Privacy Policy
This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, engage with our services, or make a purchase. By using our website, you agree to this Privacy
Policy. If you do not agree, please do not use the site.
1. Who We Are
Company: Samanvaya Small & Medium Enterprise (SSME)
Legal Entity: Samanvaya Small & Medium Enterprise (SSME)
Registered Address:
#1638/12, 8th ‘A’ Main Road, 20th D Cross.
‘B’ Block, Sahakaranagara, Bengluru – 560092
Contact Email: sumangala@samanvayagroup.org
DPO/Privacy Contact: sumangala@samanvayagroup.org
Jurisdiction: India
2. Scope
This Policy applies to our website, mobile site, apps, customer support channels, and related services
offered by us. It covers customers, visitors, and account holders who interact with our eCommerce services.
3. Information We Collect
We collect the following categories of personal data:
• Identity & Contact: name, phone, email, billing & shipping address.
• Account Details: username, password, preferences, saved items.
• Order & Payment: order history, invoices, payment method details processed via PCI-DSS compliant
gateways (we do not store full card numbers or CVV).
• Technical: IP address, device identifiers, browser type, time zone, cookies, and analytics data.
• Communications: messages to customer support, reviews, and survey responses.
• Marketing: newsletter subscriptions, campaign interaction.
• KYC (if applicable): identity verification documents for high-value or regulated products, as required by
law.
4. How We Collect Data
• Directly from you via website forms, checkout, account creation, and customer service.
• Automatically through cookies, pixels, SDKs, and similar technologies.
• From third parties like payment processors, logistics providers, and marketing partners.
5. How We Use Your Information
We use personal data to:
• Process orders, payments, delivery, returns, and customer support.
• Manage your account, wishlist, and personalized experiences.
• Communicate transactional and service updates.
• Improve site performance, security, and user experience.
• Conduct analytics, prevent fraud, and ensure compliance.
• Send marketing communications (with opt-out options).
• Meet legal, regulatory, tax, and audit obligations.
6. Legal Bases for Processing (where applicable)
Depending on your jurisdiction, we process data on the basis of: (i) consent, (ii) performance of a contract,
(iii) compliance with legal obligations, (iv) legitimate interests (such as fraud prevention, service
improvement), and (v) vital interests where applicable.
7. Sharing & Disclosure
We may share your data with: payment gateways, banks, logistics/shipping partners, customer support tools,
analytics providers, advertising networks, and IT/security vendors. We disclose information only as
necessary, under appropriate contractual safeguards, and as required by law or to protect rights, safety, and
property.
8. International Data Transfers
If we transfer data outside your country, we use legally recognized safeguards (e.g., Standard Contractual
Clauses, adequacy decisions, or equivalent mechanisms) and implement appropriate technical and
organizational measures.
9. Data Retention
We retain personal data only for as long as necessary to fulfill the purposes described in this Policy, comply
with legal obligations, resolve disputes, and enforce agreements. Retention periods vary by data category
and legal requirements.
10. Security Measures
We implement administrative, technical, and physical safeguards to protect personal data, including
encryption in transit, access controls, monitoring, and secure development practices. However, no method of
transmission or storage is completely secure.
11. Cookies & Tracking Technologies
We use cookies and similar technologies to enable core functionality (strictly necessary), improve
performance, remember preferences, and support marketing analytics. You can manage cookies via
browser settings and our cookie banner. Disabling non-essential cookies may affect site experience.
12. Your Rights
Subject to applicable laws, you may have rights to access, correct, update, delete, restrict processing, port
your data, and object to processing (including marketing). You can exercise these rights via our privacy
contact details below.
13. Children’s Privacy
Our services are not directed to children under the age specified by local law (e.g., 13 or 16). We do not
knowingly collect personal data from children. If you believe a child has provided personal data, please
contact us for prompt deletion.
14. Third-Party Services & Links
Our site may include links to third-party websites or services. We are not responsible for their privacy
practices or content. Please review their privacy policies before interacting.
15. Marketing Communications & Opt-Out
You may opt out of marketing emails at any time by using the unsubscribe link or contacting us. Even after
opting out, you will continue to receive transactional and service-related communications.
16. Contact & Grievance Redressal
If you have questions or requests regarding this Policy or your personal data, contact:
Email: sumangala@samanvayagroup.org
Address: # 1638/12, 8t ‘A’ Main Road, 20th D Cross.
‘B’ Block, Sahakaranagara, Bengluru – 560092
Grievance Officer (India, if applicable): sumangala@samanvayagroup.org.
17. Changes to This Policy
We may update this Policy from time to time to reflect changes in our practices or legal requirements. We will
post the updated version with a new effective date and, where required, notify you of significant changes.
18. Jurisdiction-Specific Disclosures
Depending on your location, additional disclosures may apply:
India: IT Act, SPDI Rules, and Digital Personal Data Protection Act, 2023 guidance.
EU/EEA: GDPR Articles on rights and processing bases.
UK: UK GDPR and DPA 2018.
US: State privacy laws (e.g., CCPA/CPRA) for residents.
This template is provided for general informational purposes and does not constitute legal advice. Please consult counsel to tailor it to your business and jurisdiction.