Privacy Policy

Natyabazaar ("we", "our", or "us") respects your privacy and is committed to protecting your personal data. This Privacy Policy describes how we collect, use, store, and share information about you when you access or use the Natyabazaar Platform, including our website, mobile application, and Live Bazaar streaming service (collectively, "Services").

This Policy is published in compliance with the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and other applicable Indian law.

2.1 Information you provide directly

• Account information: name, email address, password (hashed), phone number.
• Order & delivery information: shipping address, billing address, order history.
• Payment information: payment card details are processed by Razorpay and are never stored by Natyabazaar.
• Communications: messages you send us via contact forms, email, or Live Bazaar chat.
• Vendor onboarding information: business name, GST number, bank details (for payout processing).

2.2 Information collected automatically

• Log & device data: IP address, browser type, operating system, referring URLs, and pages viewed.
• Cookies & tracking technologies: session cookies, analytics cookies. See Section 8 for details.
• Usage data: pages visited, products viewed, search queries, time spent on pages, Live Bazaar session participation.

We use the information we collect to:

• Create and manage your account and authenticate your identity.
• Process and fulfil your orders and manage returns/refunds.
• Send transactional communications (order confirmations, shipping updates, invoices).
• Send promotional emails and newsletters — you can unsubscribe at any time using the link in the email.
• Provide personalised product recommendations and a tailored browsing experience.
• Operate and improve the Live Bazaar streaming feature, including moderating content and resolving disputes.
• Detect and prevent fraud, abuse, and security threats.
• Comply with legal obligations and enforce our Terms & Conditions.
• Analyse usage patterns to improve our Services.

We process your personal data under the following legal bases:

• Contract performance: to fulfil orders you place with us.
• Legitimate interests: to prevent fraud, improve our Services, and conduct marketing (which you can opt out of).
• Legal obligation: to comply with Indian tax and consumer protection laws.
• Consent: where you have given explicit consent (e.g., newsletter sign-up, cookie consent).

We share your information with the following categories of recipients:

• Vendors: your name, delivery address, and order details are shared with the relevant Vendor to fulfil your order.
• Payment processors: Razorpay processes payments on our behalf and operates under its own privacy policy.
• Logistics partners: shipping address may be shared with courier companies to deliver your order.
• Analytics & technology providers: we use third-party analytics and infrastructure services (e.g., Supabase, Mux) that process data on our behalf under confidentiality agreements.
• Legal and regulatory authorities: where required by law, court order, or government regulation.

We do not sell your personal data to third parties for their own marketing purposes.

We retain your personal data for as long as necessary to provide our Services and comply with legal obligations:

• Account data: retained while your account is active and for 3 years thereafter.
• Order data: retained for 7 years to comply with Indian tax and accounting obligations.
• Live Bazaar replay recordings: retained for the duration specified in your vendor plan (7 to 90 days) and then deleted.
• Marketing consents: until you withdraw consent.

Under applicable Indian law, you have the following rights regarding your personal data:

• Access: request a copy of the personal data we hold about you.
• Correction: request correction of inaccurate or incomplete data.
• Deletion: request deletion of your personal data, subject to legal retention requirements.
• Withdrawal of consent: withdraw any consent you have given for marketing communications.
• Grievance redressal: lodge a complaint with our Grievance Officer (see Section 11).

To exercise any of these rights, please email hello@natyabazaar.com. We will respond within 30 days.

We use cookies and similar technologies to operate the Platform, remember your preferences, and analyse usage. Types of cookies we use:

• Essential cookies: required for authentication, cart management, and basic Platform functionality. These cannot be disabled.
• Analytics cookies: help us understand how visitors interact with the Platform (e.g., pages visited, bounce rate). You can opt out via your browser settings.
• Preference cookies: store your language, region, and display settings.

You can control cookies through your browser settings. Disabling non-essential cookies will not affect core Platform functionality.

We implement reasonable security practices and procedures as required under the IT (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011. These include:

• HTTPS encryption for all data in transit.
• Row-level security policies on our database to ensure users can only access their own data.
• Access controls and audit logs for administrative operations.
• Regular security reviews and dependency updates.

No method of transmission over the internet is 100% secure. In the event of a data breach that materially affects you, we will notify you as required by applicable law.

Our Services are not directed to children under 18 years of age. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, please contact us immediately and we will delete it.

In accordance with the Information Technology Act, 2000 and rules made thereunder, the name and contact details of the Grievance Officer are:

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you by posting the updated Policy on this page with a revised "Last updated" date. Please review this page periodically.