Privacy Policy
Effective Date: 14 April 2026 · Governing Law: Republic of India
Espaze ("we", "our", or "us") is committed to protecting the personal data of every seller, customer, and visitor who interacts with our platform. This policy explains what we collect, how we use it, and the rights you have — in plain language, in compliance with Indian law.
1. Information We Collect
Account & Identity Information
When you register as a seller or customer on Espaze, we collect your name, email address, mobile number, date of birth, PAN/GST number (for sellers), and government-issued ID details as required under the Information Technology Act, 2000 and applicable KYC norms.
Business & Product Information
Sellers provide business name, GSTIN, bank account details, product listings, pricing, and inventory details to operate on the platform.
Transaction Information
We collect details of every order placed, payment made, and delivery completed through the platform — including amounts, timestamps, addresses, and payment method metadata.
Device & Usage Information
We automatically collect IP address, browser type, device identifiers, pages visited, and interaction data when you use our website or app, to improve platform performance and detect fraud.
Location Information
With your permission, we collect precise location data to enable order tracking and delivery services. You may revoke this permission at any time from your device settings.
2. How We Use Your Information
Platform Operations
To create and manage your account, process orders, facilitate payments, coordinate deliveries, and provide customer support.
Compliance & Legal Obligations
To comply with the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, the Consumer Protection (E-Commerce) Rules, 2020, GST reporting obligations, and other applicable Indian law.
Fraud Prevention & Security
To detect, investigate, and prevent fraudulent transactions, unauthorised access, and other illegal activities on the platform.
Communications
To send order confirmations, payment receipts, delivery updates, and service announcements. Marketing communications are sent only with your explicit consent and can be unsubscribed at any time.
Platform Improvement
To analyse usage patterns, fix bugs, and build features that make Espaze better for sellers and customers.
3. Sharing of Information
Between Sellers and Customers
When an order is placed, the seller receives the customer's delivery address and contact number necessary to fulfil the order. Customers receive the seller's business name and order-tracking information.
Logistics Partners
If you choose a third-party logistics provider through Espaze, we share the minimal order and address data needed to complete the delivery. These partners are bound by data processing agreements.
Payment Processors
Payment information is processed by RBI-compliant payment gateways. Espaze does not store your full card or UPI credentials.
Government & Law Enforcement
We disclose information when required by a valid court order, government directive, or under obligations imposed by Indian law including the IT Act, 2000 and DPDP Act, 2023.
No Sale of Personal Data
Espaze does not sell, rent, or trade your personal information to any third party for their own marketing purposes.
4. Your Rights Under Indian Law
Right to Access
You may request a copy of the personal data Espaze holds about you at any time by writing to our Grievance Officer.
Right to Correction
You can update most of your personal information directly from your account settings. For data that cannot be self-edited, contact our support team.
Right to Erasure
You may request deletion of your account and associated data. We will process the request within 30 days, subject to retention obligations under GST law, consumer protection regulations, and active dispute resolution.
Right to Grievance Redressal
Under the IT (Intermediary Guidelines) Rules, 2021, you may file a complaint with our Grievance Officer within 3 months of becoming aware of any violation. The Grievance Officer will acknowledge within 24 hours and resolve within 15 days.
Consent Withdrawal
Where processing is based on your consent, you may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.
5. Data Security
Technical Safeguards
We use TLS encryption in transit, AES-256 encryption at rest, and access controls to protect your data. Payment data is processed in PCI-DSS compliant environments.
Organisational Measures
Access to personal data is restricted to employees and contractors who need it to perform their duties and are bound by confidentiality obligations.
Breach Notification
In the event of a data breach that is likely to cause harm, we will notify affected users and the relevant authority as required under applicable Indian law.
6. Data Retention
Active Accounts
We retain your data for as long as your account is active and as necessary to provide services.
Post-Closure Retention
After account closure, certain data (transaction records, GST invoices, dispute records) may be retained for up to 7 years to comply with Indian tax and commercial laws.
Anonymised Data
We may retain anonymised, aggregated data indefinitely for analytics and platform improvement purposes.
7. Cookies & Tracking
Essential Cookies
Required for the platform to function — session management, authentication, and security. These cannot be disabled.
Analytics Cookies
Help us understand how users interact with the platform. You may opt out through your browser settings or our cookie preference centre.
No Third-Party Ad Tracking
Espaze does not use third-party advertising cookies or retargeting pixels that track you across other websites.
8. Children's Privacy
Age Restriction
Espaze is not directed at children under 18 years of age. We do not knowingly collect personal data from minors. If we become aware that a minor has provided us data, we will delete it promptly.
9. Changes to This Policy
Notification of Changes
We may update this Privacy Policy periodically. Material changes will be communicated via email or a prominent notice on the platform at least 14 days before they take effect. Continued use of the platform after the effective date constitutes acceptance.
Grievance Officer
As required under Rule 3(2) of the IT (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, you may contact our Grievance Officer for any privacy concerns or complaints:
Name: Grievance Officer, Espaze
Email: grievance@espaze.in
Response Time: Acknowledgement within 24 hours · Resolution within 15 days
If you are not satisfied with our response, you may approach the competent court of jurisdiction in India or the relevant regulatory authority.