Commercify360 ("we," "us," "our") respects your privacy. This Privacy Policy explains how we collect, use, share, and protect personal data when you visit commercify360.com or use our services. We comply with India's Digital Personal Data Protection Act, 2023 (DPDP Act), the Information Technology Act, 2000, and where applicable, the General Data Protection Regulation (GDPR).
1. What data we collect
We collect only what we need to deliver our services and respond to you.
Information you provide directly
- Name, work email, brand name, marketplace URLs (when you submit an audit request or contact form)
- Company information you share during a strategy call (category, scale, growth goals)
- Email address (when you subscribe to DatumPulse Weekly)
- Payment information (processed by our PCI-compliant payment partners; we do not store card details)
Information collected automatically
- IP address, browser type, device type, operating system
- Pages viewed, time on page, referrer URL, click events
- Cookie identifiers (see Cookies and tracking below)
Information from third parties
- Public marketplace data (Amazon, Flipkart, Blinkit, Zepto) used in the Datum Intelligence research platform that powers our audits
- Public business profiles (LinkedIn, company websites) when you've engaged with us
2. How we collect it
We collect personal data through:
- Forms and submissions: Free audit requests, contact forms, newsletter signups, resource downloads.
- Cookies and analytics: Server logs and analytics tags as described below.
- Direct communications: Email, calls, and meetings during a sales or service relationship.
3. How we use your data
We process personal data only for specified, lawful purposes:
- To deliver the services or audits you've requested
- To respond to your inquiries and follow up on calls
- To send DatumPulse newsletter (only if you've opted in)
- To improve our website and services through aggregated analytics
- To detect, prevent, and address technical or security issues
- To comply with legal obligations under Indian law
We do not sell personal data. We do not use your data to train third-party AI models.
4. Who we share data with
We share personal data only with:
- Service providers who help us run the business (cloud hosting, email delivery, payment processing, CRM). These providers are contractually bound to protect your data.
- Datum Intelligence, our parent company, where required to deliver the integrated research and growth services.
- Legal authorities when required by law or to protect our rights, your safety, or the safety of others.
- Acquirers in the event of a merger, acquisition, or asset sale, with prior notice.
We do not share data with third-party advertisers or data brokers.
5. Cookies and tracking
We use the following categories of cookies:
- Strictly necessary: required for the site to function (session management, security). Cannot be disabled.
- Analytics: aggregated traffic analytics (e.g., Google Analytics or equivalent). Used to understand how visitors use our site.
- Functional: remembers preferences such as form-field autofill and language settings.
You can decline non-essential cookies via the consent banner on your first visit, or by adjusting your browser settings. Some site features may not work fully without functional cookies.
6. Data retention
We keep personal data only as long as needed for the purposes set out in this policy:
- Audit submissions and contact-form data: 24 months from last interaction
- Newsletter subscriber data: until you unsubscribe
- Customer engagement records: 7 years (per Indian tax and accounting law)
- Anonymous analytics data: 26 months (Google Analytics default)
You can request earlier deletion at any time via the contact details below.
7. Your rights
Under the DPDP Act and applicable global privacy laws, you have the right to:
- Access the personal data we hold about you
- Correct inaccurate or incomplete data
- Delete your personal data (subject to legal retention obligations)
- Withdraw consent for processing where consent is the legal basis
- Port your data to another service provider
- Object to certain types of processing (e.g., direct marketing)
- Lodge a complaint with the Data Protection Board of India or your local data protection authority
To exercise any of these rights, email us at mp@commercify360.com. We respond to verified requests within 30 days.
8. Security
We use industry-standard safeguards to protect your data:
- TLS encryption in transit for all website traffic
- Encryption at rest for stored personal data
- Access controls and audit logging on internal systems
- Regular security review and least-privilege access
- Vendor risk reviews for any third party that handles your data
No system is perfectly secure. If we discover a personal data breach affecting you, we will notify you and the Data Protection Board within the timelines required by law.
9. International data transfers
Some of our service providers (cloud hosting, email delivery, analytics) operate in jurisdictions outside India. Where we transfer personal data internationally, we rely on standard contractual clauses or equivalent safeguards to ensure your data remains protected. We never transfer personal data to a country that the Government of India has notified as restricted.
10. Children's privacy
Our services are intended for business use and not directed at children under 18. We do not knowingly collect personal data from anyone under 18. If you believe a child has provided us with personal data, please contact us and we will delete it.
11. Changes to this policy
We may update this Privacy Policy from time to time. The "Last Updated" date at the top of this policy reflects the latest revision. If we make material changes, we will notify subscribers by email and post a prominent notice on our website. Your continued use of the services after the effective date of an updated policy means you accept the changes.
If you have questions or concerns about this Privacy Policy, want to exercise your privacy rights, or have a complaint about how we've handled your data:
Data Protection Officer / Grievance Officer
Commercify360
Email: mp@commercify360.com
Postal: Sareyan Technologies Pvt. Ltd., Gurugram, Haryana, India
We will acknowledge receipt of your communication within 7 business days and respond substantively within 30 days. If you remain unsatisfied, you may escalate to the Data Protection Board of India established under the DPDP Act, 2023.
Additional Information for Users in India: This Privacy Policy is subject to the Digital Personal Data Protection Act, 2023, and the Information Technology Act, 2000, as amended, and the rules made thereunder. By using our services, you consent to the collection and use of your information in accordance with this policy.
For our Terms & Conditions, see terms.html. For our Refund Policy, see refund-policy.html.