D2C Bazaar
Privacy Policy
Last updated: April 2026
We respect your privacy. D2C Bazaar collects only what is necessary to operate the platform. We do not sell your personal data.
1. Who We Are
D2C Bazaar (d2cbazaar.com) is a brand discovery platform operated from India. For privacy-related queries, contact us at [email protected].
2. What Data We Collect
We collect the following categories of personal data:
From registered users:
- Name and email address (on registration)
- Profile information (display name, profile photo if provided)
- Login data (via Google OAuth if used)
- Usage data (pages visited, searches made, brands viewed)
From brand owners:
- Name, email, brand name, website, and role
- Brand content submitted (descriptions, images, offer codes)
- Billing information (processed by Razorpay — we do not store card details)
- Claim form submissions and correspondence
From all visitors:
- IP address and browser/device information
- Cookies and usage analytics (see Section 6)
3. How We Use Your Data
We use your data to:
- Operate and improve the platform
- Authenticate your account and maintain security
- Send transactional emails (account confirmation, claim verification, subscription receipts)
- Notify brand owners of platform updates relevant to their listing
- Analyse usage patterns to improve the user experience
- Comply with legal obligations
We do not use your data for advertising. We do not sell, rent, or share your personal data with third parties for marketing purposes.
4. Legal Basis for Processing (IT Act 2000 & Applicable Law)
We process your data on the following bases:
- Contractual necessity — to provide the service you have signed up for
- Legitimate interests — to operate and improve the platform
- Consent — for optional communications (you may withdraw consent at any time)
- Legal obligation — where required by Indian law
5. Data Sharing
We share your data only with:
- Razorpay — for payment processing (brand subscriptions). Razorpay’s privacy policy applies to data they process.
- Google — for OAuth login. Google’s privacy policy applies.
- Hosting providers (AWS Lightsail) — for server infrastructure. Data is stored in India or AWS regions.
- Law enforcement — if required by law or court order
We do not share your data with any other third parties without your explicit consent.
6. Cookies
D2C Bazaar uses cookies for:
- Session management (keeping you logged in)
- Caching and performance (W3 Total Cache)
- Analytics (to understand how the platform is used)
You may disable cookies in your browser settings. Some features of the platform may not function correctly if cookies are disabled.
7. Data Retention
We retain your personal data for as long as your account is active or as needed to provide services. If you delete your account, we will delete your personal data within 30 days, except where retention is required by law.
Brand listing data may be retained for archival and SEO purposes even after a brand is removed, in anonymised or de-identified form.
8. Your Rights
You have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Request deletion of your data
- Withdraw consent for optional communications
- Lodge a complaint with the relevant data protection authority
To exercise any of these rights, email us at [email protected]. We will respond within 30 days.
9. Children’s Privacy
D2C Bazaar is not intended for children under 13. We do not knowingly collect data from children. If we become aware that we have collected data from a child under 13, we will delete it promptly.
10. Security
We implement reasonable technical and organisational measures to protect your data, including HTTPS encryption, secure authentication, and access controls. However, no system is completely secure. We cannot guarantee absolute security of your data.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated via email or a notice on the platform. Continued use after changes constitutes acceptance of the revised policy.
12. Contact
For any privacy-related questions or requests: [email protected]
Response time: within 30 days of receiving your request.