privacy-policy

Last updated: 16 October 2026 This Privacy Policy explains how [LEGAL COMPANY NAME] ("Phonebuy", "we", "us") collects, uses and protects your personal data when you use the website phonebuy.com and the Phonebuy mobile app (together, the "Service"). It is published under the Information Technology Act, 2000, its rules, and the Digital Personal Data Protection Act, 2023. By using the Service you agree to this policy. If you do not agree, please do not use the Service. 1. WHAT WE COLLECT Information you give us: - Mobile number. You sign in with a one-time password (OTP) sent by SMS to this number. - Name and email address, if you add them to your account. - Delivery and pickup addresses, including pincode, city and state, and a map pin if you place one. - Order details: the products you buy, coupons you use, and your choice of payment method. - Repair requests: your device details, a description of the fault, and any photos you upload. - Selling an old phone: your device details, its condition, photos of the device, and the bank account details you give us to receive payment. - Reviews, ratings and review photos you post. - Messages you send to our support team. Information collected automatically: - Device and app information: device model, operating system, app version and IP address. - A push notification token, if you allow notifications. - Approximate location, only when you press "Use my current location". We reduce it to about 11 metres of accuracy and use it only to find your pincode or place your address pin. We do not track your location in the background. - Pages and products you view, items you add to your cart and searches you make. On the website, analytics cookies are used only if you accept them in the cookie banner. We do not collect your card number, UPI PIN or net-banking password. Those are entered directly with our payment partners. 2. HOW WE USE IT - To create and secure your account and sign you in. - To process, deliver and support your orders, repairs and phone sales, including cancellations and refunds. - To check whether we deliver to your pincode and to work out delivery charges. - To pay you for a device you sell to us. - To send you order, delivery, refund and account notifications by SMS and push notification. - To send you offers, only if you have turned on offer notifications. You can turn them off at any time. - To issue invoices and meet our tax and legal obligations. - To prevent fraud and misuse of the Service. - To understand how the Service is used and improve it. We do not sell your personal data. 3. WHO WE SHARE IT WITH We share personal data only as needed to run the Service: - Payment gateways (Razorpay, Cashfree), to take payments and issue refunds. - Delivery and courier partners, who receive your name, phone number and address to deliver or collect an item. - Our SMS provider, to send your OTP and order messages. - Google Firebase Cloud Messaging, to deliver push notifications. - Cloud hosting and storage providers (Amazon Web Services), where our data and uploaded photos are stored. - Analytics providers (Google Analytics), on the website only if you have accepted analytics cookies. - Government, courts or law-enforcement authorities, where the law requires it. Each partner may use your data only to provide its service to us. 4. HOW WE PROTECT IT - All data is sent over encrypted (HTTPS) connections. - Bank account numbers are stored encrypted, and only the last four digits are shown in our systems. - Photos you upload for repairs and phone sales are stored privately and can be seen only by you and our staff handling your request. - Access to customer data is limited to staff who need it to do their job. No system is completely secure, but we work to protect your data and will tell you and the authorities about a data breach where the law requires it. 5. HOW LONG WE KEEP IT - Account data is kept while your account is active. - Order and invoice records are kept for at least 8 years, as required by Indian tax law. - In-app notifications are deleted after 180 days. - When you delete your account, we delete or anonymise your personal data, except records the law requires us to keep. 6. YOUR CHOICES AND RIGHTS You can: - See and update your name, email and addresses in My Account. - Turn push notifications off in the app or in your phone's settings. - Withdraw consent for analytics cookies on the website at any time. - Ask us for a copy of your personal data, to correct it, or to delete your account, by writing to the contact below. - Nominate another person to exercise these rights for you if you die or are unable to do so. - Complain to the Data Protection Board of India if you are not satisfied with our response. We reply to requests within 30 days. 7. CHILDREN The Service is not meant for anyone under 18. We do not knowingly collect personal data from children. If you believe a child has given us their data, contact us and we will delete it. 8. CHANGES TO THIS POLICY We may update this policy. The date at the top shows when it last changed. If we make a significant change, we will tell you in the app or on the website. 9. CONTACT AND GRIEVANCE OFFICER For questions, requests or complaints about your personal data, contact our Grievance Officer: Name: [GRIEVANCE OFFICER NAME] Email: [privacy@phonebuy.com] Phone: [PHONE NUMBER] Address: [REGISTERED OFFICE ADDRESS] We acknowledge complaints within 24 hours and resolve them within 15 days.