This Policy applies to visitors and registered users of the Platform. It does not cover third-party sites/services we link to (payments, couriers, socials).

• Identifiers & contact: name, email, phone, billing & shipping address.
• Account & transactions: order details, cart, refunds, support tickets.
• Payments: payment method token/ID (processed by payment partners), partial masked details, success/failure status.
• Technical & device: IP, device/browser info, OS, app version, language, time zone, crash logs, performance metrics.
• Usage & interactions: pages visited, clicks, search terms, wishlists, referral codes, campaign parameters.
• Location: approximate; precise location only with your consent.
• User Content: reviews, ratings, questions/answers, attachments (images/video).
• From others: sellers (for order fulfillment), logistics partners (tracking events), payment partners (status), and, where lawful, public sources.

• Contract: to process orders, payments, shipping, returns/refunds, and support.
• Consent: marketing communications, precise location, non-essential cookies/SDKs.
• Legal obligation: tax/GST/consumer protection, grievance redressal.
• Legitimate interests: security/fraud prevention, service improvement, analytics, Ecoverify™-backed claim verification, personalization (balanced with your rights).

• Orders & payments: process purchases, issue invoices, handle refunds.
• Shipping & delivery: share address/contact with couriers; send tracking updates.
• Account & support: login, preferences, respond to queries, resolve grievances.
• Safety & fraud: detect abuse, prevent chargebacks, ensure policy compliance.
• Personalization & recommendations: tailor listings, categories, and content.
• Analytics & quality: measure performance, A/B test features, fix crashes.
• Marketing (with consent): send offers, newsletters, referral updates; you can opt out anytime.
• Legal compliance: respond to lawful requests and regulatory obligations.

We use cookies/SDKs for:

• Essential (login, cart, checkout)
• Performance (load times, crash logs)
• Analytics (usage trends)
• Marketing (only with consent)

Manage your preferences via your browser/app settings and our Cookie/Tracking Preferences link on the Platform.

To verify sustainability and health-related claims (e.g., vegan, plastic-free, organic), we may process product labels, ingredients, packaging, certifications, and seller-submitted documents using automated tools (Ecoverify™) with human review.

We do not use your personal content to train public models.

Outputs are retained only as long as needed to support transparency, audits, or legal requirements.

We share personal data with:

• Service providers: payments, logistics/courier, cloud/hosting, analytics, communications (email/SMS/WhatsApp), fraud prevention.
• Sellers: limited order details necessary to fulfill your purchase.
• Authorities: when required by law or to protect rights, safety, or property.
  We do not sell or rent your personal information to advertisers

Where data is processed outside India, we use appropriate safeguards (e.g., contractual clauses or equivalent protections) and share only what’s necessary for the stated purposes.

We retain data only as long as necessary or required by law. Typical periods:

• Orders & invoices (tax/GST): up to 8 years.
• Account & preferences: while active + 24 months of inactivity.
• Marketing consents & events: 24 months after last engagement.
• Logs & analytics: 12–18 months.

We delete or de-identify data after the retention period unless legally required otherwise.

Subject to applicable law (including DPDP Act, 2023, as notified) and GDPR principles (where relevant), you may:

• Access your data; Rectify inaccuracies; Erase data when no longer necessary;
• Restrict/object to certain processing; Port data in a structured format;
• Withdraw consent (e.g., marketing, precise location) at any time.

To exercise these rights, email support@ecoyaan.com. We may verify your identity before acting on requests.

Marketing opt-out: use the unsubscribe link in emails; reply STOP for SMS/WhatsApp; or email support.

The Platform is not directed to children under 18. Minors may use it only with a parent/guardian. Parents can request deletion of a minor’s data via support.

We use reasonable technical and organizational measures (encryption in transit, access controls, network safeguards). No method is 100% secure; if a breach occurs, we will notify affected users and authorities as required by law.

Third-party sites/services (payment gateways, couriers, social media) have their own privacy terms. Review them before use.