Buyhatke | Privacy

Welcome to the Buyhatke Gift Card Platform ("Platform"). This Privacy Policy specifically governs the collection, use, processing, and protection of your personal data when you use our gift card services, which are offered by Buyhatke Internet Private Limited ("Buyhatke," "we," "us," or "our").

This policy is an integral part of our main Buyhatke Privacy Policy and should be read in conjunction with it. By using our Gift Card service, you acknowledge that you have read and understood this policy and consent to the data practices described herein.

1. The Personal Data We Collect

As per the Digital Personal Data Protection Act, 2023 ("DPDP Act"), we act as a "Data Fiduciary," and you are the "Data Principal." We collect the following types of personal data to provide and improve our services:

a) Information you provide

To provide you with the gift card service, we collect the following digital personal data:

Google ID and Linked Email Address: When you log in with your Google ID, you grant us access to your name and the email address associated with that account. This is the sole personal data we collect for the gift card issuance and delivery.
Transaction Data: We automatically collect transaction-related data, such as the amount of the gift card, the date and time of the transaction, and the gift card's unique identification number. This is necessary for processing the transaction and for our record-keeping obligations under law.

b) Information collected automatically:

To provide you with the gift card service, we collect the following digital personal data:

Usage Data: We collect information about your interactions with our Platform, such as the pages you visit, the products you search for, the coupons you click on, and the time and date of your activity.
Device and Technical Information: We collect data about the device and browser you use to access our Platform, including your IP address, browser type and version, operating system, and unique device identifiers.
Cookies and Tracking Technologies: We use cookies, web beacons, and similar technologies to collect information, remember your preferences, and enhance your user experience. You can manage your cookie preferences through your browser settings.

2. Why We Collect and Process Your Personal Data

We collect and process your personal data for the following lawful purposes, as specified under the DPDP Act:

To provide our services: The primary purpose of collecting your Google ID and email address for the Gift Card service is to authenticate your identity and send the gift card to your linked email address.
To improve and personalize your experience: We use your data to analyze user behavior, understand your shopping preferences, and provide you with personalized product recommendations, deals, and coupons.
For communication: We may use your email address to send you transactional messages related to your gift card purchase, as well as marketing and promotional materials that may be of interest to you. You can opt out of marketing communications at any time.
For security and fraud prevention: We process data to detect and prevent fraudulent activities, unauthorized access, and other harmful actions to protect our users and our Platform.
To comply with legal obligations: We may be required to process and disclose your personal data to comply with legal requirements, government requests, or court orders.

3. Consent

For all processing of your personal data, we rely on the legal basis of "consent" as defined under the DPDP Act. Your consent is:

Free: Given voluntarily.
Specific: We collect your data for a clearly defined purpose, such as providing you with a gift card.
Informed: This Privacy Policy provides you with a clear and comprehensive understanding of our data practices.
Unconditional: Not dependent on providing consent for something unrelated to the specified purpose.
Unambiguous: Signified by a clear affirmative action, such as logging in with your Google ID to avail of the gift card service.

You have the right to withdraw your consent at any time. The process to withdraw consent is as simple as the process to give it. If you wish to withdraw consent for data processing, please contact us at the details provided below.

4. How We Share Your Personal Data

We do not sell your personal data to any third parties. We may, however, share your data with the following entities for the purposes outlined above:

Service Providers: We may share your data with trusted third-party vendors and service providers who assist us in providing our services, such as cloud hosting providers, email service providers, and analytics services. These third parties are contractually obligated to protect your data and use it only for the purposes for which we provide it.
Legal and Regulatory Authorities: We may disclose your data if required by law or in response to a valid legal process, such as a subpoena or court order, or to protect our rights, property, or safety, or that of our users.

5. Data Security

We implement reasonable security practices and procedures to protect your personal data from unauthorized access, loss, misuse, or alteration. We use technical and organizational measures such as encryption, firewalls, and access controls to safeguard your information.

However, please be aware that no method of transmission over the internet or electronic storage is 100% secure. You are also responsible for protecting your account credentials and computer from unauthorized access.

6. Your Rights as a Data Principal

In accordance with the DPDP Act, you have the following rights regarding your personal data:

Right to Access:You have the right to request a summary of the personal data we have collected and processed about you.
Right to Correction and Erasure: You can request the correction of inaccurate or incomplete personal data, and the erasure of your personal data once the purpose for which it was collected is fulfilled.
Right to Grievance Redressal: If you have any concerns or complaints about our data practices, you can contact our Grievance Officer, and we will address your concerns in a timely and effective manner.
Right to Nominate: You can nominate another person to exercise your rights under the DPDP Act in the event of your death or incapacity.

7. Amendments to this Policy

We reserve the right to amend this Privacy Policy at our discretion to reflect changes in our data processing practices or applicable laws. Any changes will be posted on this page with a revised "Last Updated" date. We encourage you to review this Policy periodically to stay informed about how we are protecting your data.

By using the Buyhatke Gift Card Platform and agreeing to this Privacy Policy, you acknowledge that you have read, understood, and consent to the collection, use, and processing of your personal data as described herein.