Privacy Policy

1. About D2C Prime

D2C Prime is a technology platform designed to help businesses manage and understand their direct-to-consumer operations. Depending on the services enabled by a customer, the platform may provide business analytics, revenue intelligence, inventory insights, order and customer data management, advertising attribution, integrations, reporting, automation, and related business tools.

Our Services may connect with third-party platforms used by businesses, including e-commerce platforms, advertising platforms, marketplaces, payment providers, logistics providers, and other business applications.

2. Information We Collect

The information we collect depends on how you interact with D2C Prime.

2.1 Information You Provide

When you create an account, request a demo, contact us, subscribe to our Services, or otherwise communicate with us, we may collect information such as:

• Full name
• Business or company name
• Email address
• Mobile or telephone number
• Business address
• Billing and invoicing information
• Account login information
• GST or other business registration information
• Information submitted through forms or support requests
• Communications and correspondence with us
• Other information you voluntarily provide

We collect only information that is reasonably necessary for the relevant business or service purpose.

2.2 Business and Platform Data

When a business connects its systems to D2C Prime, information may be made available to us through those integrations. Depending on the integrations and features used, this may include:

• Orders and transaction information
• Product and SKU information
• Inventory and warehouse information
• Customer names and contact information
• Shipping and delivery information
• Order status and fulfilment information
• Returns and cancellation information
• Sales and revenue information
• Advertising and campaign information
• Marketing and attribution information
• Website and store performance information
• Business reports and analytics data

The information available to D2C Prime depends on the permissions granted by the customer and the third-party services connected to the account.

2.3 Technical and Usage Information

When you use our website or Services, certain information may be collected automatically, including:

• IP address
• Browser type and version
• Device type
• Operating system
• Approximate location derived from technical information
• Pages or features accessed
• Date and time of access
• Referral information
• Session information
• Error and diagnostic information
• Log and security information

This information helps us operate, secure, troubleshoot, and improve our Services.

2.4 Cookies and Similar Technologies

D2C Prime may use cookies, pixels, local storage, analytics technologies, and similar mechanisms to maintain sessions, remember preferences, understand website usage, improve performance, and protect our Services.

You may manage cookies through your browser or device settings. Disabling certain cookies may affect the availability or functionality of some features.

3. How We Use Information

We may process information for purposes including:

• Creating and administering user accounts.
• Providing and operating the D2C Prime Services.
• Connecting and synchronising authorised third-party platforms.
• Generating business reports, dashboards, analytics, and insights.
• Providing revenue, inventory, attribution, and operational intelligence.
• Processing transactions, subscriptions, invoices, and payments.
• Providing customer support and resolving service issues.
• Maintaining the security and reliability of our systems.
• Detecting, preventing, and investigating fraud, abuse, unauthorised access, or other security incidents.
• Monitoring system performance and diagnosing technical problems.
• Improving existing products and developing new features.
• Communicating important information relating to accounts, services, security, billing, or changes to our policies.
• Sending product updates, educational material, or promotional communications where permitted.
• Meeting applicable legal, regulatory, tax, accounting, and compliance requirements.
• Enforcing our agreements and protecting our legal rights.
• Performing other purposes that are disclosed to you at the time information is collected or otherwise permitted by applicable law.

4. Business Customer Data

D2C Prime primarily provides technology services to businesses.

Where a business customer uses D2C Prime to process or analyse information relating to its own customers, employees, suppliers, or other individuals, the business customer may determine the purposes for which such information is processed.

In such circumstances, the business customer is responsible for ensuring that it has the appropriate rights, notices, permissions, and lawful basis required to provide such information to D2C Prime and to use the relevant D2C Prime Services.

D2C Prime processes such information only to provide the Services, maintain the platform, fulfil contractual requirements, maintain security, provide support, and perform other authorised activities.

5. Third-Party Integrations

D2C Prime may allow customers to connect external services and platforms. Examples may include:

• E-commerce platforms
• Marketplaces
• Advertising platforms
• Payment services
• Logistics and shipping platforms
• Customer communication services
• Analytics platforms
• Business and accounting software
• Other applications selected by the customer

When an integration is enabled, information may be exchanged between D2C Prime and that third-party service according to the permissions and configuration authorised by the customer.

Third-party platforms have their own privacy policies and terms. D2C Prime is not responsible for privacy practices that are independently controlled by those third parties.

Customers should review the privacy policies and permissions of the external services they connect to D2C Prime.

6. Sharing of Information

We do not sell personal information as a business practice. We may disclose information in the following circumstances:

Service Providers

We may engage trusted vendors and service providers to help us operate our business and deliver the Services. These may include providers supporting:

• Cloud infrastructure and hosting
• Data storage
• Analytics
• Security
• Communication
• Customer support
• Payment processing
• Email and messaging
• Software infrastructure
• Monitoring and error management
• Professional and administrative services

Such providers may access information only to the extent reasonably necessary to perform services for us and subject to appropriate contractual or legal safeguards.

Customer-Authorised Sharing

Information may be shared with third parties when the customer or user intentionally enables an integration, requests a service, or otherwise authorises the sharing.

Legal and Regulatory Requirements

We may disclose information where required or permitted by applicable law, regulation, court order, governmental authority, legal process, or lawful request.

Protection of Rights and Security

We may disclose information where reasonably necessary to investigate fraud, security incidents, misuse of our Services, violations of our agreements, or threats to the rights, property, or safety of D2C Prime, our customers, users, or others.

Corporate Transactions

If D2C Prime or substantially all of its relevant assets are involved in a merger, acquisition, restructuring, financing, sale, or similar corporate transaction, information may be transferred as part of that transaction, subject to applicable law and appropriate safeguards.

7. Aggregated and De-identified Information

We may create aggregated, statistical, or de-identified information from information processed through our Services. Where information has been appropriately aggregated or de-identified so that it cannot reasonably be used to identify an individual, we may use such information for purposes including:

• Service improvement
• Product development
• Performance analysis
• Security and fraud prevention
• Business intelligence
• Research and statistical analysis

We will not intentionally use de-identified information to re-identify individuals except where permitted or required by applicable law.

8. Data Security

We take reasonable technical, administrative, and organisational measures designed to protect information against unauthorised access, alteration, disclosure, loss, misuse, or destruction.

Depending on the nature of the information and the Services involved, safeguards may include access controls, authentication mechanisms, encryption, monitoring, logging, backups, network protections, and security procedures.

However, no internet transmission or electronic storage system can be guaranteed to be completely secure. Accordingly, while we work to protect information, we cannot guarantee absolute security.

Users are responsible for maintaining the confidentiality of their account credentials and for notifying us promptly if they believe their account has been compromised.

9. Data Retention

We retain information for only as long as reasonably necessary for the purposes described in this Privacy Policy, to provide the Services, fulfil contractual obligations, maintain business and financial records, resolve disputes, enforce agreements, prevent fraud or misuse, and comply with applicable legal or regulatory requirements.

Retention periods may vary depending on:

• The nature of the information
• The purpose for which it was collected
• The customer's account status
• Contractual requirements
• Legal and regulatory obligations
• Security and fraud-prevention requirements

When information is no longer required, we may securely delete, anonymise, or otherwise dispose of it in accordance with applicable requirements.

10. Data Transfers

D2C Prime may use technology infrastructure, service providers, or other resources located in India or other jurisdictions.

Where information is transferred, stored, or processed outside the location where it was originally collected, we will take measures required under applicable law and contractual arrangements to protect the information.

11. Your Privacy Choices and Rights

Subject to applicable law, individuals may have rights relating to their personal information, which may include rights to:

• Request information about processing of their personal data
• Request correction of inaccurate or incomplete information
• Request deletion of personal information where applicable
• Withdraw consent where processing is based on consent
• Request information regarding the handling of personal data
• Raise a grievance concerning the processing of personal data
• Exercise other rights available under applicable data-protection law

Requests may be subject to verification and applicable legal limitations.

Where D2C Prime processes information on behalf of a business customer, you may need to contact that business directly for requests relating to information controlled by that business. We will provide reasonable assistance to our customers where required.

12. Marketing Communications

We may send service-related communications that are necessary for account administration, security, transactions, billing, or operation of the Services.

Where we send promotional communications, you may opt out by using the unsubscribe mechanism provided in the communication or by contacting us.

Opting out of promotional communications will not necessarily stop important operational or transactional communications.

13. Children's Privacy

Our Services are intended for businesses and general users and are not directed toward children.

We do not knowingly seek to collect personal information from children in circumstances where such collection is prohibited by applicable law.

If you believe that a child has provided personal information to us in circumstances where it should not have been collected, please contact us so that we can review and take appropriate action.

14. External Websites and Services

Our website or Services may contain links to websites, applications, or services operated by third parties.

Those third parties operate independently from D2C Prime and may have their own privacy practices, terms, and policies.

We encourage you to review the privacy policy of any third-party service before providing information to it.

15. Account Closure and Deletion

Customers may request closure of their D2C Prime account, subject to applicable contractual and legal requirements.

Following account closure, we may retain certain information where necessary for:

• Legal or regulatory compliance
• Tax and accounting requirements
• Security and fraud prevention
• Dispute resolution
• Enforcement of agreements
• Protection of legal rights
• Other legitimate or legally permitted purposes

Information that is no longer required may be deleted or anonymised in accordance with our retention practices.

16. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our Services, technology, business practices, legal requirements, or regulatory developments.

When material changes are made, we may provide notice through our website, platform, email, or another appropriate communication method.

The revised version will indicate its effective date. Your continued use of the Services after the revised policy becomes effective will be subject to the updated Privacy Policy, to the extent permitted by applicable law.

17. Applicable Law

This Privacy Policy is governed by the laws applicable in India.

D2C Prime will handle personal data in accordance with applicable privacy and data-protection requirements, including applicable provisions of the Digital Personal Data Protection Act, 2023, the Digital Personal Data Protection Rules, 2025, and other applicable laws and regulations, as and when applicable to the relevant processing activity.

The DPDP framework provides requirements concerning processing of digital personal data and protection of individual rights, with the Rules establishing further operational requirements and a phased commencement framework.

18. Contact Us

If you have questions, requests, or concerns regarding this Privacy Policy or the handling of personal information, you may contact us using the details below.