Privacy Policy

ECSHA Marketplace  |  www.ecsha.com

This Privacy Policy describes how ECSHA (the “Company”, “We”, “Us” or “Our”), having its principal place of business at 10/24, Thengamputhur Main Road, Thengamputhur – 629602, Kanyakumari District, Tamil Nadu, India, and operating the online marketplace available at www.ecsha.com (the “Platform”), collects, uses, shares, stores, secures and otherwise processes the personal data of users of the Platform (“You”, the “User” or, where the context requires, the “Data Principal”). This Privacy Policy forms part of, and should be read together with, the Terms of Use published on the Platform.

ECSHA operates as an e-commerce marketplace intermediary that facilitates trade across a broad range of products, including agricultural inputs, farm tools, and consumable food products We are committed to protecting Your privacy and to processing Your personal data in accordance with applicable Indian law, including the Digital Personal Data Protection Act, 2023, the Information Technology Act, 2000 and the rules framed thereunder. By accessing or using the Platform, or by providing Your personal data to Us, You acknowledge that You have read and understood this Privacy Policy.

1.Consent and Legal Basis for Processing

1.1.  We process the personal data of a User only in accordance with this Privacy Policy and applicable data-protection law. Personal data may be processed on the basis of the consent provided by the User or for other legitimate uses permitted by law. Every request for consent will be accompanied or preceded by a notice informing the User of the personal data to be processed, the purpose of processing, the manner in which consent may be withdrawn, and the manner of making a complaint to the relevant authority.

1.2.  The consent obtained shall be free, specific, informed, unconditional and unambiguous, and given through a clear affirmative action. We do not bundle consent to receive marketing communications into the acceptance of the Terms of Use; such consent, where sought, is obtained separately. The User has the right to withdraw consent at any time; the withdrawal of consent will not affect the lawfulness of processing carried out before withdrawal, and the consequences of withdrawal shall be borne by the User. We may continue to process personal data until the User withdraws consent or the purpose is fulfilled, whichever is earlier, subject to any retention required by law.

2.Information We Collect

We may collect the following categories of information:

2.1.  Registration and account data: Your name, age, and address/location, and a valid mobile number and/or email address used to create and access Your account.

2.2.  Transaction and order data: details of the Products You order, purchase or list, delivery address, order history, and communications relating to orders, cancellations, refunds and disputes. Payment is processed by third-party payment gateways; We do not store Your complete card or bank-account details on Our systems.

2.3.  Vendor data: where You register as a Vendor, information required for onboarding, verification and settlement, including business and licensing information You provide to Us.

2.4.  User content: reviews, ratings, feedback, photographs and other media that You choose to submit on the Platform.

2.5.  Usage, device and analytics data: information about Your use of the Platform, including IP address, device identifiers, browser type, pages viewed, and browsing behaviour, collected through cookies and similar technologies and through third-party analytics tools. This Privacy Policy also applies to data We collect from visitors who are not registered users.

2.6.  We only collect and use information that We consider necessary to provide a seamless, efficient and safe experience on the Platform, including to enable the provision of the Services You opt for, to display content relevant to You, to communicate account and service-related information, to provide customer care, and to comply with applicable law. To the extent possible, You may choose not to provide certain information, or not to use a particular feature, and You may opt out of non-essential communications.

3.How Information Is Collected

3.1. Before or at the time of collecting personal data, We will identify the purposes for which the information is being collected. We collect and use personal data by lawful and fair means, with the knowledge and consent of the User concerned, or as otherwise permitted by law, and solely to fulfil the purposes We have specified. Personal data collected shall be relevant to the purposes for which it is to be used and, to the extent necessary for those purposes, shall be accurate, complete and up to date.

3.2. Information is collected directly from You when You register, place or fulfil orders, submit User Content, or communicate with Us, and automatically through server logs, cookies and analytics tools when You access the Platform.

4.Our Use of Your Information

The information provided by You is used to provide and improve the Services for You and all users, including to:

• provide, operate and facilitate the Services and process, fulfil and settle Your orders and transactions;

• verify Vendors, facilitate delivery through logistics partners, and process cancellations, refunds, replacements and disputes;

• communicate necessary account, transaction and service-related information, and, where You have consented, marketing and promotional communications;

• maintain internal records, prevent fraud and misuse, and secure the Platform;

• understand how users engage with the Platform, through analytics, so as to improve it and, where consented, personalize content; and

• comply with applicable laws, and to establish, exercise or defend legal claims.

4.1. We use tracking information such as IP addresses and device identifiers to help identify You, to gather broad demographic information, and to make further services available to You. We will not sell, license or trade Your personal information. We will not share Your personal information with others except as described in this Privacy Policy, where they act under Our instructions, or where We are required to do so by law.

5.Cookies and Tracking Technologies

5.1. A cookie is a small file of letters and numbers stored on Your browser or device. By continuing to use the Platform, You may consent to Our use of cookies as described here; You can set Your browser to refuse all or some cookies, or to alert You when cookies are set, though some parts of the Platform may then not function properly. The categories of cookies We use include: strictly necessary cookies required for the operation of the Platform (for example, to enable log-in and the shopping cart); analytical/performance cookies that allow Us to recognize and count visitors and see how they move around the Platform; functionality cookies that remember Your preferences; and targeting cookies that record Your visit and the pages You have followed in order to make the Platform and any advertising more relevant.

5.2. Third parties (including analytics and advertising service providers) may also set cookies over which We have no control. You can block cookies through Your browser settings; however, if You block all cookies (including essential cookies), You may not be able to access all or parts of the Platform.

6.Sharing and Disclosure of Your Information

As a matter of policy, We do not sell or rent personally identifiable information about You to any third party. Your personal data may, however, be shared in the following ways:

6.1. Vendors: as a marketplace, We share the information necessary to fulfil an order (such as name, delivery address and contact details) with the Vendor from whom You purchase, so that the order can be processed, delivered and serviced. Vendors are required to use such information only for order fulfilment and not for unauthorized purposes.

6.2.   Logistics and delivery partners: We share delivery-related information with third-party logistics service providers and courier aggregators engaged to deliver Your order.

6.3.  Payment service providers: payment information is shared with and processed by third-party payment gateways and processors to complete transactions. Their processing of Your information is governed by their own privacy policies.

6.4.  Service providers and analytics: We may share information with external service providers who help Us operate, secure and improve the Platform, including analytics, hosting and communication providers, subject to appropriate obligations of confidentiality and data protection.

6.5. Law and order: We cooperate with law-enforcement and regulatory authorities and may disclose information where We, in Our reasonable discretion, believe it necessary or appropriate to comply with law, respond to legal process, or protect the rights, property or safety of the Company, its users or the public, including in connection with the investigation of fraud, intellectual-property infringement or other unlawful activity.

6.6.  Where any service requested by You involves a third party, such information as is reasonably necessary to carry out Your request may be shared with that third party. Where personal data is disclosed as described above, We take reasonable steps to require that it is handled in accordance with applicable law.

7.External Links on the Platform

7.1. The Platform may contain links to, or integrations with, third-party websites, applications or resources that are not operated or controlled by Us. We are not responsible for the availability, content or privacy practices of such third parties. Any information You provide to, or that is collected by, such third parties is governed by their own privacy policies, which We recommend You review before disclosing Your personal data to them.

8.Data Retention

8.1. We retain personal data only for as long as is necessary to fulfil the purposes for which it was collected, including to provide the Services, to comply with legal, accounting, tax or regulatory requirements, to resolve disputes, and to enforce Our agreements. Retention periods are determined based on the nature of the information, the purpose of processing and applicable legal requirements. When personal data is no longer required, We will delete, anonymize or de-identify it in accordance with applicable law. Where You request removal of Your data, We may retain limited information as necessary to resolve disputes, troubleshoot problems, prevent fraud and enforce the Terms of Use.

9.Data Security

9.1.  We treat data as an asset that must be protected against loss and unauthorized access, and We employ generally accepted industry-standard security techniques and reasonable security practices and procedures to protect the personal data submitted to Us, both during transmission and once received. However, no method of transmission over the internet or method of electronic storage is completely secure; while We strive to protect Your personal data, We cannot guarantee its absolute security, and any transmission of information is at Your own risk. You are responsible for maintaining the confidentiality of Your account credentials and for following safe practices, and for promptly informing Us of any suspicious activity or suspected compromise of Your account.

10.Your Rights as a Data Principal

Subject to applicable law and any exemptions, You have the following rights in respect of Your personal data:

• the right to obtain access to, and a summary of, the personal data We hold about You and the processing activities undertaken;

• the right to request correction, completion, updating or erasure of Your personal data that is inaccurate, incomplete, out of date or no longer necessary for the purpose for which it was processed;

• the right to withdraw Your consent to processing at any time, as easily as it was given;

• the right to nominate another individual to exercise Your rights in the event of Your death or incapacity;

• the right of grievance redressal, and to make a complaint to Our Grievance Officer and, thereafter, to the relevant authority; and

• the right to be informed whether Your personal data is transferred to any third party.

10.1.You may exercise these rights by contacting Us using the details set out in the ‘Grievance Officer / Data Protection Contact’ Section below. We may need to verify Your identity before giving effect to a request. Where You hold an account, You may review and change certain information submitted by You (other than, in some cases, Your registered email identifier) through the tools made available on the Platform.

11.Children’s Data

11.1.The Platform is open to Users of all ages, including persons below 18 (eighteen) years of age ("Children"). Where We process the personal data of a Child, We do so only with the verifiable consent of the Child's parent or legal guardian, obtained in the manner required under the Digital Personal Data Protection Act, 2023 (confirm). A parent or legal guardian who consents to a Child's use of the Platform is responsible for supervising that use and for the transactions carried out through the Child's account.

11.2.We will not undertake any processing of a Child's personal data that is likely to cause a detrimental effect on the well-being of the Child, and We will not undertake tracking, behavioural monitoring or targeted advertising directed at Children, in each case to the extent restricted under applicable law (confirm). A parent or legal guardian may, at any time, review, or request the correction or deletion of, a Child's personal data, or withdraw consent, by contacting Our Grievance Officer using the details set out below. Where We become aware that a Child's personal data has been collected without the required parental consent, We will take reasonable steps to delete such data in accordance with applicable law.

12.Storage and Cross-Border Transfer

12.1.The Company operates and offers the Services within India, and Your personal data is ordinarily stored and processed in India. Certain third-party service providers (such as hosting, analytics or communication providers) engaged by Us may process data on servers located outside India. Where any transfer of personal data outside India takes place, We will carry it out in accordance with, and subject to any restrictions under, applicable data-protection law.

13.Consent Withdrawal, Data Download and Data Removal

13.1.To withdraw Your consent, or to request the download or deletion of Your data held by Us for any or all of Our Services, at any time, please email Us at admin@ecsha.com. Upon withdrawal of consent for marketing communications, You may also use the ‘unsubscribe’ mechanism provided; We will give effect to such requests within a reasonable period and in accordance with applicable law, subject to any retention that the law requires or permits.

14.Other Information Collectors and Disclosures

14.1.Except as expressly set out in this Privacy Policy, this document addresses only the use and disclosure of information that We collect from You. To the extent that You disclose Your information to other parties, whether on the Platform or elsewhere, different rules may apply to their use or disclosure of such information. Due to the existing regulatory environment, We cannot guarantee that all of Your private communications and personal data will never be disclosed in ways not otherwise described in this Privacy Policy; for example, We may be required to disclose information to governmental or law-enforcement authorities. Where We disclose personally identifiable information as required by law, We will, where lawful and practicable, endeavour to intimate You at Your registered email address.

15.Compliances

15.1.This Privacy Policy is an electronic record in terms of the Information Technology Act, 2000 and the rules framed thereunder as applicable, and does not require any physical or digital signature. It is published in accordance with the provisions of Rule 3(1) of the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 and Rule 4 of the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and is formulated in compliance with the Digital Personal Data Protection Act, 2023 and other applicable data-protection laws. Users are encouraged to read this Privacy Policy together with the applicable data-protection laws.

16.Amendment

16.1.This Privacy Policy may change from time to time. The most current version will govern Our processing of Your information and will always be available on the Platform. Where changes are material, We will take reasonable steps to notify You, including through the Platform or at Your registered email address. Your continued use of the Platform following any update constitutes Your acknowledgement of the amended Privacy Policy, subject to any consent required under applicable law.

17.Grievance Officer / Data Protection Contact

17.1.In accordance with the Information Technology Act, 2000 and the rules framed thereunder, and the Digital Personal Data Protection Act, 2023, if You have any complaint or grievance in relation to the processing of Your personal data, or wish to exercise any of Your rights, You may contact Our Grievance Officer, who will acknowledge Your complaint within 48 (forty-eight) hours and endeavour to resolve it within the period prescribed under applicable law:

              Grievance Officer: Evangeline Shobia

              Email: admin@ecsha.com

              Address: 10/24, Thengamputhur Main Road, Thengamputhur – 629602, Kanyakumari District, Tamil Nadu, India

18.Disclaimer

18.1.We do not store any complete card or bank-account details on Our systems. We shall not be liable for any loss or damage sustained by Users as a result of any disclosure (inadvertent or otherwise) of any information concerning the User’s account, credit cards or debit cards in the course of any online transaction or payment made for any Products or Services offered through the Platform. In case any personal data is shared by You with Us which was not requested by Us during registration (whether mandatorily or optionally), We will not be liable for any information-security breach or disclosure in relation to such information.