📜 Privacy Policy

Effective Date: [7th January 2024]

Last Updated: [27th May 2025]

We at Papaexport.com understand the importance of privacy and confidentiality for our buyers’ personal information. Papaexport.com is a digital marketplace that facilitates transactions between buyers and suppliers. 

This policy outlines how Papaexport.com collects, handles, and shares information of visitors and users from India and outside India. It also applies to usage of the platform through a mobile device. However, this privacy policy doesn’t apply to the extent we’ll process personal data in the capacity of a service provider or processor for other companies.

At PapaExport.com, we prioritise the privacy and security of our users. This Privacy Policy outlines how we collect, use, disclose, and protect your personal information in compliance with applicable Indian laws and regulations.

By accessing or using our website, you consent to the practices described in this policy. If you do not agree with this policy, please refrain from using our services.

🔐 Information We Collect

We collect the following types of information:

A. Personal Information

• Buyers: Name, business details, contact information, shipping and billing addresses, payment information, GSTIN, PAN.
• Suppliers: Company name, contact details, product listings, certifications, and other business-related information.

B. Sensitive Personal Data or Information (SPDI)

• Financial details, payment information, and any other data classified as sensitive under Indian law.

C. Automatically Collected Data

• IP address, browser type, device information, cookies, and usage data.

🎯 Purpose of Data Collection

We collect and process your data for the following purposes:

• To facilitate account registration and management.
• To process transactions and fulfil orders.
• To verify the identity and authenticity of suppliers.
• To improve our services and user experience.
• To comply with legal obligations and resolve disputes.

🎯 Consent Mechanism

In accordance with the DPDP Act, we obtain explicit consent before collecting or processing your personal data. You have the right to withdraw your consent at any time, and we will provide a mechanism to do so.

🔄 Data Sharing and Disclosure

We may share your information with:

• Payment Processors: To complete transactions securely.
• Logistics Partners: For shipping and delivery purposes.
• Third-Party Service Providers: For analytics, customer support, and fraud prevention.
• Legal Authorities: When required by law or to protect our rights.

We may disclose your personal information to the following recipients:

• Other users (in terms of purchases made or interpersonal communications)
• Our affiliates and their designated service providers work with us to provide tools, systems, and messaging services
• Third-party business partners and service providers working with us include resellers, marketing/advertising platforms, due diligence and verification service providers, payment service providers, credit risk assessment providers, logistics partners, etc.
• External professional advisers, law enforcement agencies, insurers, government and regulators and other organizations where it is necessary to comply with applicable laws
• Custom agents for customs clearance purposes 
• Instant messaging service providers for enabling communications between Buyers and Suppliers via the Platform
• Customer service providers to provide after-sale services

We do not sell or rent your personal information to other third parties.

🛡Data Security

We implement reasonable security practices and procedures to protect your data from unauthorized access, disclosure, alteration, and destruction. These measures include encryption, access controls, and regular security audits.

🧾 Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy or as required by law. Once the data is no longer needed, we will securely delete or anonymize it.

🔍 Fraud Prevention and Compliance

We utilize the information provided to:

• Verify the legitimacy of suppliers and buyers.
• Detect and prevent fraudulent activities.
• Comply with legal and regulatory requirements.

🍪 Cookie Policy

We use cookies to enhance user experience, analyze site usage, and provide personalized content. By using our website, you consent to the use of cookies. You can control cookie settings through your browser, but disabling cookies may affect the functionality of our site.

🧒 Children's Privacy

Our services are not intended for individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that a child has provided us with personal data, we will take steps to delete such information.

📞 Grievance Redressal

In compliance with the SPDI Rules, we have appointed a Grievance Officer to address any concerns or complaints regarding your personal data. You can contact our Grievance Officer at:

Name: Nikhil Kumar Sharma
Email: nikhil@papaexport.com

We will acknowledge receipt of your complaint within 24 hours and resolve it within 30 days.

🎯 Legal Compliance

We comply with the following Indian laws and regulations:

• Information Technology Act, 2000 and its amendments.
• Sensitive Personal Data or Information Rules, 2011.
• Digital Personal Data Protection Act, 2023.

We use your information to verify your identity and conduct security checks, KYC (know-your-customer), and anti-money laundering due diligence to legally set up user accounts.

There are two kinds of data we process: the information you give us and the one we automatically collect.

The information you provide includes:

• Contact information - name, number, residential/office address, email address, etc.
• Account information - username, password, gender, etc.
• Business information - company name, tax registration, business type, etc.
• Payment information - bank account number, credit/debit card number, etc.
• Transaction information - transaction statements, billing address, etc.

The information we automatically collect includes the following:

• Device information - device type, IP address, browning patterns, etc.
• Online activity information page views, searches, etc.
• Location information
• Communication information - post or comments on the platform or on other Users’ content on the platform
• Marketing and advertising information - your survey responses, the promotions you participate in, etc.
• User-generated content - profile photos, videos, or audio recordings you uploaded to Papaexport.com as part of a product review or via content sharing on the site.

🪪Security Measures

Papaexport.com puts technical and organizational measures in place to prevent unauthorized access to the website in order to maintain data accuracy and ensure its correct usage. It’s the user’s responsibility to keep their password safe and confidential. If they share a computer, they should always remember to sign out and close the browser window when they’re done. 

While we take security measures to safeguard your information, we cannot guarantee the security of the information you send to us, and you do so at your own risk.

🔄 Changes to This Policy

We at Papaexport.com may update this Privacy Policy from time to time, including in response to evolving legal, technical or business developments. Once we update it, the new policy will take immediate effect. You can see how recent the Privacy Policy is by looking at the “last updated” date above the Privacy Notice. We encourage you to review this policy regularly.

📬 Contact Us

If you have any questions or concerns about this Privacy Policy, please write us at:

Email: info@papaexport.com