Privacy Policy
ResellBazaar (the "website", "we", "us", "our") is a brand owned and operated by Decipher Consultancy Services, a sole proprietorship firm registered in the State of Haryana, India (referred to in this policy as the "Data Fiduciary" for the purposes of the DPDP Act, 2023).
This Privacy Policy describes what personal data we collect from users ("you", "your", or the "Data Principal" under the DPDP Act), the purposes for which we process it, the legal basis for such processing, how long we retain it, the rights you have as a Data Principal, and how you can exercise them. Please read this policy carefully before using resellbazaar.in.
1. Who we are (Data Fiduciary details)
- Legal name of Data Fiduciary: Decipher Consultancy Services
- Nature of entity: Sole proprietorship registered in India
- Brand operated: ResellBazaar (resellbazaar.in)
- Registered location: Haryana, India
- General contact: support@resellbazaar.in
- Grievance Officer: The Proprietor, Decipher Consultancy Services · grievance@resellbazaar.in
2. Personal data we collect
a) Data you provide to us directly
- Name (when you submit our contact form)
- Email address (when you contact us, or subscribe to updates)
- Phone number (optional, only if you provide it in the contact form)
- Message contents (whatever you write in the contact form)
b) Data we collect automatically
- IP address (used for basic security, analytics, and country/region resolution)
- Browser type and version
- Device type (mobile, desktop, tablet)
- Operating system
- Pages visited and duration (to understand which content is useful)
- Referring URL (which site sent you to ours)
- Approximate location (city / state level, derived from IP)
c) Data collected via cookies
We use cookies (small text files stored in your browser) to (i) remember your preferences within a session, (ii) understand aggregate usage patterns through analytics, and (iii) track referrals to affiliate partners. See section 6 (Cookies) below for details.
d) Sensitive personal data
We do not collect financial account data, biometric information, government-issued ID numbers, health records, sexual orientation, religious affiliation, political beliefs, or caste. If you send us any of this information through our contact form (which we do not request), we will delete it upon receipt without processing.
3. Purposes for which we process your data
Under Section 4 of the DPDP Act, 2023, personal data may be processed only for lawful purposes with your consent, or for certain legitimate uses. We process personal data for the following specific purposes:
- Responding to your enquiries — when you submit the contact form, we use your name, email, and message to reply. Legal basis: your consent (given at the moment of form submission).
- Sending you newsletters or updates — only if you have explicitly opted in. Legal basis: your consent, which you may withdraw at any time by unsubscribing.
- Improving website performance — aggregated, anonymised analytics data helps us understand which content is useful. Legal basis: legitimate use under Section 7 of the DPDP Act (for the reasonable purpose of maintaining and improving a service you have accessed).
- Preventing fraud, abuse, and security incidents — IP address, browser fingerprint, and access logs are used to detect and prevent malicious activity. Legal basis: legitimate use (fulfilment of a legal obligation to keep the service secure).
- Complying with legal obligations — where required to respond to lawful requests from courts, law-enforcement agencies, or the Data Protection Board of India.
We do not use your personal data for any purpose other than those listed above. We do not sell your personal data to any third party.
4. How long we retain your data
- Contact form submissions: retained for 24 months, then deleted from our systems. This retention period lets us follow up on ongoing conversations and complies with the DPDP Act's requirement to erase data once its purpose is fulfilled.
- Newsletter subscribers: retained until you unsubscribe, plus 30 days for confirmation logs.
- Server access logs: retained for 90 days for security and troubleshooting, then automatically deleted.
- Analytics data: aggregated and anonymised after 26 months (Google Analytics 4 default). Individual identifiers are not retained beyond this period.
- Legal/compliance records: retained for as long as required under applicable Indian law (typically 7 years for financial records under the Income Tax Act, if applicable).
5. Your rights as a Data Principal (DPDP Act, Sections 11–14)
The Digital Personal Data Protection Act, 2023 gives you the following rights over your personal data. You may exercise any of these rights by emailing grievance@resellbazaar.in:
- Right to access information — you can request a summary of the personal data we hold about you, the purposes for which it is being processed, and the identities of any third parties with whom it has been shared.
- Right to correction and erasure — you can request correction of inaccurate or misleading personal data, completion of incomplete data, or erasure of personal data that is no longer necessary for the purposes for which it was collected.
- Right of grievance redressal — you can raise a grievance about the way we process your data by contacting our Grievance Officer (details in section 1 above). We will acknowledge your grievance within 3 working days and respond substantively within 30 days.
- Right to nominate — you may nominate another individual to exercise these rights on your behalf in the event of your death or incapacity.
- Right to withdraw consent — where processing is based on your consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing that occurred before withdrawal.
- Right to complain to the Data Protection Board of India — if you are not satisfied with our response, you have the right to file a complaint with the Data Protection Board of India (once operational).
6. Cookies
We use the following cookie categories:
- Strictly necessary cookies — required for the site to function (session identification, CSRF token). No consent required.
- Analytics cookies — Google Analytics 4, used in anonymised mode. Helps us understand aggregate usage patterns. You can opt out via Google's Analytics Opt-out Browser Add-on.
- Affiliate tracking cookies — set by third-party affiliate networks (currently Amazon Associates) when you click an affiliate link on our site. See our Affiliate Disclosure for full details.
You can disable cookies in your browser settings. Doing so will not break the site, but some features (such as analytics-based improvements) will be unavailable.
7. Third-party services and data sharing
We use the following third-party services that may collect or receive your personal data in accordance with their own privacy policies:
- Google Analytics 4 — website analytics. Google Privacy Policy
- Amazon Associates — affiliate network. Amazon Privacy Notice
- Fluxeta — blog content platform serving our blog articles. Fluxeta may set functional cookies on the /blog/ subdirectory.
- Cloud hosting providers — for infrastructure (server hosting, DNS, CDN). These providers process data only as our processors under contract, and do not use your data for their own purposes.
We do not sell, rent, or otherwise commercialise your personal data. We do not share personal data with third parties for advertising or marketing purposes.
8. Cross-border data transfer
Some of the third-party services listed above (notably Google Analytics and Amazon Associates) may process your data on servers located outside India. Under the DPDP Act, cross-border transfer is permitted unless the destination country is specifically notified by the Government of India as restricted. We will update this policy if any of the countries where our processors are based are notified.
9. Security measures
We implement reasonable security practices and procedures (as defined under IT Rules 2011 and the DPDP Act, 2023) commensurate with the sensitivity of the data we hold, including:
- HTTPS (TLS) encryption in transit for all pages of the website
- Access controls limiting who can view contact-form submissions
- Server-side logging and monitoring for suspicious activity
- Regular security updates to our web application and underlying infrastructure
- No storage of financial account information or payment credentials on our systems
Despite these measures, no method of internet transmission or electronic storage is 100% secure. We cannot guarantee absolute security.
10. Data breach notification
In the event of a personal data breach that is likely to result in significant harm to any Data Principal, we will (a) notify the Data Protection Board of India in the manner and within the timeframe prescribed by the Board, and (b) notify each affected Data Principal directly (typically by email), describing the nature of the breach, the personal data affected, the likely consequences, and the mitigation measures we have taken.
11. Children's data
ResellBazaar is intended for users aged 18 years and above. Under Section 9 of the DPDP Act, 2023, the personal data of children (persons below 18 years of age) may not be processed without the verifiable consent of a parent or lawful guardian. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact grievance@resellbazaar.in and we will delete it promptly.
12. Grievance redressal
If you have any complaint, concern, or grievance about how we handle your personal data, please contact our Grievance Officer:
- Name: The Proprietor, Decipher Consultancy Services
- Email: grievance@resellbazaar.in
- Address: Decipher Consultancy Services, Haryana, India (full postal address available on written request)
- Acknowledgement: within 3 working days
- Substantive response: within 30 days from the date of grievance
If you are not satisfied with our response, you have the right to file a complaint with the Data Protection Board of India under Section 27 of the DPDP Act, 2023.
13. Changes to this policy
We may update this Privacy Policy from time to time to reflect changes in law, our services, or our data-handling practices. Material changes will be indicated by updating the "Last updated" date at the top of this page. Where the change is material, we will notify registered users by email at least 15 days before the change takes effect.
14. Contact
Business owner: Decipher Consultancy Services (Sole Proprietorship)
Brand: ResellBazaar (resellbazaar.in)
Registered state: Haryana, India
General enquiries: support@resellbazaar.in
Data privacy grievances: grievance@resellbazaar.in