Privacy Policy

1. Data Fiduciary

Hyra is the Data Fiduciary for personal data processed through hyrabuy.com and related apps under India's Digital Personal Data Protection Act, 2023 (DPDP Act).

2. Information We Collect

• Account and contact details (name, email, phone, shipping/billing address)
• Order, payment (via Razorpay), and return information
• Seller KYC documents submitted through the vendor panel (stored securely)
• Communications with support or sellers on the platform
• Product reviews, ratings, and marketplace activity
• Device, log, and cookie data needed to operate and secure the Site

3. Purpose of Processing

• Fulfil orders and provide customer support
• Enable seller onboarding, payouts, and compliance checks
• Prevent fraud, abuse, and security incidents
• Send transactional messages and, with consent, marketing updates
• Comply with Indian e-commerce, tax, and consumer protection laws

4. Sharing

We share personal data with sellers only as needed to fulfil your order; with payment, logistics, and cloud providers acting as Data Processors; and with authorities when required by law. We do not sell personal data.

5. Your Rights under the DPDP Act

• Right to access a summary of personal data we process about you
• Right to correction and erasure of inaccurate or unnecessary personal data
• Right to withdraw consent for consent-based processing
• Right to grievance redressal with the Data Fiduciary
• Right to nominate another individual to exercise rights in case of death or incapacity

To exercise these rights, email privacy@hyrabuy.com or support@hyrabuy.com. We will respond within a reasonable period as required by law.

6. Retention & Security

We retain personal data only as long as needed for the purposes above or as required by law (for example, tax and dispute records). We apply organisational and technical safeguards appropriate to the sensitivity of the data, including access controls for KYC documents.

7. Children

Hyra is not directed at children under 18. We do not knowingly process children's personal data without verifiable consent of a parent or lawful guardian as required under the DPDP Act.

8. Grievance & Contact

For privacy grievances, contact privacy@hyrabuy.com. For marketplace consumer grievances under the Consumer Protection (E-Commerce) Rules, 2020, see the Grievance Officer details on our Contact page.

9. Changes

We may update this policy from time to time. Material changes will be reflected by updating the "Last updated" date on this page.