◈1. About Cloth Bazzar
Cloth Bazzar is a multi-vendor e-commerce marketplace focused exclusively on fashion and apparel in India. We connect customers, sellers (retailers, wholesalers, and brands), and admins on a single platform, facilitating GST-compliant transactions.
◈2. Information We Collect
2.1 Information You Provide Directly
When you register or transact on Cloth Bazzar, we collect:
- ◆Full name, email address, phone number, and delivery address
- ◆Date of birth (for age verification where applicable)
- ◆Payment details — processed securely via Razorpay/Stripe. We do not store card data.
- ◆Profile photo and account preferences
- ◆Seller-specific: business name, GSTIN, bank account details, HSN codes, and product listings
- ◆Communication records: support messages, dispute details, return requests
2.2 Information Collected Automatically
When you use our platform, we automatically collect:
- ◆IP address, browser type, operating system, and device identifiers
- ◆Pages visited, products viewed, search queries, and clickstream data
- ◆Location data (city/region level, based on IP)
- ◆Cookies and similar tracking technologies
- ◆Session duration, referral source, and navigation patterns
2.3 Information from Third Parties
- ◆Payment gateway transaction confirmations and status updates
- ◆Razorpay webhook data for order settlement and refund processing
- ◆GST verification data from government portals (for seller onboarding)
◈3. How We Use Your Information
3.1 Platform Operations
- ◆To create and manage your account and profile
- ◆To process orders, payments, and refunds
- ◆To display your products (for sellers) and facilitate purchases (for customers)
- ◆To calculate and apply correct GST based on HSN codes
- ◆To generate GST-compliant invoices with CGST, SGST, and IGST breakdowns
- ◆To manage seller settlements, ledger entries, and commission deductions
3.2 Fraud Prevention & Safety
- ◆To verify seller GSTIN and business credentials during onboarding
- ◆To detect and prevent fake returns, fraudulent orders, and account abuse
- ◆To maintain audit logs for dispute resolution
- ◆To enforce T+7 settlement delays as a fraud control measure
3.3 Communication
- ◆To send order confirmations, shipping updates, and invoices
- ◆To notify you about account activity, disputes, and settlements
- ◆To send promotional communications (you may opt out at any time)
3.4 Legal & Compliance
- ◆To comply with the Information Technology Act, 2000 and applicable Indian laws
- ◆To fulfil GST obligations under the Central Goods and Services Tax (CGST) Act, 2017
- ◆To respond to lawful requests from government authorities or courts
◈6. Data Retention
- ◆Account data: retained while your account is active, and for 3 years after deletion
- ◆Transaction records & invoices: retained for 7 years as required under the CGST Act, 2017
- ◆Audit logs: retained for 5 years
- ◆Support communications: retained for 2 years
You may request deletion of your account and personal data at any time, subject to our legal retention obligations.
◈7. Data Security
We implement the following security measures to protect your information:
- ◆JWT-based authentication with role-based access control (Customer, Seller, Admin)
- ◆HTTPS encryption for all data in transit
- ◆AES-256 encryption for sensitive data at rest in our databases
- ◆Webhook signature validation for all payment gateway callbacks
- ◆Database transactions and idempotent APIs to prevent duplicate processing
- ◆Soft-delete systems to preserve data integrity while complying with deletion requests
- ◆Regular security audits and penetration testing
In the event of a data breach, we will notify affected users within 72 hours in accordance with applicable law.
◈8. Your Rights
As a user of Cloth Bazzar, you have the following rights regarding your personal data:
- ◆Right to Access: request a copy of all personal data we hold about you
- ◆Right to Rectification: correct inaccurate or incomplete data in your account
- ◆Right to Erasure: request deletion of your account and associated data (subject to legal retention obligations)
- ◆Right to Portability: receive your data in a structured, machine-readable format
- ◆Right to Withdraw Consent: opt out of marketing communications at any time
- ◆Right to Object: object to processing of your data for specific purposes
To exercise any of these rights, contact us at kncfuturetech@gmail.com. We will respond within 30 days.
◈9. Children's Privacy
Cloth Bazzar is not intended for users under the age of 18. We do not knowingly collect personal information from minors. If you believe a minor has registered on our platform, please contact us immediately at kncfuturetech@gmail.com and we will promptly delete the relevant data.
◈10. Third-Party Links
Our platform may contain links to third-party websites or services. We are not responsible for the privacy practices of those sites. We encourage you to review the privacy policies of any third-party services you use.
◈11. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated via email to registered users and displayed prominently on the platform for at least 30 days before taking effect. Continued use of the platform after changes constitutes your acceptance of the updated policy.
◈12. Contact & Grievance Officer
For privacy-related queries, requests, or complaints, please contact our Grievance Officer: