Privacy Policy

Shambhu Technology Services Private Limited (hereinafter referred to as the ”Company”) recognizes the importance of privacy as well as the importance of maintaining the confidentiality of personal information. This Privacy Policy applies to all products and services provided by the Company and sets out how the Company may collect, use, and disclose information in relation to Users of the Website and Mobile Application (hereinafter collectively referred to as ”Platforms”).

All capitalized terms not defined in this document shall have the meanings ascribed to them in the Terms of Use of the Platforms, which can be found here (Terms and Conditions). The contracting entity shall be Shambhu Technology Services Private Limited (hereinafter referred to as 'Shambhu Technology', 'POSHN.CO', 'the Company', or 'us' or 'our'). The terms You, Your, User refer to the users of the Platforms.

1. 1. Information provided by you

   1. 1.1 To avail certain services on our Platforms, you are required to provide some personally identifiable information for the registration process, which includes but is not limited to the following:
      • Your name
      • Email address
      • Mobile / Fax number
      • Permanent Account Number (PAN)
      • Date of Birth
      • Gender
      • Address
      • Bank statements
        (here in after referred to as Registration information)
   2. 1.2 We may require you to provide additional details, as and when required, in order to comply with any applicable regulatory requirements or for additional services/products via the Platforms, as and when offered. We may also utilize data lawfully obtained from third-party service providers authorized by you, including but not limited to data pertaining to your credit score, to provide the services to you, subject to the terms of this Privacy Policy.

2. 2. Collection of Information

   1. 2.1 User(s) privacy is important to the Company, and we have taken steps to ensure that we do not collect more information from Users than is necessary for us to provide User(s) with the Company's products or services and to protect User(s) accounts.
   2. 2.2 In connection with any communication or transaction and payment services or any other services that you may avail using the Platforms, information, including but not limited to, bank account numbers, bank statements, billing and delivery information, credit/debit card numbers and expiration dates, tracking information from cheques or money orders (”Account Information”) may be collected, among other things, to facilitate the sale and purchase as well as the settlement of the purchase price of the products or services transacted on or procured through the Platforms.
   3. 2.3 The Company records and retains details of Users' activities on the Platforms. Information relating to communication or transactions including, but not limited to, the types and specifications of the goods, pricing and delivery information, any dispute records, location data at the time of transactions, and any information disclosed in any communication forum provided by us and/or other affiliated companies of the Company (”Activities Information”) may be collected as and when the communication and/or transactions are conducted through the Platforms.
   4. 2.4 The Company records and retains records of Users' browsing or buying activities on the Platforms, including but not limited to IP addresses, browsing patterns, User behavioral patterns, and location data collected via GPS, Wi-Fi, or other methods. In addition, we gather statistical information about the Platforms and visitors to the Platforms including, but not limited to, IP addresses, browser software, operating system, software and hardware attributes, pages viewed, number of sessions, unique visitors, and location data (together ”Browsing Information”).
   5. 2.5 Registration Information, Account Information, Activities Information, and Browsing Information are collectively referred to as Personal Data.
   6. 2.6 It is mandatory for Users of the Platforms to provide certain categories of Personal Data (as specified at the time of collection). In the event that Users do not provide any or sufficient Personal Data marked as mandatory, the Company may not be able to complete the registration process or provide such Users with the Company's products or services.

3. 3. Information obtained from data aggregators on your behalf

   1. 3.1 We may obtain your personally identifiable information (using API tools or otherwise) from third-party data aggregators including but not limited to Credit Information Companies (CICs) and directories on your behalf. In order to view your credit information/report, you hereby freely consent without any undue influence or coercion that we are authorized to share/obtain your personally identifiable information with/from said data aggregators. For availing your information/report, you agree that the Company shall be entitled to rely on your authorization and consent granted by you to us unless expressly revoked by you.

4. 4. Use of Personal Information

   1. 4.1 We use your personal information to make informed decisions in order to offer and deliver services to you. This information is used for specific business purposes or for a lawful purpose to comply with the applicable laws and regulatory contractual obligations, which include but are not limited to:
      • Providing you with services offered by the Company
      • Facilitating location-based services and features to enhance user experience
      • Analytics for the purposes of providing you with personalized offers and improving our products
      • Assessing and processing applications or requests from you
      • Communicating with you
      • Responding to your queries
      • Addressing or investigating any complaints, claims, or disputes
      • Conducting credit checks, screenings, or due diligence checks as may be required under contractual arrangements
      • Preventing crime including fraud and financial crime
      • Internal checks and record-keeping purposes
      • Our partner banks and non-bank finance companies

5. 5. Data Retention

   1. 5.1 We will retain your information for as long as it is necessary for providing you the services available on the Platforms or until your request for termination of your account with us, whichever is later.
   2. 5.2 Our partner banks and non-bank finance companies may retain your personal and financial information as per their respective privacy policies.
   3. 5.3 The Credit Information Aggregates shared by you, or received on your behalf, shall be destroyed, purged, erased, or returned to the Credit Information Companies promptly either when you expressly seek to do so and/or seek to revoke the consent or if it is mandated or intimated by regulators.

6. 6. Disclosure of Personal Data

   1. 6.1 Users further agree that the Company may disclose and transfer User's Personal Data to third-party service providers (including but not limited to data entry, database management, promotions, products and services alerts, delivery services, credit information bureaus, payment extension services, authentication and verification services, and logistics services) (”Service Providers”). These Service Providers are under a duty of confidentiality to the Company and are only permitted to use Users' Personal Data in connection with the purposes specified in Clause 4 hereinabove.
   2. 6.2 User(s) agree that the Company may disclose and transfer User(s) Personal Data to the Company's affiliated companies and/or their designated Service Providers.
   3. 6.3 When necessary, the Company may also disclose and transfer User's Personal Data to our professional advisers, law enforcement agencies, insurers, government and regulatory bodies, and other organizations.
   4. 6.4 Any Personal Data supplied by User will be retained by the Company and will be accessible by our employees, representatives, any Service Providers engaged by the Company, and third parties referred to in Clause 6 herein, for or in relation to any of the purposes stated in Clause 4 hereinabove.
   5. 6.5 All voluntary information may be made publicly available on the Platforms and therefore accessible by any internet user. Any voluntary information that User discloses to the Company becomes public information, and User relinquishes any proprietary rights (including but not limited to the rights of confidentiality and copyright) in such information. User should exercise caution when deciding to include personal or proprietary information in the voluntary information that User submits to the Company.
   6. 6.6 The Company may share User's Personal Data with third parties, including without limitation, banks, financial institutions, credit agencies, or vendors to enable such third parties to offer their products or services to such Users. While the Company shall endeavor to have in place internal procedures to keep User's Personal Data secure from intruders, there is no guarantee that such measures/procedures can eliminate all of the risks of theft, loss, or misuse.
   7. 6.7 The Company may establish relationships with other parties and websites to offer User the benefit of products and services which the Company does not offer. The Company may offer you access to these other parties and/or their websites. This Privacy Policy does not apply to the products and services enabled or facilitated by such third parties. The privacy policies of those other parties may differ from the Company, and it has no control over the information that User may submit to those third parties. User should read the relevant privacy policy for those third parties before responding to and availing of any offers, products, or services advertised or provided by those third parties.

7. 7. Right to Update Personal Data

   1. 7.1 Under the applicable laws, Users have the right of access to personal information held by the Company and to request updating/correcting the information.

8. 8. Cookies and Other Tracking Technologies

   1. 8.1 The Company uses ”cookies” and other tracking technologies to store specific information about Users and track Users' visits to the Platforms. A ”cookie” is a small amount of data that is sent to User's browser and stored on User's device. If User does not deactivate or erase the cookie, each time User uses the same device to access the Platforms, our servers will be notified of User's visit to the Platforms, and in turn, the Company may have knowledge of User's visit and the pattern of User's usage.
   2. 8.2 Generally, the Company uses cookies and similar technologies to identify Users and enable the Company to:
      
      • Access User's Registration Information or Account Information so User does not have to re-enter it
      • Gather statistical information about usage by Users
      • Research visiting patterns and help target advertisements based on User interests
      • Assist the Company's partners to track User visits to the Platforms and process orders
      • Track progress and participation on the Platforms
      • Collect information about User's location to provide location-based services, if enabled by User
   3. 8.3 User can determine if and how cookies and other tracking technologies will be accepted by configuring the browser or device settings. If User chooses, User can change those configurations. If User rejects all cookies and tracking technologies by choosing the disabling function, User may be required to re-enter information on the Platforms more often, and certain features of the Platforms may be unavailable.

9. 9. Security Measures

   1. 9.1 The Company employs commercially reasonable security methods to prevent unauthorized access to the Platforms, to maintain data accuracy, and to ensure the correct use of the information the Company holds. No data transmission over the internet or any wireless network can be guaranteed to be perfectly secure. As a result, while the Company tries to protect the information the Company holds, it cannot guarantee the security of any information User transmits to the Company, and Users do so at their own risk.
   2. 9.2 The Company is compliant with Information Technology (Reasonable security practices and procedures and sensitive personal data or information) Rules, 2011, and has implemented international standard ISO/IEC/27001:2013 Certification prescribed under Information Security Management Systems.

10. 10. Updates / Changes

    1. 10.1 Any changes to this Privacy Policy will be communicated by us posting an amended and/or restated Privacy Policy on the Platforms. Once posted on the Platforms, the new Privacy Policy will be effective immediately. User agrees that any information the Company holds about User (as described in this Privacy Policy and whether or not collected prior to or after the new Privacy Policy became effective) will be governed by the latest version of the Privacy Policy.

11. 11. Contact Us

    1. 11.1 In the event you have any complaints or concerns with respect to the Platforms or if you have any questions about this Policy, please feel free to contact us on +91 98149 02349 (between 10 am - 7 pm) or reach out to our customer support at reach@poshn.co.

12. 12. Grievance Redressal

    1. 12.1 In the event you have any grievance relating to the processing of information provided by you, including location data, you may contact our Grievance Redressal Officer Mr. Tushar Rai Sharma at reach@poshn.co with the following subject line ”Attention: Grievance Redressal Officer” or write to us at the following address: 1-E/2, Jhandewalan Extension, Paharganj, Central Delhi, New Delhi-110055.

13. 13. Disclaimer

    1. 13.1 In case any personal information is shared by you with us, which is not requested by us during registration (whether mandatorily or optionally), we will not be liable for any information security breach or disclosure in relation to such information. If you have any questions regarding this Policy or the protection of your personal information, please contact our Grievance Officer.

14. 14. Deleting your information

    1. 14.1 If you wish to delete your account or personal information or withdraw your consent for processing or retaining your personal sensitive information, including location data, you may submit a request at reach@poshn.co
       
       By updating your privacy policy to include disclosures about location data, you ensure compliance with data protection regulations and maintain transparency with your users. Please make sure that you obtain appropriate consent from users before accessing their location data, especially if required by applicable laws and regulations.