1. Our Commitment
Publiconn Digital Pvt. Ltd. acts as the Data Fiduciary for all personal data processed through the eBee platform. We collect, store, and process data only for the purposes for which consent has been given, and only for as long as necessary.
2. Legal Basis for Processing
We process your personal data on the following grounds:
- Consent — for marketing communications and optional features (you may withdraw at any time)
- Contractual necessity — to fulfill orders you place through the platform
- Legal obligation — to comply with applicable Indian laws (e.g. GST records, law enforcement requests)
- Legitimate interest — for fraud prevention, platform security, and service improvement
3. Data We Process
- Identity data — name, mobile number
- Location data — delivery addresses and real-time location (only during active app use)
- Transaction data — order history, payment references (not card numbers)
- Technical data — device ID, IP address, app version
- Communications data — support tickets and messages sent to eBee
4. Data Localisation
All personal data of Indian users is stored on servers located within India in compliance with applicable data localisation requirements. We do not transfer personal data outside India without appropriate safeguards.
5. Security Measures
We implement the following technical and organisational measures to protect your data:
- TLS 1.2+ encryption for all data in transit
- AES-256 encryption for data at rest
- Role-based access controls — staff access only the data required for their role
- Regular security audits and penetration testing
- Incident response procedures with 72-hour breach notification
6. Your Rights Under DPDPA 2023
As a Data Principal, you have the following rights:
- Right to Access — request a summary of personal data we hold about you
- Right to Correction — request correction of inaccurate or incomplete data
- Right to Erasure — request deletion of your data (subject to legal retention requirements)
- Right to Grievance Redressal — raise a complaint with our Data Protection Officer
- Right to Nominate — nominate another individual to exercise these rights on your behalf
To exercise any of these rights, email us at connect.ebee@gmail.com with the subject line "Data Rights Request" and your registered mobile number.
7. Data Retention Schedule
- Account data — retained while the account is active; deleted within 30 days of account deletion
- Order history — 3 years (for accounting and legal compliance)
- Support communications — 2 years
- Transaction logs — 5 years (as required by financial regulations)
8. Third-Party Processors
We use the following categories of third-party data processors, each bound by data processing agreements:
- Payment gateways — for secure payment processing (they never receive your card data via eBee servers)
- Cloud infrastructure — hosting and storage on India-based servers
- SMS/notification providers — for OTP and order status messages
9. Grievance Officer
In accordance with the DPDPA 2023 and the IT Act, 2000, our designated Grievance Officer can be reached at:
Email: connect.ebee@gmail.com
Subject line: "Grievance — Data Protection"
Response time: Within 30 days of receipt
If you are not satisfied with our response, you may approach the Data Protection Board of India once operational.
10. Updates to This Policy
This policy will be updated to reflect changes in law or our data practices. The date at the top of this page reflects the most recent revision. We will notify users of significant changes through the app.