ecocys
Wishlist Bag

ECOCYS: PRIVACY POLICY

This Privacy Policy describes how Ecocys Internet Private Limited and its affiliates and group entities (collectively referred to as "ecocys," "we," "our," or "us") collect, use, share, and process your personal data through https://www.ecocys.com, its sub-domains, mobile applications, and m-sites (hereinafter collectively referred to as "Platform").

While you can browse certain sections of our platform without registering, our services and products require registration and are exclusively offered within India. Your personal data is primarily governed by Indian laws and stored in India, however, some of your personal data may be processed or stored in servers located outside of India to ensure efficient service delivery. To avail the products or services within our platform, you are required to explicitly consent to adhere to the guidelines set forth in this Policy, as well as our Terms of Use and any terms specific to certain services or products we offer, and agree to be governed by the laws of India including but not limited to the laws applicable to data protection and privacy.

Collection And Purpose

We collect your personal data directly from you (e.g., when you visit our Platform); in the course of our relationship with you (e.g., if you purchase our products or utilize services); when you make your personal data public (e.g., if you make a public post about us on social media); or when you download, install, or use any of our Services. You can browse our Platform without registering, however once you use the Platform or give us your personal data, you may no longer be anonymous to us. We clearly indicate which fields are mandatory for using certain services and which are optional, thereby offering you the choice to decide. We may also receive information about you from third parties (e.g., our delivery partners). We may also create information about you, such as records of your interactions with us, or combine data you have provided to us with data obtained from third parties such as social networks and other data collection entities. ecocys is not responsible for personal data you volunteer about yourself in public domains. This Privacy Policy does not cover the practices of third parties who may provide information about you to ecocys. Some of the information that we may collect includes, but is not limited to, the following:

  • Registration and Personalisation: We collect basic identifying information like your name, date of birth, device identifiers, and IP address to personalise your experience and provide the services you request. This includes assisting sellers and business partners in handling and fulfilling orders, enhancing customer experience, resolving disputes, and troubleshooting problems. We also use your data to detect and protect against error, fraud, and other criminal activities.
  • Communication and Order Delivery: Your address is essential for order delivery. Your telephone number and email ID are used for updates and commercial communications related to your orders and other products and services. We may request permission to access your text messages (SMS), instant messages, contacts, camera, photo gallery, location, and device information for enhancing your experience and providing access to various services. Your access to these services may be affected if permission is not provided.
  • Transaction Processing: Financial data like bank account details and credit/debit card information are collected to process transactions efficiently.
  • Eligibility Checks: For certain services, products, or events—including but not limited to credit and payment products—we require identity verification data such as PAN, GST numbers, government-issued IDs, credit checks, and KYC details, which may further be shared with our banking and lending partners.
  • Enhanced User Experience: To offer specific features on our Platform, we may collect biometric and behavioural data, such as shopping habits and preferences.
  • Loyalty Programs: If you enrol in our loyalty program or a third-party loyalty program offered by us, we collect personal data such as your name, contact number, and other relevant details.
  • Marketing and User Experience: To the extent we use your data for marketing, you have the option to opt-out. We also conduct research and surveys to improve our offerings and may ask for additional demographic and profile data, which is entirely voluntary to provide. This includes attributes like your interests, household or lifestyle information, purchasing behaviour, and preferences. We use this data to tailor your experience at our Platform.
  • AI Offerings and Model Training: You may voluntarily opt to use our AI features. Data collected from these features, as well as aggregated data of user behaviour, user analytics, or user-generated content, may be used to train various AI models. While using these AI features, user discretion is advised as some technologies may produce unexpected results.
  • Customer Support and Personal Correspondence: Your interactions with our customer support via chat, calls, or emails are recorded for quality assurance and safety. Personal correspondence such as emails or letters, as well as correspondence from third parties about your activities, may be collected into a file specific to you.
  • Public Forums and User Interactions: Please be mindful when sharing messages, reviews, or other content in public areas of our Platform. Such information is not only publicly accessible but may also be collected and stored by us for internal use, research, training, and compliance purposes.
  • Third-Party Services: ecocys does not control, endorse, or assume responsibility for the privacy practices of third parties, and we encourage you to review their privacy policies before sharing information with them.

Cookies

We use data collection devices like "cookies" on our Platform to assist with various functionalities. Cookies are small files placed on your hard drive and do not contain personal data. They help us in:

  • Analysing web page flow.
  • Measuring promotional effectiveness.
  • Promoting trust and safety.

We use cookies from third-party partners such as analytics providers for marketing and analytical purposes. Additionally, you may encounter cookies or similar devices placed by third parties not partnered with us. We do not control the use of cookies by third parties. Most cookies are "session cookies," deleted automatically at the end of a session. You are free to decline our cookies if your browser permits, although doing so may disable certain features on the Platform.

Sharing

We may share your personal data internally within our corporate entities, affiliates, related companies, and business partners (such as UPI platforms and credit bureaus) for the purpose of providing products and services offered on ecocys. These entities and affiliates may market to you as a result of such sharing unless you explicitly opt-out.

Your personal and sensitive information may also be disclosed with third parties, including AI system providers, for the following reasons:

  • To provide you access to our services and products.
  • To personalise customer engagement, curated product or service recommendations, and other outreach activities.
  • To comply with legal obligations or enforce our user agreement.
  • To facilitate our marketing and advertising activities.
  • To prevent, detect, mitigate, and investigate fraudulent or illegal activities.

We may also disclose your personal data to third parties, such as our sellers, logistics partners, and business partners for order fulfillment, customer service assistance, and market research. We may also disclose your information to government agencies or other authorised law enforcement agencies in response to legal processes or to protect the rights, property, or personal safety of our users or the public. In case of a business transaction like a merger, acquisition, or restructuring, your data may be shared or sold to the new business entity, which will be required to follow this privacy policy.

Links to Other Sites

Our Platform may link to other websites that collect personal data about you. ecocys is not responsible for the privacy practices or the content of those linked websites.

Choice/Opt-Out

We provide all users with the opportunity to opt-out of receiving non-essential (promotional, marketing-related) communications from us after setting up an account. If you do not wish to receive promotional communications from us, please unsubscribe by clicking on the unsubscribe link in the email or visiting our Help Center.

Advertisements

We use third-party advertising companies to serve ads when you visit our Platform. These companies may use information about your visits to provide advertisements about goods and services of interest to you. You have an option to opt-out from tracking of personalised advertising using the "Opt out of Ads Personalization" settings using your device's settings application.

Use of Children Information

Use of our Platform is available only to persons who can form a legally binding contract under the Indian Contract Act, 1872. We do not knowingly solicit or collect personal data from children under the age of 18 years. Where processing of a child's personal data is unavoidable, we will process it only with verifiable consent of the parent or lawful guardian, and we do not undertake tracking, behavioural monitoring, or targeted advertising directed at children, in accordance with Section 9 of the Digital Personal Data Protection Act, 2023. If we become aware that a child's data has been collected without such consent, we will delete it.

Data Retention

We retain your personal data for a period no longer than is required for the purpose for which it was collected or as required under any applicable law. We may retain data if there is a legal obligation, to prevent fraud or future abuse, or to enable ecocys to exercise its legal rights. We may continue to retain your data in anonymised form for analytical and research purposes.

Legal Basis for Processing

We process your personal data on the basis of the consent you provide when you register, place an order, or use a feature on the Platform, and on the basis of the certain legitimate uses recognised under Section 7 of the Digital Personal Data Protection Act, 2023 — including where you voluntarily provide data for a specified purpose, for compliance with a legal obligation or a judicial order, and for the prevention and detection of fraud. Where processing rests on consent, your consent is sought through a clear, standalone notice in plain language, and is limited to the personal data necessary for the stated purpose.

Your Rights

We are committed to providing you with control over your personal data. You can visit our Privacy Centre, a self-serve portal designed to help you easily manage your data, request copies of your personal data, update your information, or request account deletion. To exercise any rights beyond those available in the self-serve portal, you may contact our customer support team.

As a Data Principal under the Digital Personal Data Protection Act, 2023, you have the right to:

  • obtain a summary of the personal data being processed and the processing activities undertaken;
  • obtain the identities of other data fiduciaries and processors with whom your personal data has been shared, along with the categories of data shared;
  • seek correction, completion, updating, and erasure of your personal data, except where retention is necessary for a specified purpose or for compliance with law;
  • nominate another individual to exercise your rights in the event of your death or incapacity;
  • withdraw your consent at any time, with the same ease with which it was given. Withdrawal will not affect the lawfulness of processing carried out before the withdrawal, and may limit or prevent your continued use of certain services; and
  • have your grievance redressed by us, and thereafter to approach the Data Protection Board of India.

Requests may be made through the Privacy Centre or by writing to the Grievance Officer below, and are responded to within the timelines prescribed under applicable law. We may seek information reasonably necessary to verify your identity before acting on a request.

Cross-Border Transfer of Data

Your personal data is primarily stored and processed in India. Where personal data is transferred to or accessed from a location outside India — for example, for cloud hosting, communication, analytics, or support services — such transfer is made only to territories not restricted by the Central Government under Section 16 of the Digital Personal Data Protection Act, 2023, and is subject to contractual safeguards requiring a standard of protection consistent with this Policy and Indian law.

Changes to this Privacy Policy

Please check our Privacy Policy periodically for changes. We may update this Privacy Policy to reflect changes to our information practices and will alert you to significant changes by posting the updated date or placing a notice on our Platform.

Grievance Officer

In accordance with the Information Technology Act, 2000, the Digital Personal Data Protection Act, 2023, and the rules made thereunder, the name and contact details of the Grievance Officer and Data Protection Contact are provided below:

  • Name: Sonu Kumar
  • Designation: Grievance Officer / Data Protection Contact
  • Company: Ecocys Internet Private Limited (ecocys Platform)
  • Communication Address: FA 65, Alpha City Signature, Karnal, India
  • Email: management@ecocys.com
  • Website: www.ecocys.com
  • Time: Monday - Friday (9:00 - 18:00)

Complaints are acknowledged within forty-eight (48) hours of receipt and redressed within one (1) month. If you are not satisfied with the resolution provided, you may escalate the matter to the Data Protection Board of India.

Queries

If you have a query, concern, or complaint in relation to the collection or usage of your personal data under this Privacy Policy, please contact us at the contact information provided above.

Last updated: August 2026.

Version: 1.0