Privacy Policy

1. Overview & Commitment

Navya Collection ("we", "our", "us", or "Platform") operates the multi-vendor e-commerce marketplace at navyacollection.store. We are committed to protecting your personal data and privacy in full compliance with the Digital Personal Data Protection (DPDP) Act, 2023, Information Technology Act, 2000, and Consumer Protection (E-Commerce) Rules, 2020.

2. Information We Collect

• Customer Account Information: Full name, verified mobile phone number, email address, shipping and billing addresses.
• Merchant / Seller Information: Shop business name, owner name, business email, contact number, pickup warehouse address, GSTIN (where applicable), PAN, and bank payout credentials.
• Transactional & Logistics Data: Order history, SKU purchased, payment mode (Prepaid via Razorpay or Cash on Delivery), AWB tracking numbers, and delivery confirmation records.
• Device & Security Logs: IP address, browser type, device identifiers, and security event logs to safeguard against fraud and CSRF attacks.

3. Payment Information Security

Navya Collection does NOT store your raw debit card, credit card, net banking credentials, or UPI PINs on our servers. All digital payments are processed through RBI-authorized payment aggregators (such as Razorpay) utilizing 256-bit SSL encryption and PCI-DSS Level 1 compliance.

4. Purpose of Data Processing

We process your personal information exclusively for:

• Processing and fulfilling multi-seller marketplace orders.
• Transmitting real-time order confirmation, dispatch updates, and OTPs via transactional SMS, Email (Brevo), and WhatsApp.
• Facilitating reverse logistics, returns, and refunds.
• Complying with statutory Tax Collected at Source (TCS) and GST obligations under Indian tax laws.

5. Third-Party Service Providers

We share only minimum necessary data with trusted logistics partners (e.g. Shiprocket), payment gateways (Razorpay), and transactional communication gateways (Brevo / MSG91) to fulfill order deliveries. We never sell your personal data to third-party advertisers.

6. Your Rights & Data Retention

You possess the right to access, rectify, or request deletion of your personal account information. You may initiate a data export or account closure by writing to our Grievance Officer.