Privacy Policy

1. Introduction

Saral E-Commerce Private Limited ("Saral", "we", "us" or "our") is a company incorporated under the Companies Act, 2013, with its registered office at 49, Sec-B, Kanpur Road, Phonix Mall, Lucknow, Lucknow, Uttar Pradesh, 226005. We are committed to protecting the privacy of everyone who uses our services, including electricity and utility bill collection, recharge and payment services, our recharge/payment API, DTH & telecom distribution, and the sale of smartphones & electronics through our stores and online marketplaces (collectively, the "Services").

This Privacy Policy explains what information we collect, why we collect it, and how we handle it. It should be read together with our Terms & Conditions. By using our Services, you consent to the practices described here.

2. Information we collect

We collect information that you provide directly, information generated when you use our Services, and information from third parties where relevant. This may include:

Information you provide

• Identity & contact details — name, mobile number, email address and postal address.
• Service details — electricity/utility consumer numbers, account or connection IDs, biller and operator details, and recharge amounts.
• Order details — products purchased, delivery address and preferences.
• Partner & KYC details — for retailers and API partners, business name, GSTIN/PAN and authorised-signatory information as required by law.
• Communications — messages, enquiries and feedback you send us.

Information collected automatically

• Device & usage data — IP address, browser type, device identifiers, pages viewed and interactions.
• Transaction logs — records of bill payments, recharges and orders, including timestamps and reference numbers.
• Cookies & similar technologies — as described in Section 6.

3. How we use your information

We use your information to:

• Provide, process and confirm your bill payments, recharges, orders and API transactions;
• Fetch bill amounts from billers and post payments to the correct account;
• Generate receipts, invoices and transaction references;
• Provide customer support and respond to your enquiries;
• Detect, prevent and investigate fraud, misuse and security incidents;
• Comply with legal, regulatory, tax and audit obligations;
• Improve and personalise our Services and communications; and
• Send service updates and, where permitted, promotional messages you may opt out of.

4. Payment & financial information

Payments made through our Services are processed via regulated, PCI-DSS-compliant payment gateways and banking partners. We do not store your complete card number, CVV or online banking passwords on our servers. Sensitive payment credentials are handled by our payment processors in encrypted, tokenised form. We may retain limited transaction metadata (such as amount, reference number, masked instrument details and status) for reconciliation, refunds, accounting and legal compliance.

5. How we share information

We do not sell your personal information. We share it only as necessary to deliver our Services and meet our obligations, including with:

• Billers & operators — such as electricity distribution companies, DTH operators and telecom operators, to process your payment or recharge;
• Payment processors & banks — to authorise and settle transactions;
• Logistics & marketplace partners — to fulfil and deliver product orders;
• Service providers — technology, hosting, analytics and customer-support vendors bound by confidentiality obligations;
• Authorities — where required by law, regulation, court order, or to protect rights, safety and prevent fraud; and
• Business transfers — in connection with any merger, acquisition or reorganisation, subject to this policy.

6. Cookies & tracking technologies

Our website uses cookies and similar technologies to keep the site functioning, remember your preferences, understand usage and improve performance. You can control cookies through your browser settings; disabling some cookies may affect certain features. We may use analytics tools to gather aggregate, non-identifying insights about how our Services are used.

7. Data security

We implement reasonable technical and organisational security measures — including encryption in transit, access controls and secure infrastructure — to protect your information against unauthorised access, alteration, disclosure or destruction. While we strive to protect your data, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your account credentials confidential.

8. Data retention

We retain personal and transaction information for as long as necessary to fulfil the purposes described in this policy, to provide the Services, and to comply with legal, accounting, tax and regulatory requirements. When information is no longer required, we securely delete or anonymise it.

9. Your rights & choices

Subject to applicable law, you may:

• Request access to, or correction of, the personal information we hold about you;
• Withdraw consent or request deletion of your information, subject to legal retention needs;
• Opt out of promotional communications at any time; and
• Raise a concern with our Grievance Officer (Section 12).

To exercise these rights, contact us using the details below. We may need to verify your identity before acting on a request.

10. Children's privacy

Our Services are intended for users aged 18 and above. We do not knowingly collect personal information from children. If you believe a child has provided us information, please contact us so we can take appropriate action.

11. Third-party links & billers

Our Services may reference or link to third-party websites, billers, operators and marketplaces (such as Amazon and Flipkart) that operate under their own privacy policies. We are not responsible for the privacy practices of these third parties, and we encourage you to review their policies. References to utilities such as UPPCL and to DTH/telecom brands are solely to describe the payment or product service we facilitate.

12. Grievance officer

In accordance with the Information Technology Act, 2000 and rules made thereunder, any grievance regarding the processing of your information may be addressed to our Grievance Officer:

13. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology or legal requirements. The updated version will be posted on this page with a revised "Last updated" date. Your continued use of the Services after changes take effect constitutes acceptance of the revised policy.

14. Contact us

If you have questions about this Privacy Policy or our handling of your information, please contact us at saralecommercepvtltd@gmail.com, call +91 94522 05550, or write to our registered office in Lucknow. You can also use our contact page.