At ORDVIO, we value your trust and are committed to safeguarding your personal data. This Privacy Policy details how we collect, process, store, and protect information, formulated in compliance with the **Digital Personal Data Protection (DPDP) Act, 2023** of India.
1. Roles in Data Processing
- Data Fiduciary: Ordvio acts as a Data Fiduciary regarding the personal information collected from Merchants during onboarding (e.g. name, email, phone, business address).
- Data Processor: Ordvio acts as a Data Processor on behalf of the Merchant regarding the end-buyer customer information (e.g. buyer names, addresses, phone numbers) captured to complete online order dispatches.
2. Collection and Processing of Personal Data
We only process personal data for specific, clear, and lawful purposes:
- Onboarding & Setup: Storing merchant details to register white-label subdomains and provision tenant databases.
- Transactional Updates: Processing buyer contact numbers to route order statuses via Meta’s WhatsApp Cloud API.
- Service communications: Dispatched under explicit consent to notify merchants of invoice settlements or support tickets.
3. Rights of the Data Principal
Under the DPDP Act, 2023, you (as the Data Principal) hold the following rights which can be exercised by contacting our Grievance Officer:
- Right to Access: Request a summary of the personal data currently processed and processing activities.
- Right to Correction and Erasure: Rectify inaccurate details or request deletion of personal records when the purpose of collection is fulfilled.
- Right to Withdraw Consent: Revoke consent at any time. Withdrawal will not affect the legality of processing based on consent before its withdrawal.
- Right to Grievance Redressal: Register grievances with our grievance desk or submit complaints to the Data Protection Board of India if unresolved.
4. Data Retention and Security Safeguards
We implement industry-grade security measures (including SSL encryption and multi-tenant database isolation) to prevent unauthorized data access or leakages. We retain your personal data only as long as your merchant tenant account is active, or as required by financial audit regulations under Indian law.
5. Grievance Redressal Desk
In case of queries, consent withdrawals, or grievances related to data processing, you may write to our designated Grievance Officer:
Grievance Redressal Officer
Designation: Data Protection Lead
Email: privacy@ordvio.in
Office Address: Ordvio Technologies Private Limited, Ahmedabad, Gujarat, India.