Business, better connectedPrivacy notice
Version 2026-10 · AsiaShutter Technologies Private Limited (the data fiduciary)
This notice explains how AsiaShutter handles your personal data under the Digital Personal Data Protection Act, 2023. We collect only what we need to run the marketplace, we never sell your data, and you stay in control of it.
What we collect and why
| Data | Purpose | How long |
|---|---|---|
| Mobile number | Sign-in by OTP; shared with a supplier only when you send them a request | Encrypted at rest; kept while your account exists |
| Name and company details | Your profile, quotations, purchase orders and invoices | While your account exists; invoices for 8 years as GST law requires |
| GSTIN, PAN, bank details (sellers) | Verification badges and payouts | Encrypted at rest; masked everywhere except to you |
| Messages, requests and quotations | Delivering them to the other party | While your account exists |
| Device and sign-in records | Keeping your account safe, fraud checks | Up to 1 year; security logs as CERT-In directions require |
Your consents
We ask for consent for each purpose separately and keep a receipt of what you agreed to and when:
- Create and run my account
- Share my name and number with the supplier I contact
- Send me offers and product news
- Show my buying requirement to matching suppliers
Offers and requirement sharing are optional and can be switched off at any time in Privacy & data.
Who sees your data
A supplier sees your name and number only after you send them a request. Payment partners receive what they need to process a payment. We disclose data to authorities only when the law requires it.
Your rights
- Access — download a copy of your data from Privacy & data.
- Correction — edit your profile at any time; ask us for anything you cannot edit yourself.
- Erasure — delete your account. Your public profile goes offline at once; your personal data is erased after 90 days, unless you cancel or the law requires us to keep it.
- Withdraw consent — as easily as you gave it.
- Nominate — tell us who may exercise these rights for you in case of death or incapacity, by writing to the grievance officer.
Security
Mobile numbers, GSTIN, PAN and bank details are encrypted field by field. Access by our staff is limited by role and recorded in an audit trail. If a breach affects you, we will tell you and the Data Protection Board as the law requires.
Grievance officer
Grievance Officer
E-mail: grievance@example.com
We reply within 30 days. If you are not satisfied, you may approach the Data Protection Board of India.