Privacy Policy

1. Introduction

BuyPro Technologies Private Limited ("BuyPro", "we", "us" or "our"), a private limited company incorporated under the Companies Act, 2013, with its registered office at 3rd Floor, Krimson Square, 12/1 Outer Ring Road, Marathahalli, Bengaluru 560037, Karnataka, India, operates the website buypro.in and related mobile applications (collectively, the "Platform"). This Privacy Policy explains how we collect, use, store, share, and protect personal information that you ("you", "your" or "user") provide to us when you access or use the Platform.

By accessing the Platform, registering an account, or placing an order, you confirm that you have read, understood, and agreed to this Privacy Policy. If you do not agree, please discontinue use of the Platform. This policy is published in compliance with the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and, where applicable, the EU General Data Protection Regulation (Regulation (EU) 2016/679).

2. Information We Collect

We collect the following categories of information:

• Identity data — name, email, phone number, GSTIN, PAN, business type, date of birth, and government-issued ID numbers (for BuyPro Credit applicants).
• Transaction data — order history, products purchased, quantities, prices, payment instrument (last 4 digits only), delivery addresses, and delivery success status.
• Technical data — IP address, browser type and version, device identifiers, operating system, timezone, and referring URLs.
• Usage data — pages visited, products viewed, search queries, click patterns, and the duration of your session.
• Marketing data — your preferences for receiving marketing communications, and your interactions with our emails, SMS, push notifications, and ads.
• Credit data — bank statement extracts, GST returns, ITR acknowledgements, and bureau score (CIBIL/Experian/CRIF) shared voluntarily by you at the time of applying for BuyPro Credit.

3. How We Use Your Information

We process the information described above for the following purposes:

• To create and maintain your BuyPro account, and to verify your identity.
• To process and fulfil your orders, including delivery, returns, refunds, and customer support.
• To process BuyPro Credit applications, perform credit underwriting, set credit limits, and recover dues.
• To detect and prevent fraud, abuse, money-laundering, and other illegal activity.
• To personalise the products, offers, and content you see on the Platform.
• To send you transactional communications (order confirmations, shipping updates, policy updates) and, where you have opted in, marketing communications.
• To comply with applicable law and respond to lawful requests from government authorities.
• To improve the Platform, develop new features, and conduct analytics and research.

4. Data Sharing & Disclosure

We do not sell your personal information. We share data only with the following categories of recipients, and only to the extent necessary:

• Logistics partners — to deliver your orders and share delivery updates.
• Payment processors — to process payments, refunds, and BuyPro Credit transactions. Our primary payment processor is Razorpay Software Private Limited.
• Credit-information companies — CIBIL, Experian, and CRIF High Mark — for the purpose of credit underwriting, only when you apply for BuyPro Credit.
• Service providers — cloud hosting (Amazon Web Services, India region), SMS/email gateways, analytics providers, and customer-support tools — bound by strict data-processing agreements.
• Government authorities — when compelled by a valid legal process, or to protect our rights, your safety, or the safety of the public.
• Business transfers — in the event of a merger, acquisition, or sale of assets, in which case the recipient will be bound by this Privacy Policy.

5. Cookies & Tracking

We use cookies, local storage, and similar tracking technologies to keep you signed in, remember items in your cart, understand how you use the Platform, and serve relevant advertising. You can manage cookie preferences through your browser settings. Essential cookies (such as session and CSRF tokens) are required for the Platform to function; if you disable them, certain features may not work.

For more details, see our Cookie Policy.

6. Data Security & Retention

We employ industry-standard administrative, technical, and physical safeguards to protect your information. All data in transit is encrypted using TLS 1.2+; data at rest is encrypted using AES-256. We are certified under ISO/IEC 27001:2022, and our payment environment is PCI-DSS compliant. Access to personal data is restricted on a need-to-know basis and is logged for audit.

We retain your personal data for as long as your account is active, and for a further period of up to 7 years thereafter as required by Indian tax and corporate law. BuyPro Credit data is retained for the life of the credit relationship plus 7 years post-closure, in line with RBI Master Directions on Non-Banking Financial Companies.

7. Your Rights

Subject to applicable law, you have the right to:

• Access a copy of the personal data we hold about you.
• Correct or update inaccurate or incomplete data.
• Request deletion of your data, subject to our legal retention obligations.
• Withdraw consent for processing based on consent (without affecting prior lawful processing).
• Object to processing for direct marketing, or where processing is based on legitimate interest.
• Request portability of your data in a structured, machine-readable format.
• Lodge a complaint with the Data Protection Board of India or your local supervisory authority.

To exercise any of these rights, write to our Grievance Officer at privacy@buypro.in. We will respond within 30 days.

8. Children's Privacy

The Platform is not intended for use by children under 18 years of age. We do not knowingly collect personal information from children. If we learn that we have inadvertently collected information from a child, we will delete it as soon as possible. If you believe we hold information about a child, please contact us at privacy@buypro.in.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified to you by email and/or by a prominent notice on the Platform at least 14 days before they take effect. The "Last updated" date at the top of this page reflects when the policy was last revised. We encourage you to review this page periodically.

10. Contact Us

If you have questions, comments, or complaints about this Privacy Policy or our handling of your personal data, please contact our Grievance Officer: