Skip to main content
Legal

Data Protection & Consumer Rights Policy

Effective Date: August 25, 2026Last Updated: August 25, 2026Applicable to: Mobile App + brokerseva.com

Broker Seva — a partnership firm Office: 477, Anand Nagar, Sakkardhara Road, Near Sakkardhara Police Station, Nagpur, Maharashtra – 440009 Udyam Reg. No.: UDYAM-MH-20-0347451

This Data Protection & Consumer Rights Policy sets out how Broker Seva, a partnership firm ("Broker Seva", "we", "us", "our"), complies with (A) the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025 ("DPDP framework"), and (B) the Consumer Protection Act, 2019 and the Consumer Protection (E-Commerce) Rules, 2020 ("Consumer Protection framework").

It supplements our Privacy Policy and Terms and Conditions. Where this Policy addresses personal data handling, the Privacy Policy governs the operational detail.

PART A — DATA PROTECTION (DPDP Framework)

A1. Our Role

Broker Seva is a Data Fiduciary. Users are Data Principals. We determine the purpose and means of processing personal data and are accountable for compliance with the DPDP framework.

A2. Principles We Follow

  • Lawful, consent-based processing — we process personal data on the basis of valid consent or a legitimate use permitted by law.
  • Purpose limitation — we process personal data only for the specified, lawful purposes notified to you.
  • Data minimisation — we collect only the personal data necessary for those purposes.
  • Accuracy — we take reasonable steps to keep personal data accurate and up to date.
  • Storage limitation — we retain personal data only as long as necessary or legally required.
  • Security & accountability — we implement reasonable safeguards and remain accountable for processing carried out by us and by our processors.

A3. Notice and Consent

We provide a clear, itemised notice describing the personal data collected, the purposes, how to withdraw consent, how to exercise rights, and how to complain to the Data Protection Board of India. Consent is obtained by a clear affirmative action and can be withdrawn as easily as it was given.

A4. Processing by Data Processors

Where third parties process personal data on our behalf (hosting, storage, payments, OTP/messaging, analytics), they do so under binding contracts that require them to process data only on our instructions, maintain confidentiality, apply security safeguards, and assist with breach handling and data-principal requests.

A5. Data Principal Rights

Data Principals may exercise the rights to access, correction/completion/updating, erasure, grievance redressal, nomination, and consent withdrawal, as detailed in our Privacy Policy. Requests are handled by our Data Protection contact within the timelines prescribed by law.

A6. Children's and Guardianship Data

The Platform is for professional adults (18+) only. We do not knowingly process the personal data of children. Where verifiable parental/guardian consent would be required by the DPDP framework, and such processing is not intended by the Platform, we will decline or delete such data on becoming aware of it.

A7. Security Safeguards

We maintain reasonable technical and organisational measures, including encryption in transit, access controls, secure infrastructure, logging, and periodic review. We restrict access to personal data on a need-to-know basis.

A8. Personal Data Breach Management

On becoming aware of a personal data breach, we will: (i) take immediate steps to contain and assess it; (ii) notify each affected Data Principal without undue delay in plain language (nature, likely consequences, measures taken, and steps they can take, with a contact point); and (iii) notify the Data Protection Board of India, in each case as required by the DPDP Rules.

A9. Data Retention & Erasure

We retain personal data only for as long as necessary for the stated purposes or as required by law, after which we erase or anonymise it. Where required by the DPDP Rules, we give at least 48 hours' notice before completing erasure.

A10. Cross-Border Transfers

Personal data is primarily stored and processed in India. Any transfer outside India is made only in accordance with the DPDP framework and any Central Government conditions.

PART B — CONSUMER RIGHTS (Consumer Protection Framework)

B1. Application

As an entity providing services to users through a digital platform, we observe the applicable requirements of the Consumer Protection Act, 2019 and the Consumer Protection (E-Commerce) Rules, 2020, to the extent they apply to our B2B SaaS service.

B2. Transparent Disclosures

We provide clear, accurate and accessible information about: the identity and contact details of the Firm; each Subscription plan's base price, 18% GST, and exact payable recurring total; the plan duration and renewal behaviour; and our Refund & Cancellation Policy — all before you complete a purchase.

B3. No Unfair or Deceptive Practices

We do not engage in unfair trade practices or misleading advertising. We do not use fake scarcity, false countdowns, fabricated urgency, or inflated or unverifiable claims. Testimonials and results shown are genuine and non-guaranteed.

B4. No Unfair Contract Terms

Our Terms are drafted to avoid "unfair contract terms" as understood under the Consumer Protection Act, 2019. Terms concerning termination, forfeiture and refunds are disclosed prominently before purchase, are reasonable, and preserve your non-waivable statutory rights.

B5. Grievance Redressal Mechanism

We maintain an accessible grievance redressal mechanism and a designated Grievance Officer. We will acknowledge each consumer grievance within the period, and endeavour to resolve it within the timeframe, prescribed by the applicable rules. Contact details are in Section C1.

B6. Statutory Rights Preserved

Nothing in our Terms, Refund & Cancellation Policy or any other policy excludes, restricts or waives any right or remedy that applicable consumer or data-protection law grants you and that cannot be waived by agreement.

PART C — CONTACT AND ESCALATION

C1. Officer and Contact

Grievance Officer & Data Protection Contact Broker Seva (a partnership firm) Name: Sumit Dilipsingh Thakur (Partner) Email: contact@brokerseva.com Phone: +91 75591 39174 Address: 477, Anand Nagar, Sakkardhara Road, Near Sakkardhara Police Station, Nagpur, Maharashtra – 440009 Website: brokerseva.com

C2. External Escalation

  • Data protection matters: the Data Protection Board of India.
  • Consumer matters: the National Consumer Helpline and the appropriate Consumer Disputes Redressal Commission.