Privacy Policy

Digital Book of India Private Limited, Floor No. 7, Site-IV, Behind Venice Mall, Surajpur, Greater Noida, Gautam Buddha Nagar, Uttar Pradesh 201310 (“we”) runs Diwali Mela. This policy explains how we handle personal data of customers, visitors, sellers and franchise partners, under the Information Technology Act, 2000, the SPDI Rules, 2011 and the Digital Personal Data Protection Act, 2023. We decide why and how your data is used (the “data fiduciary”).

• Account details: name, email, mobile number, password (stored only as a hash), and your verification status.
• Orders: products bought, delivery or pickup details, addresses, payment status and amount, coupons, cancellations, refunds and complaints. We do not see or store your full card, UPI PIN or net-banking details; the payment gateway handles them.
• Sellers: business and shop details, GST number, bank account for payouts, and identity verification (KYC): for Aadhaar, we use DigiLocker and keep only the last four digits and the verification result.
• Franchise partners: name, date of birth to confirm they are 18 or over, contact details, bank details for rewards, identity verification (Aadhaar through DigiLocker and the photograph of the Aadhaar that they upload), and PAN where tax rules require it.
• Use of the Platform: device, browser, IP address, pages and products viewed, searches, your location when you give permission, and cookies.
• The assistant and voice search: what you type or say, and the products it suggests.
• Messages: your messages with us, and the calls to you that our partners record or log.
• We may also receive information from a seller, a franchise partner or a delivery partner who is dealing with you.

• To create your account, take and deliver your orders, process payments, refunds and payouts, and tell you about them.
• To verify identity and prevent fraud, misuse and abuse of offers.
• To give you support, handle complaints, and meet legal duties (tax, accounting, the e-commerce rules, requests from authorities).
• To show you relevant products and improve search, the assistant and the Platform.
• To run Spin & Win, quizzes, vouchers and offers you take part in.
• To send offers and updates, only where you have agreed or where the law allows. You can stop them at any time.

We do not sell your personal data. We share it only as needed:

• The seller of the product you buy gets your name, phone number and delivery address (or your pickup details) to pack, hand over and support the order. Sellers must use it only for your order.
• Delivery partners get your name, address and phone number to deliver the parcel.
• Payment gateway and banks process payments and refunds.
• Verification providers, including DigiLocker and our identity-verification partner, check the identity of sellers and franchise partners.
• Service providers who help us run the Platform: hosting, email, SMS and WhatsApp, maps, live video, analytics, and the AI service that powers search and the assistant. They process data on our instructions.
• Franchise partners who invited a seller can see that seller's registration progress, and the leads they manage themselves.
• Authorities where the law requires it, and an adviser or buyer in a sale of our business, under confidentiality.

Some providers are outside India. We choose providers with proper safeguards.

We use cookies and similar storage to keep you signed in, remember your cart, understand how the Platform is used and keep it secure. You can block cookies in your browser; some parts of the Platform may then not work. We keep your sign-in token in memory and a secure cookie that scripts cannot read.

We keep data while your account is open and for as long as the law requires after that (for example, tax and invoice records for several years), and to settle disputes. Verification records of sellers and franchise partners and payout records are kept as long as the tax and accounting rules need. When data is no longer needed, we delete or anonymise it.

Data travels over encrypted connections, passwords are hashed, access is limited to those who need it, and sign-in is protected against repeated guessing. No system is completely secure, so keep your password and codes private and tell us at once if you suspect misuse. If a breach affects you, we will tell you and the authorities as the law requires.

• See what we hold about you and get a copy; correct what is wrong or out of date.
• Ask us to erase your data. We will do so unless we must keep it by law, or for an order in progress or a dispute.
• Withdraw consent you have given (for example for marketing) at any time. This does not affect what was done before.
• Nominate someone to exercise your rights if you die or cannot do so yourself.
• Complain to us, and if you are not satisfied, to the Data Protection Board of India once it is in place.

To use these rights, write to contact@digitalbookofindia.com. We may ask you to prove who you are, and aim to answer within 30 days.

The Platform is for people 18 and over. We do not knowingly collect a child's data. If a parent or guardian places an order for a child, they are responsible for it. If you think a child has given us data, write to us and we will delete it.

The Platform may link to other websites (for example a seller's page, a map, or another shop's price). We are not responsible for their privacy practices.

We may update this policy and will show the date at the top. For a material change we will tell you on the Platform or by email.

Grievance Officer, Digital Book of India Private Limited, at the address above. Email contact@digitalbookofindia.com, phone +91 98180 73779. We acknowledge a complaint within 48 hours and resolve it within one month. See also the Terms of Use.