This Privacy Policy is published in accordance with the provisions of Rule 3(1) of the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, which require publishing the privacy policy for collection, use, storage, and transfer of sensitive personal data or information.
TownZa Vendor Privacy Policy
This policy explains what data we collect from vendors, how we use it, and the choices you have.
TownZa Technologies Private Limited ("TownZa", "we", "us", or "our") is committed to protecting your personal information. By using the TownZa Vendor Portal, you consent to the collection, use, and sharing of your information as described in this Privacy Policy. If you do not agree, please discontinue use of the Portal immediately.
1 Information We Collect
We collect the following categories of information when you register and use the Vendor Portal:
- Identity & Contact — name, email address, phone number, business name, and profile photo.
- Business & KYC — GSTIN, PAN, business registration documents, and store address.
- Financial — bank account details required for settlement payouts.
- Store Content — product listings, images, descriptions, pricing, and offers you upload.
- Usage Data — pages visited, features used, device type, IP address, browser, and session timestamps.
- Communications — messages and support tickets you send to our team.
- Device & Log Data — crash reports, performance data, and error logs automatically collected during Portal use.
2 How We Use Your Information
We use your data to:
- Create and manage your vendor account and store.
- Process orders, calculate commissions, and settle payments to your bank account.
- Verify your identity and business credentials (KYC) as required by applicable law.
- Send transactional notifications — order alerts, payout confirmations, and policy updates.
- Improve the Portal through analytics and usage insights.
- Comply with legal, regulatory, and tax obligations (including GST filings).
- Prevent fraud, abuse, and unauthorised access to the Platform.
- Provide customer support and resolve disputes.
3 Legal Basis for Processing
- Contract — processing necessary to perform the Vendor Agreement and deliver our services.
- Legal obligation — compliance with tax, KYC, and regulatory requirements under Indian law.
- Legitimate interests — fraud prevention, platform security, and service improvement.
- Consent — where you have opted in to marketing communications. You may withdraw consent at any time.
4 Sharing Your Information
We do not sell your personal data. We may share it only with:
- Payment processors — to facilitate settlements and refunds to your registered bank account.
- Logistics partners — where delivery fulfilment requires sharing shipment and order details.
- Cloud & infrastructure providers — hosting, storage, and analytics tools operating under data processing agreements.
- Law enforcement / regulators — when required by applicable law, court order, or government authority.
- Customers — limited store and seller information necessary to complete a purchase (e.g., store name, city).
All third-party service providers are contractually obligated to process your data only as instructed by TownZa and to maintain appropriate technical and organisational security measures.
5 Cookies & Tracking Technologies
- Essential cookies — required for the Portal to function (login sessions, CSRF protection). Cannot be disabled.
- Analytics cookies — help us understand how the Portal is used. Collected anonymously.
- Preference cookies — remember your language and display settings.
You can control non-essential cookies through your browser settings; however, disabling essential cookies may affect Portal functionality.
6 Data Retention
We retain your personal data for as long as your vendor account is active and for a period thereafter as required by law — typically 7 years for financial and tax records as mandated by Indian tax law. Store content and usage logs are deleted or anonymised within 90 days of account closure, unless retention is required by law.
7 Data Security
- Encrypted data transmission using TLS/HTTPS for all Portal communications.
- Hashed and salted storage of account passwords — never stored in plain text.
- Role-based access controls limiting data access to authorised personnel only.
- Regular security audits and vulnerability assessments.
While we strive to protect your data, no system is completely immune to risk. Please safeguard your login credentials and notify us immediately of any suspected breach.
8 Your Rights
- Access — request a copy of the personal data we hold about you.
- Correction — ask us to correct inaccurate or incomplete data.
- Deletion — request erasure of your data where we have no lawful reason to retain it.
- Portability — receive your data in a structured, machine-readable format.
- Objection — object to processing based on legitimate interests.
- Withdraw consent — opt out of marketing communications at any time.
To exercise any of these rights, contact us at privacy@mytownza.com. We will respond within 30 days.
9 Children's Privacy
The Vendor Portal is intended for use by adults aged 18 and above. We do not knowingly collect personal data from anyone under 18. If you believe a minor has used our Portal, please notify us at privacy@mytownza.com.
10 Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated via email or a prominent notice on the Vendor Portal at least 14 days before they take effect. Continued use of the Portal after the effective date constitutes acceptance of the revised Policy.
11 Grievance Officer & Contact
In accordance with the Information Technology Act, 2000, our Data Protection and Grievance Officer can be contacted for any privacy-related queries or complaints: