Privacy Policy

1. Data Fiduciary & Data Protection Officer

Takora Mart acts as the Data Fiduciary under the DPDP Act, 2023, meaning it determines the purpose and means of processing your personal data. The following officer is designated as the Data Protection Officer (DPO):

2. Personal Data We Collect

2.1 Identity & Contact Data

• Full name, date of birth (where required)
• Mobile number, email address
• Delivery address, billing address

2.2 Transaction Data

• Order history, purchase records, payment confirmations
• Payment details (processed exclusively through PCI-DSS compliant payment gateways; we do not store card numbers)
• Refund and return records

2.3 Technical Data

• IP address, browser type, device model, operating system
• Session data, log files, cookies, and similar tracking technologies
• Geolocation data (where consent is given)

2.4 Sensitive Personal Data or Information (SPDI)

3. Purposes of Processing & Legal Basis

4. Consent Notice

In accordance with Section 6 of the DPDP Act, 2023, we collect your personal data only on the basis of a free, specific, informed, unconditional, and unambiguous indication of your wishes. At the point of registration and at each stage of data collection, you will be presented with a clear consent notice specifying:

• The categories of personal data being collected
• The specific purpose(s) for which data is collected
• The identity of any Data Processors or third parties to whom data may be shared
• Your right to withdraw consent at any time

5. Your Rights as a Data Principal

Under the DPDP Act, 2023, you have the following rights. You may exercise these by contacting the DPO at dpo@takoramart.com:

6. Data Retention & Deletion

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law:

Upon expiry of the retention period or upon a valid erasure request, personal data will be securely deleted or anonymized using industry-standard methods. You may request deletion of your account and associated data at any time through the Platform settings or by contacting the DPO.

7. Children's Data Protection

In accordance with Section 9 of the DPDP Act, 2023, Takora Mart takes the following measures to protect children:

• The Platform is not directed at children below the age of 18 years.
• We implement an age-gate mechanism at the point of registration to confirm the user's age.
• Where we have reason to believe that a user is below 18 years of age, we will seek verifiable parental or guardian consent before processing their data.
• We do not process personal data of children for the purpose of tracking, behavioural monitoring, or targeted advertising.
• If we become aware that personal data of a child has been collected without appropriate consent, we will immediately delete such data.

8. Personal Data Breach Notification

In the event of a personal data breach that is likely to result in risk to the rights of Data Principals, Takora Mart shall:

• Notify the Data Protection Board of India within the timelines prescribed under the DPDP Act, 2023 and applicable rules.
• Inform the affected Data Principals in a clear and accessible manner of the nature of the breach, the data affected, possible consequences, and the remediation measures taken.
• Document the breach, its causes, and all remedial actions in a breach register maintained by the DPO.

9. Cross-Border Data Transfers

Personal data may be processed or stored on servers located outside India only in countries or territories notified as permissible by the Central Government under Section 16 of the DPDP Act, 2023 or under contractual safeguards providing equivalent protection. Where data is transferred internationally, adequate protections will be ensured through standard contractual clauses or equivalent mechanisms.

10. Cookies & Tracking Technologies

The Platform uses cookies and similar tracking technologies to enhance user experience, analyse website traffic, and enable certain platform functionality. You may manage cookie preferences through your browser settings. Disabling cookies may affect the functionality of certain features of the Platform.

11. Grievance Redressal & Privacy Contact

For privacy-related concerns, requests to exercise your rights, or to report a suspected data breach, please contact:

• Response — Acknowledgement: Within 48 hours
• Response — Resolution: Within 30 days

12. Policy Updates

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or platform features. When we make material changes, we will notify you via email or a prominent notice on the Platform prior to the changes becoming effective. Continued use of the Platform after any revision constitutes acceptance of the updated Policy.