Privacy Policy

This policy explains how DeltaGuard Global Auctions, operated by the company named on our Contact page ("DeltaGuard", "we"), collects and uses personal data, in line with the Digital Personal Data Protection Act, 2023, the rules under it, and the Information Technology Act, 2000. 1. What we collect - Account details: name, email address, phone number and password (stored only as a secure hash). - Identity and business details for verification (KYC): PAN, GSTIN, business registration, and the documents you upload. - Bank account details for payments, refunds and payouts, and the documents you upload to verify them. - Activity on the platform: listings, bids, deposits, payments, invoices, messages, support tickets and disputes. - Technical data: IP address, browser and device information, and sign-in times, used for security and to prevent misuse. 2. Why we use it We use your data to create and verify your account, run auctions, take and verify payments, pay sellers and make refunds, issue invoices and receipts, meet our legal, tax and record-keeping obligations, prevent fraud and misuse, and contact you about your account and transactions. We use it only for these purposes. 3. Consent By creating an account you consent to this use of your data. You may withdraw consent at any time by writing to our grievance officer or closing your account; withdrawing is as easy as giving consent. If you withdraw it, we can no longer provide the platform to you, and we may keep data the law requires us to keep. 4. Who we share it with - The other party to your transaction, only as far as needed to complete it. - Service providers who work for us, such as email, storage and verification providers, under contracts that protect your data. - Banks and payment providers, to process payments and refunds. - Government, tax, regulatory or law enforcement authorities, where the law requires it. We do not sell your personal data. 5. How we protect it PAN, GSTIN and bank account numbers are encrypted when stored, and only the last four digits of an account number are shown. Uploaded documents are scanned for malware and are available only to you and the staff who need them, through short-lived links. Staff access is limited by role and recorded. If a breach affects your data, we will inform you and the Data Protection Board as the law requires. 6. How long we keep it We keep your data while your account is open and afterwards only for as long as the law requires, for example the tax and accounting records we must keep for eight years. Records of auctions and transactions are kept so that every sale can be verified later. When data is no longer needed, we erase it. 7. Your rights You may ask for a summary of the data we hold about you and how we use it, ask us to correct, complete or update it, ask us to erase data we no longer need, and withdraw consent. Some data cannot be erased while we are required by law to keep it. You may nominate a person to exercise your rights in the event of your death or incapacity. 8. Children The platform is only for people aged 18 or over. We do not knowingly collect data about children. 9. Cookies We use only the cookies needed to keep you signed in and to protect your session. We do not use advertising cookies. 10. Where your data is processed Our servers are in India. Some service providers, such as file storage, may process data outside India where the law allows it. 11. Contact and complaints For any question about your data or to exercise your rights, write to our grievance officer, whose details are on our Contact page. We respond within the times set out in our Grievance Redressal Policy. If you are not satisfied with our response, you may complain to the Data Protection Board of India. 12. Changes We will publish any change to this policy on this page with its effective date.