasonable precautions, no method of electronic transmission or storage is completely secure. We encourage you to use a strong, unique password and enable 2FA to further protect your account.
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the appropriate authorities without undue delay, as required by applicable law.
7. Data Retention
We retain your personal data for as long as necessary to fulfil the purposes described in this Privacy Policy, or as required by law. Specifically:
- Account data is retained for the duration of your account and for 3 years after deletion (for legal and audit purposes).
- Order and transaction records are retained for 7 years to comply with GST and accounting regulations.
- Support communications are retained for 2 years.
- Marketing data is retained until you withdraw consent or unsubscribe.
After the applicable retention period, your data is securely deleted or anonymised so that it can no longer be used to identify you.
8. Your Rights
You have the following rights regarding your personal data:
- Right to Access: Request a copy of the personal data we hold about you.
- Right to Correction: Request correction of inaccurate or incomplete data.
- Right to Deletion: Request deletion of your account and personal data, subject to legal retention requirements.
- Right to Portability: Request your data in a structured, machine-readable format.
- Right to Object: Object to processing of your data for direct marketing purposes.
- Right to Withdraw Consent: Withdraw consent for processing based on consent (e.g., marketing emails) at any time without affecting prior processing.
- Right to Restrict Processing: Request restriction of processing in certain circumstances.
To exercise any of these rights, email us at privacy@dassdotcom.com. We will respond within 30 days. You may also update most of your information directly in your Account Settings. Note that exercising certain rights may limit your ability to use some features of the Platform.
You may also lodge a complaint with the appropriate Data Protection Authority or Consumer Disputes Redressal Commission if you believe your rights have been violated.
9. Children's Privacy
The DaaS Platform is not directed at children under the age of 18. We do not knowingly collect personal data from minors. If we become aware that a child under 18 has provided us with personal data without verifiable parental consent, we will take steps to delete such information promptly. If you believe your child has submitted personal data to us, please contact us at privacy@dassdotcom.com.
10. Cross-Border Data Transfers
Your data is primarily stored and processed in India. In some cases, data may be transferred to and processed by our service providers in other countries. When we transfer your data outside India, we ensure that appropriate safeguards are in place — such as contractual clauses or the service provider's compliance with equivalent data protection standards — to protect your personal data.
11. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. We will notify you of material changes by sending an email to your registered address or by displaying a prominent notice on the Platform at least 7 days before the changes take effect. The "Effective Date" at the top of this page indicates when the current version was last updated. Your continued use of the Platform after the effective date constitutes acceptance of the revised policy.
12. Contact & Grievances
If you have questions, concerns, or complaints about this Privacy Policy or our data practices, please contact our Grievance / Data Protection Officer:
- Email: privacy@dassdotcom.com
- Grievances: grievance@dassdotcom.com
- Phone: Toll Free (123) 456-7890 (Mon – Sat, 9 AM – 6 PM IST)
- Address: DaasDotCom Private Limited, Attn: Data Protection Officer, Shivam Vihar, Doon University Campus, Kedarpur, Dehradun, Uttarakhand – 248012, India
We endeavour to acknowledge all privacy-related complaints within 48 hours and resolve them within 30 days of receipt.