Data Protection & User Consent Policy

1. Purpose of This Policy

This Data Protection & User Consent Policy explains how Cliffnova-X Private Limited (“Company”, “we”, “our”, or “us”) ensures protection of personal data and obtains lawful consent from users, customers, and direct sellers in compliance with the Information Technology Act, 2000 and applicable Indian data protection rules.

2. Scope

This policy applies to all personal data collected, processed, stored, or shared by the Company through its website, mobile platforms, offline onboarding, sales activities, and direct selling operations.

3. Principles of Data Protection

  • Personal data is collected only for lawful and legitimate purposes
  • Data collection is limited to what is necessary for business operations
  • Personal data is processed fairly, transparently, and securely
  • Reasonable security safeguards are implemented to prevent misuse
  • Data is retained only for the required duration

4. User Consent

By accessing our website, registering as a customer or direct seller, placing orders, or submitting personal information, users provide their free, informed, and specific consent to the collection and use of their personal data as described in this policy and our Privacy Policy.

5. Mode of Consent

User consent may be obtained through:

  • Online forms and registration pages
  • Checkbox acceptance of policies and terms
  • Written or digital agreements
  • Submission of KYC and onboarding documents

6. Use of Personal Data

Personal data may be used for:

  • Order processing, delivery, and customer communication
  • Direct seller onboarding, training, and commission payouts
  • Legal, regulatory, and statutory compliance
  • Fraud prevention and security monitoring
  • Internal business operations and record maintenance

7. Data Sharing & Disclosure

Personal data shall not be shared without consent except where required for service delivery or by law. Data may be shared with banks, payment gateways, logistics partners, government authorities, and authorized service providers under confidentiality obligations.

8. Data Security Measures

The Company adopts reasonable technical and organizational security measures to protect personal data from unauthorized access, loss, alteration, or disclosure. Access is restricted to authorized personnel only.

9. Data Retention & Deletion

Personal data is retained only for as long as necessary to fulfill business, legal, or regulatory purposes. Users may request deletion of their data, subject to applicable laws and record-keeping requirements.

10. User Rights

Users have the right to:

  • Access their personal data
  • Request correction or update of inaccurate data
  • Withdraw consent where applicable
  • Request deletion of personal data, subject to legal obligations

11. Withdrawal of Consent

Users may withdraw their consent by submitting a written request through official communication channels. Withdrawal of consent may affect the availability of certain services.

12. Policy Updates

Cliffnova-X Private Limited reserves the right to amend or update this policy to reflect changes in legal, regulatory, or operational requirements. Updated versions will be published on the website.

Final Statement

Cliffnova-X Private Limited is committed to protecting personal data and respecting user consent in accordance with applicable Indian laws and ethical business practices.