Privacy Policy
1. INTRODUCTION AND SCOPE
1.1 Purpose: This Privacy Policy describes how TVASTRE TECHNOVATION LLP ("SetuBuzz", "we", "us", or "our") collects, uses, processes, stores, and protects the Personal Data of individuals accessing or using the SetuBuzz B2B digital platform.
1.2 Legal Framework: This Policy is formulated in compliance with:
- The Digital Personal Data Protection Act, 2023 (DPDP Act) of India
- The Information Technology Act, 2000 and the IT (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011
- Other applicable Indian data protection laws
1.3 Applicability: This Policy applies to all individuals whose Personal Data is processed by SetuBuzz, including:
- Authorized representatives of Buyer entities
- Authorized representatives of Supplier entities
- Visitors to the SetuBuzz website
- Any individual whose data is shared with us through the Platform
1.4 Relationship with Terms and Conditions: This Privacy Policy is incorporated by reference into the SetuBuzz Terms and Conditions. Capitalized terms used but not defined herein shall have the meanings assigned to them in the Terms and Conditions.
2. DEFINITIONS UNDER DPDP ACT, 2023
| Term | Definition |
|---|---|
| "Data Fiduciary" | SetuBuzz, as the entity that determines the purpose and means of processing Personal Data |
| "Data Principal" | The individual to whom the Personal Data relates |
| "Personal Data" | Any data about an individual who is identifiable by or in relation to such data |
| "Processing" | Any operation performed on Personal Data, including collection, storage, use, disclosure, and erasure |
| "Consent" | A voluntary, informed, specific, and unambiguous agreement to process Personal Data |
| "Consent Manager" | A platform that enables Data Principals to manage their consent |
3. DATA FIDUCIARY AND CONTACT INFORMATION
| Designation | Grievance Officer |
| Name | Manthan Panchal |
| Support.setubuzz@gmail.com | |
| Address | M606, River residency, Jadhavwadi, Dehu-Alandi Road, Pune - 411062, India |
| Response Time | Acknowledgment within 24 hours; resolution within 15 days |
4. TYPES OF PERSONAL DATA COLLECTED
4.1 Categories:
- A. Registration Data: Full name, Designation, Official email, Official contact number, Password.
- B. Business Verification Data: PAN, GSTIN, IEC, Business registration documents, OVD for KYC.
- C. Technical Data: IP address, Browser details, Device info, Location data, Logs, Cookies.
- D. Communication Data: Correspondence records, Queries, Feedback, Call recordings.
- E. Transaction Data: RFQ history, Quotations, Purchase orders, Invoicing/Payment records.
4.2 Sensitive Personal Data: SetuBuzz does not intentionally collect sensitive data (biometrics, health, etc.). Users should not share such info.
5. PURPOSES OF PERSONAL DATA PROCESSING
| Purpose | Legal Basis | Data Categories |
|---|---|---|
| Platform Registration | Deemed consent | Registration Data |
| KYC and Verification | Legal obligation | Verification Data |
| Facilitating Transactions | Contract performance | Registration/Transaction |
| Communication/Support | Deemed consent | Registration/Communication |
| Security/Fraud Prevention | Legitimate interest | Technical/Transaction |
| Compliance | Legal obligation | All relevant |
| Analytics | Consent (Cookies) | Technical Data |
| Marketing | Consent | Registration Data |
6-7. CONSENT AND DATA SHARING
6. Consent: Obtained affirmatively. Data Principals may withdraw consent (Resolution within 15 days). 7. Sharing: Shared with other Users for transactions, and service providers (Cloud, Payment, KYC, Analytics) under strict contractual safeguards. No sale of Personal Data.
8. DATA RETENTION AND ERASURE
| Category | Retention Period | Basis |
|---|---|---|
| Registration Data | Duration of account + 3 years | Business records |
| Verification Data | Duration of account + 8 years | Tax laws |
| Technical Data | 12 months from collection | Platform improvement |
| Transaction Data | Duration of account + 8 years | Commercial records |
| Communication Data | 3 years from last interaction | Dispute resolution |
8.3 Right to Erasure: Available unless retention is required for legal obligations or defense of claims.
9-10. SECURITY AND RIGHTS
9. Security: Encryption (TLS/SSL), Firewalls, audits. 10. Rights: Access, Correction, Erasure, Redressal, and Nomination. Submit written request to Grievance Officer; 15-day response time.
11. COOKIES AND TRACKING
| Type | Purpose | Duration |
|---|---|---|
| Essential | Authentication/Security | Session/Persistent |
| Functional | Preferences | Persistent |
| Analytics | Usage analysis | Persistent |
| Marketing | Content delivery | Persistent |
12-14. TRANSFERS, CHILDREN, AND CHANGES
12. Cross-Border: Primary storage in India. Conformity with Section 16 DPDP Act for any foreign transfers. 13. Children: B2B platform; not for under 18s. 14. Policy Changes: Notification via email/platform. Continued use implies acceptance.
15. GRIEVANCE REDRESSAL MECHANISM
| Step | Timeline | Action |
|---|---|---|
| 1. Submission | Day 0 | Submit to Grievance Officer |
| 2. Acknowledgment | Within 24h | SetuBuzz acknowledges receipt |
| 3. Investigation | Within 7 days | Internal review |
| 4. Resolution | Within 15 days | Decision communication |
| 5. Escalation | After 15 days | Data Protection Board of India |
16. CONSENT ACKNOWLEDGMENT
By using the SetuBuzz Platform, you acknowledge having read and understood this Policy; consent to data handling as described; warrant employee consents; and agree to cookie usage.
Registered Address: TVASTRE TECHNOVATION LLP, M606, River residency, Jadhavwadi, Pune - 411062.