1. Overview & Scope
What this policy covers and who it applies to.
We place the highest standard on the privacy and security of your personal information. This policy is a legal document between you and BonziCart. By using our website or app, you agree to the practices described here.
This Privacy Policy describes how Global Logica Software Technologies (BonziCart) ("BonziCart", "we", "us", "our") collects, uses, stores, shares, and protects personal information when you use our marketplace platform at bonzicart.com, our mobile applications, and all related services.
This policy applies to all users of our platform — including Buyers, Sellers, Affiliates, Visitors, and any other individuals who interact with BonziCart's services. It covers information collected online as well as through phone, email, chat, and in-person interactions with our team.
This policy does not apply to the privacy practices of third-party Sellers, payment processors, or other websites linked from our platform. We encourage you to review the privacy policies of any third-party services you use.
How Your Data Flows
Data
Collects
Stored
Services
Protected
2. Who We Are (Data Controller)
BonziCart's identity as the Data Fiduciary under the DPDP Act 2023.
Data Fiduciary
Under India's Digital Personal Data Protection Act 2023, Global Logica Software Technologies (BonziCart) acts as the Data Fiduciary — the entity that determines the purpose and means of processing your personal data. We are responsible for ensuring your data is processed lawfully, fairly, and transparently.
3. What Personal Data We Collect
The categories of information BonziCart collects from and about you.
Hover / tap each card to see examples.
Identity Data
Name, gender, date of birth, nationality, marital status, PAN, Aadhaar (for KYC), and government-issued IDs.
Contact Data
Email address, mobile number, phone number, delivery address(es), billing address, and communication preferences.
Transaction Data
Order history, purchase amounts, payment method (tokenized), refund records, seller payouts, and invoice data.
Technical Data
IP address, browser type and version, device identifiers, OS, screen resolution, session duration, and crash logs.
Behavioral Data
Pages visited, search history, products viewed, wishlists, click patterns, time spent, cart data, and referral source.
Communication Data
Customer support tickets, chat logs, call recordings (for quality/training), reviews, ratings, Q&As, and feedback.
Social Data
Social profile information linked when you use "Sign in with Google/Facebook", including public profile and email.
Location Data
Pincode, city, state for delivery purposes. GPS location (only with explicit permission) for hyper-local features.
We collect sensitive personal data (PAN, Aadhaar, financial information) only where strictly necessary and with your explicit consent. Such data is encrypted at rest and in transit at all times.
4. How We Collect Your Data
The methods and touchpoints through which BonziCart gathers your information.
Direct Collection (You Provide It)
When you register an account, place an order, list a product, contact support, complete a survey, post a review, or interact with any form on our platform.
Automated Collection (Platform Activity)
As you navigate our platform, we automatically collect technical and behavioral data through cookies, web beacons, pixels, log files, and similar tracking technologies.
Third-Party Sources
We may receive data about you from payment processors (transaction confirmation), logistics partners (delivery status), social login providers (profile data with your consent), and fraud prevention services.
Customer Support Interactions
Phone calls with our support team are recorded for quality assurance and training. Chat transcripts are retained to provide continuity of service. Emails are stored for compliance purposes.
Public Sources
We may supplement your information with publicly available data (such as business registry records for Seller verification) and government databases for KYC compliance.
Seller-Generated Data
When a Seller processes your order, they may collect and share order-relevant details with us. Sellers are bound by our Seller Agreement to use this data only for order fulfillment.
Some information (marital status, spending preferences, annual income) is optional. You may choose not to provide it — your core buying or selling experience will not be affected.
5. Legal Basis for Processing DPDP 2023
The lawful grounds under which BonziCart processes your personal data.
India's Digital Personal Data Protection Act 2023 requires us to have a lawful basis for every data processing activity. We rely on the following grounds:
6. How We Use Your Data
The specific purposes for which BonziCart processes your personal information.
Account Management & Authentication
Verifying your identity, maintaining your account, enabling login, managing preferences, and providing account-related communications.
Order Processing & Fulfillment
Processing payments, coordinating with Sellers and logistics partners, sending order confirmations, shipping updates, and delivery notifications.
Customer Support
Responding to queries, resolving disputes, processing returns/refunds, and providing after-sales service through email, chat, and phone channels.
Personalization
Tailoring product recommendations, search results, homepage content, and promotional offers based on your browsing history, purchase behavior, and stated preferences.
Marketing & Promotions
Sending promotional emails, SMS alerts, push notifications, and WhatsApp messages about new products, special offers, and BonziCart features — with your prior consent and subject to your opt-out preferences.
Fraud Prevention & Safety
Detecting and preventing fraudulent transactions, counterfeit listings, account takeovers, review manipulation, and other policy violations using automated and manual review systems.
Platform Improvement
Conducting internal research, analyzing usage patterns, testing new features, improving platform performance, and fixing bugs using aggregated and anonymized data.
Legal & Regulatory Compliance
Fulfilling obligations under GST law, income tax regulations, the IT Act, DPDP Act, Consumer Protection Act, and responding to valid government or court orders.
Surveys & Feedback
Occasionally inviting you to complete surveys about your shopping experience, product satisfaction, or platform features to help us improve our services.
Seller KYC & Verification
Verifying Seller identity using PAN, Aadhaar, GST registration, and bank account details as required by law before activating selling privileges.
7. Sharing of Personal Information
Who BonziCart shares your data with and under what circumstances.
BonziCart does not sell, rent, or trade your personal information to third parties for money. Your data is shared only in the limited circumstances described below.
8. Cookies & Tracking Technologies
How BonziCart uses cookies, web beacons, and similar technologies on our platform.
BonziCart uses cookies — small text files stored on your device — and similar technologies (web beacons, pixels, local storage) to operate our platform, remember your preferences, and improve your experience. We use both session cookies (deleted when you close your browser) and persistent cookies (stored until expiry or manual deletion).
| Cookie Type | Purpose | Duration | Opt-Out? |
|---|---|---|---|
| Strictly Necessary | Login sessions, shopping cart, checkout flow, security tokens | Session | No — required for platform function |
| Functional | Remember your language, location, theme preferences, recently viewed items | 12 months | Yes — via Cookie Settings |
| Performance / Analytics | Page load times, error logs, feature usage — helps us improve the platform (Google Analytics, Mixpanel) | 13 months | Yes — via Cookie Settings |
| Targeting / Marketing | Personalized ads, retargeting campaigns, affiliate tracking (Google Ads, Meta Pixel) | 90 days | Yes — via Cookie Settings or browser |
| Third-Party Social | Social media share buttons, embedded videos, "Sign in with" social login | Varies | Yes — disable in browser |
9. Data Retention
How long BonziCart keeps your personal data and why.
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, and reporting requirements. Different types of data have different retention periods based on their nature and purpose.
| Data Category | Retention Period | Reason |
|---|---|---|
| Account & profile data | Duration of account + 3 years post-closure | Service provision, dispute resolution |
| Transaction & order records | 7 years from transaction date | GST compliance, Income Tax Act |
| KYC documents (PAN, Aadhaar) | 5 years post account closure | PMLA & RBI guidelines |
| Customer support records | 3 years from case closure | Dispute resolution, training |
| Call recordings | 90 days | Quality assurance |
| Marketing data & consents | Until you withdraw consent + 1 year | Proof of consent, DPDP compliance |
| Cookies & analytics data | 13 months (aggregated after) | Platform improvement |
| Fraud & security logs | 5 years | Legal defense, fraud prevention |
Data is securely deleted or anonymized once the retention period expires. Anonymized, aggregated data may be retained indefinitely for research and analytics purposes as it can no longer be linked to any individual.
10. Data Security
The technical and organizational measures BonziCart uses to protect your data.
BonziCart implements comprehensive technical and organizational security measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction.
Encryption at Rest & Transit
All sensitive data is encrypted using AES-256 at rest. All data in transit uses TLS 1.3 encryption.
PCI-DSS Compliance
Payment processing is handled by PCI-DSS Level 1 certified payment gateways. BonziCart never stores full card numbers.
Two-Factor Authentication
2FA is available for all accounts and required for high-value seller operations and payment changes.
Security Audits
Regular third-party penetration testing, vulnerability assessments, and code security reviews are conducted.
Access Controls
Strict role-based access controls ensure only authorized BonziCart employees can access personal data on a need-to-know basis.
Breach Response
In case of a data breach, affected users will be notified within 72 hours as required by the DPDP Act 2023.
Secure Data Centres
Data is hosted in ISO 27001-certified, India-based data centres with physical security, redundancy, and disaster recovery.
Fraud Detection
Real-time automated systems monitor transactions, logins, and listings for fraud, anomalies, and policy violations.
While we take every precaution, no online system is 100% secure. BonziCart is not liable for security breaches that occur during your online transactions outside our control. You are responsible for keeping your account credentials secure and for reporting any suspicious activity immediately.
11. Your Privacy Rights DPDP 2023
The rights you hold over your personal data under the DPDP Act 2023 and how to exercise them.
Hover / tap each right to see how to exercise it.
Right to Access
Know what personal data we hold about you.
How to Exercise
Email [email protected] with your registered email. We will provide a summary of your data within 30 days at no charge.
Right to Correct
Rectify inaccurate or incomplete personal data.
How to Exercise
Update most data directly in "My Account" settings. For KYC/identity corrections, email us with supporting documents.
Right to Erase
Request deletion of your personal data.
How to Exercise
Submit a deletion request to [email protected]. Data legally required for compliance will be retained per our retention schedule. Other data deleted within 30 days.
Right to Withdraw Consent
Withdraw consent for optional data processing at any time.
How to Exercise
Use the "Privacy Preferences" page in your account, unsubscribe links in emails, or email [email protected]. Withdrawal does not affect past lawful processing.
Right to Portability
Receive your data in a structured, machine-readable format.
How to Exercise
Request a data export via [email protected]. We'll provide your data in JSON or CSV format within 30 days of your verified request.
Right to Object
Object to processing based on legitimate interests or for direct marketing.
How to Exercise
For marketing, use the unsubscribe link in any email. For other objections, email [email protected]. We'll assess and respond within 15 business days.
Right to Nominate
Nominate another person to exercise your rights after your death (DPDP 2023).
How to Exercise
Submit a nomination request with the nominee's details and your written authorization to [email protected]. The nominee can exercise your rights if you are deceased or incapacitated.
Right to Complain
Lodge a complaint with the Data Protection Board of India.
How to Exercise
If you are unhappy with how we handle your data, first contact our Grievance Officer. If unresolved, you may approach the Data Protection Board of India at dpboard.gov.in.
We aim to respond to all privacy rights requests within 30 days. Complex requests may require up to 90 days — we'll notify you if this is the case. There is no fee for exercising your rights.
12. Children's Privacy
BonziCart's approach to protecting the privacy of minors.
BonziCart's platform is not directed at or intended for use by children under the age of 18. We do not knowingly collect personal data from minors.
If you are under 18 years of age, you may only use BonziCart under the direct supervision of a parent or legal guardian who accepts these Terms and this Privacy Policy on your behalf and takes full responsibility for your use of the platform.
If we discover that we have inadvertently collected personal data from a child under 18 without verifiable parental consent, we will promptly delete such data from our systems. Parents or guardians who believe their child has provided us with personal information without consent should contact us immediately at [email protected].
Under the DPDP Act 2023, BonziCart treats any data principal who indicates they are under 18 as a child, and applies additional processing restrictions including prohibition of behavioral tracking and targeted advertising without verifiable parental consent.
13. International Data Transfers
How and when BonziCart transfers data outside India.
BonziCart primarily stores and processes your data on servers located within India. However, some of our service providers (cloud infrastructure, analytics tools, communication platforms) may process data in other countries.
When we transfer data outside India, we ensure appropriate safeguards are in place, including standard contractual clauses, binding corporate rules, or transfers only to countries deemed adequate under the DPDP Act 2023 or other applicable frameworks.
14. Third-Party Links & Services
How BonziCart handles links to external websites and embedded third-party services.
Our platform may contain links to third-party websites, embedded content (videos, maps, social feeds), and third-party services (payment gateways, social login providers). This Privacy Policy applies only to BonziCart's platform and does not cover the privacy practices of any third party.
When you click on a third-party link or use a third-party service embedded on our platform, you leave BonziCart's environment. We encourage you to carefully review the privacy policies of each website you visit or service you use.
BonziCart is not responsible for the content, security, privacy policies, or practices of any third-party website or service. Inclusion of a link on our platform does not constitute endorsement.
15. Marketing Communications
How BonziCart sends promotional content and how you can opt out.
With your prior consent, BonziCart may send you promotional emails, SMS messages, WhatsApp messages, and push notifications about new products, exclusive offers, platform updates, and personalized recommendations based on your shopping behavior.
16. Grievance Officer Mandatory Under DPDP 2023
BonziCart's designated officer for handling privacy complaints and data rights requests.
Your First Point of Contact
In accordance with the Information Technology Act 2000, the IT (Intermediary Guidelines) Rules 2021, and the Digital Personal Data Protection Act 2023, BonziCart has designated a Grievance Officer to address privacy-related concerns, data rights requests, and content-related complaints from users within India.
If your complaint is not resolved to your satisfaction by our Grievance Officer, you may escalate your concern to the Data Protection Board of India established under the DPDP Act 2023. Visit meity.gov.in for more information.
17. Our Data Processing Standards
The principles BonziCart follows when processing every piece of personal data.
18. Changes to This Privacy Policy
How and when BonziCart updates this policy and how you will be informed.
BonziCart may update or amend this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or business operations. We reserve the right to make such changes at any time.
When we make material changes — such as new categories of data being collected, new sharing arrangements, or changes to your rights — we will notify you prominently:
We encourage you to review this Privacy Policy regularly. Your continued use of BonziCart after any change is posted constitutes your acceptance of the updated policy. If you do not agree with a material change, you should stop using the platform and request account deletion.
19. Frequently Asked Questions
Common privacy questions answered clearly.
20. Contact Us
Reach BonziCart's privacy, legal, and support teams for any data-related queries.
Grievance Officer
Privacy complaints, legal notices, and unresolved data concerns.
[email protected]Global Logica Software Technologies (BonziCart)
Data Protection & Compliance Team
#20/3, Kaushika Plaza, 80 Feet Road, KHB Colony, 2nd Stage, Basaveshwaranagar, Bengaluru, Karnataka, 560079, India
Hours: Mon–Sat, 9:00 AM – 6:00 PM IST