Privacy Policy

1. Data Controller

Indi Andaz is a brand of Prilix Labs (Sole Proprietorship), owned and operated by Pritam Nandi. We act as the data controller for personal information collected through Indi Andaz ( indiandaz.com) in our capacity as the marketplace operator under Indian law, including the Information Technology Act, 2000, IT (Intermediary Guidelines) Rules, 2021, Consumer Protection Act, 2019, and Consumer Protection (E-Commerce) Rules, 2020.

Registered address: 277/A/2,Ashoknagagar, North 24 PGS, Westbengal, PIN-743222

2. Information We Collect

We collect information you provide and information collected automatically when you use our platform:

• Account & profile: name, email address, mobile number
• Orders: delivery address, order history, product preferences, return/refund requests
• Payments: payment reference IDs, transaction status, and masked payment details — we do not store full card numbers, CVV, or net-banking credentials (see Section 4)
• Device & usage: IP address, browser type, operating system, pages visited, referral URLs, and session identifiers
• Cookies & analytics: cookies, local storage preferences, and analytics events (only after you consent — see Section 10)
• Communications: messages sent via our contact form, customer support chats, and notification preferences

3. How We Use Your Information

• Process and fulfil orders placed with independent sellers on our marketplace
• Facilitate payments through our payment gateway and reconcile transactions
• Share delivery details with logistics partners for order fulfilment
• Provide customer support, handle grievances, and resolve disputes
• Send order updates, delivery notifications, and service-related communications
• Improve platform security, detect fraud, and comply with legal obligations
• Analyse platform usage (with consent) to improve your shopping experience
• Send marketing communications only where you have opted in

4. Payment Processing (PayU)

Online payments on Indi Andaz are processed through PayU, an authorised payment gateway. Indi Andaz does not store complete card numbers, CVV, UPI PIN, or internet-banking credentials on our servers. PayU handles card data in compliance with PCI-DSS requirements.

We receive limited payment metadata — such as payment status, transaction reference ID, and masked account details — for order reconciliation, customer support, and fraud prevention. PayU's handling of your data is governed by their privacy policy: PayU Privacy Policy.

5. Delivery & Logistics (Delhivery)

Order fulfilment is handled through Delhivery and other verified courier partners. To deliver your order, we share your name, delivery address, contact number, order details, and package information with Delhivery. Courier partners process this data solely for pickup, transit, and delivery.

6. Meta Pixel & Facebook / Instagram

With your consent, we may use the Meta (Facebook) Pixel and related technologies to measure advertising effectiveness and personalise content. Meta may collect device identifiers, browsing activity, and interaction data according to their policies. You can opt out via our cookie banner or your browser/device settings.

Meta's data practices are described in their Privacy Policy. Meta Pixel and analytics scripts are not loaded until you accept cookies or enable them in Manage preferences.

7. Sharing of Information

We share personal data only as necessary to operate the marketplace:

• Sellers: order and delivery details needed to fulfil your purchase
• Payment partners: PayU for transaction processing
• Logistics partners: Delhivery for shipping and tracking
• Service providers: hosting, email/SMS delivery, and customer support tools under contract
• Legal authorities: when required by applicable Indian law, court order, or government request

We do not sell your personal information to third parties.

8. Your Rights

Under applicable Indian law, you have the following rights regarding your personal data:

• Access: request a copy of personal data we hold about you
• Correction: request correction of inaccurate or incomplete data
• Deletion: request deletion of your account and associated data — see our Data Deletion instructions
• Portability: request your data in a structured, commonly used format where technically feasible
• Withdraw consent: withdraw consent for non-essential processing (analytics, marketing) at any time via cookie preferences or by contacting us

9. Data Retention

• Order records: retained for up to 7 years to comply with GST, tax, and accounting requirements under Indian law
• Account data: retained while your account is active; deleted or anonymised within 30 days of a verified deletion request, except where retention is required by law
• Analytics data: retained in aggregated or anonymised form; raw logs deleted per our internal retention schedule
• Grievance records: retained as required under IT Rules, 2021

10. Cookies & Tracking

We use essential cookies for login sessions, cart functionality, and language preferences. With your consent, we also use cookies for analytics (including Google Analytics) and the Meta Pixel for advertising measurement and personalisation.

You can accept all cookies, reject non-essential cookies, or manage preferences via the cookie banner on your first visit. You may also control cookies through your browser settings. Rejecting non-essential cookies will not affect your ability to browse or purchase on Indi Andaz.

Seller portal, mobile app & Meta (Facebook / Instagram)

Who this applies to: Indi Andaz operates the public marketplace website for shoppers, and a separate seller portal (e.g. seller.indiandaz.com) and seller mobile applications for independent vendors. This section describes data practices when sellers optionally connect their business accounts to our platform. It does not change how ordinary buyers use the storefront.

Why we use Meta: If a seller turns on social automation, we use Meta’s APIs (including Facebook Login and webhooks) so sellers can send optional automated replies—such as product links—when someone comments or messages on their connected Instagram or Facebook Page, according to keyword rules they configure in the seller dashboard. This feature is for seller business accounts, not for marketing to buyers on the main Indi Andaz website.

Data we may process for this feature: When a seller authorizes the connection, we may store and use OAuth tokens, Facebook Page identifiers, Instagram business account identifiers, and webhook payloads needed to operate the feature (for example: comment or message identifiers, text content to match keywords, sender or thread identifiers, and optional media identifiers). We also keep minimal delivery logs (e.g. deduplication keys) so the same event is not processed repeatedly. We do not sell this data. Processing is done to provide the service the seller requested and to secure our systems.

Subprocessors: Meta Platforms (Facebook / Instagram / Messenger) process data according to their terms and privacy policy when sellers use Meta products. We recommend sellers review Meta’s documentation for their own obligations.

Retention & disconnect: Sellers can disconnect Meta from the seller portal or app where the feature is offered; we remove or invalidate stored connection tokens as part of that flow. Other records may be retained where required for accounting, security, or legal compliance. For account deletion requests, see our Data deletion instructions.

11. Security

We implement appropriate technical and organisational measures — including HTTPS/TLS encryption, access controls, and secure payment integration — to protect your personal information. However, no method of transmission over the Internet is completely secure, and we cannot guarantee absolute security.

12. Governing Law & Jurisdiction

This Privacy Policy is governed by the laws of India. Any disputes arising from this policy shall be subject to the exclusive jurisdiction of the courts in West Bengal, India.

Grievance Officer & Contact

For privacy-related queries, data access requests, or grievances under the IT Rules, 2021, contact our Grievance Officer: