NearBaazar
DPDP Act 2023 & IT Act §79 Compliant

Privacy Notice & Data Rights

NearBaazar is committed to uncompromising privacy and cryptographic data protection. We operate solely as a digital directory and price discovery platform under Section 79 of the Indian Information Technology Act, 2000.

1. Data Fiduciary & Intermediary Identity

Under the Digital Personal Data Protection Act, 2023 (DPDP Act 2023), NearBaazar Technologies (“NearBaazar”) operates as a Data Fiduciary for user identity, and an Intermediary under the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021.

Registered Address: Nayyar Complex, Main Bajar Shahpurkandi, Jugial 145029, Punjab, India

Grievance Officer: Grievance Redressal Officer (grievance@nearbaazar.com)

2. Personal Data We Collect & Purpose Limitation

We collect strictly minimal personal data necessary to facilitate neighborhood price discovery and in-store reservations:

  • Mobile Phone Number: Used exclusively for SMS/WhatsApp OTP authentication and transmission of stock reservation pickup codes.
  • Geographic Location / PIN Code: Used locally in browser memory or query parameters to calculate nearest distances to neighborhood retailers.
  • Store Inquiries & Stock Holds: Transmitted directly to the chosen verified merchant to hold requested items on shelf for customer pickup.
Zero Third-Party Sale: NearBaazar never sells, rents, or licenses your personal data to advertisers, data aggregators, or brokers.

3. Security Architecture (AES-256-GCM Envelope Encryption)

Customer contact numbers are encrypted in memory prior to database insertion using AES-256-GCM with master key rotation versioning. Plaintext telephone numbers are never logged in application diagnostics or persistent database columns. Phone numbers presented in user interfaces are always securely masked (e.g. +91 98*** **210).

4. Your Rights Under DPDP Act 2023

Right to Access & Portability

You can export a machine-readable JSON copy of your personal data, session history, and reservations at any time.

Export My Data in Profile

Right to Correction & Erasure

You have the right to correct inaccurate personal data or request irreversible cryptographic deletion of your account and inquiry logs.

Submit Redressal Request →

5. Grievance Redressal Mechanism

In accordance with Rule 3(2) of the Information Technology (Intermediary Guidelines) Rules, 2021, and Section 13 of the DPDP Act 2023, you may contact our Grievance Redressal Officer:

Designation: Grievance Redressal Officer

Email: grievance@nearbaazar.com

Resolution SLA: Acknowledgment within 24 hours; disposal within 15 working days.