Privacy Policy | BlueKonkan

01 Who We Are

BlueKonkan Marketplace ("BlueKonkan", "we", "us", "our") is a hyperlocal marketplace platform operated from Malvan, Sindhudurg, Maharashtra, India.

We are the Data Controller for all personal data collected through www.bluekonkan.com and our associated mobile applications.

This Privacy Policy is compliant with India's Digital Personal Data Protection Act, 2023 (DPDPA) and applicable provisions of the IT Act, 2000.

02 Data We Collect

We collect the following categories of personal data:

Category	Examples	When Collected
Identity Data	Name, Aadhar (employees only)	Registration / KYC
Contact Data	Email address, phone number	Registration / Forms
Transaction Data	Bookings, orders, payment amounts	When you book or order
Payment Data	Last 4 digits of card, UPI ID (via Razorpay — we never store full card details)	Payment processing
Technical Data	IP address, browser type, device info	Automatic — on site visit
Usage Data	Pages visited, search queries, click events	Automatic — analytics
Location Data	City/region (approximate) — only if permitted	On consent (browser prompt)
Vendor Data	Business name, bank details (for payouts), GST number	Vendor registration
User Content	Reviews, photos, messages to vendors	When submitted

We do not collect: Full card numbers, CVV codes, social security equivalents, sensitive medical data, or data about children under 18.

03 How We Use Your Data

We use your data for these purposes (with legal basis):

Process bookings and orders — Contractual necessity
Send booking confirmations and invoices — Contractual necessity
Customer support and dispute resolution — Contractual necessity
Process vendor payouts — Contractual necessity
Fraud detection and security — Legitimate interest
Platform analytics and improvement — Legitimate interest
Marketing emails — Consent (you can unsubscribe anytime)
Legal compliance — Legal obligation

We never sell your personal data to third parties. We never use your data for political advertising or profiling outside our platform.

04 Data Sharing

We share your data only in these limited circumstances:

With Vendors — When you make a booking, the vendor receives your name, phone and booking details to fulfil the service.
Razorpay — Our payment processor. Subject to their Privacy Policy.
Google Analytics — Anonymous usage statistics. No personal identification is shared with Google.
Email service provider — For sending transactional emails only. They are contractually prohibited from using your data for other purposes.
Law enforcement — Only when legally required by a court order or government authority under Indian law.

We do not share your data with advertisers, data brokers, insurance companies, or any other third parties not listed above.

05 Cookies & Tracking

We use the following types of cookies:

Cookie Type	Purpose	Can Opt Out?
Essential	Session management, CSRF protection, login state	No — required for site to function
Analytics	Google Analytics — anonymous page views and traffic data	Yes — clear browser cookies
Preferences	Remember your language, currency, filter settings	Yes — clear browser cookies
Security	reCAPTCHA fraud detection (Google)	No — required for security

We do not use tracking cookies for advertising or cross-site tracking. You can manage cookies in your browser settings at any time.

06 Data Security

We protect your data using industry-standard measures:

All data transmitted over HTTPS/TLS encryption
Passwords hashed using bcrypt (never stored in plain text)
Payment processing via PCI-DSS compliant Razorpay — we never store card data
Database access restricted to authorised personnel only
Regular security audits and vulnerability assessments
Redis-based session management with automatic expiry

In the event of a data breach that affects your personal data, we will notify you within 72 hours as required by applicable law.

07 Your Rights

Under the DPDPA 2023 and applicable laws, you have these rights:

📋

Right to Access

Request a copy of all personal data we hold about you.

✏️

Right to Correct

Update inaccurate or incomplete data in your account settings.

🗑️

Right to Delete

Request deletion of your account and personal data.

📦

Right to Portability

Export your data in a machine-readable format.

🚫

Right to Object

Opt out of marketing emails and non-essential processing.

📞

Right to Complain

Lodge a complaint with the Data Protection Board of India.

To exercise any of these rights, email privacy@bluekonkan.com. We will respond within 30 days. Most requests can be self-served from your account dashboard.

08 Data Retention

Data Type	Retention Period	Reason
Account data	Until account deleted + 30 days	Service provision
Transaction records	7 years	GST / Indian tax law requirement
Invoices	7 years	Financial regulations
Server logs (IP)	90 days	Security monitoring
Marketing consent records	Until withdrawn + 3 years	Proof of consent
Support communications	2 years	Dispute resolution

09 Children's Privacy

BlueKonkan is not intended for children under the age of 18. We do not knowingly collect personal data from minors. If you believe a child has provided us with personal data, please contact us immediately at privacy@bluekonkan.com and we will delete such data promptly.

10 Contact Our Privacy Team

For any privacy-related queries or to exercise your rights:

📧

Email

privacy@bluekonkan.com

🏢

Postal Address

BlueKonkan Marketplace
Navi Mumbai
Maharashtra, India

⏱️

Response Time

Within 30 days
of request