PRIVACY POLICY

Yes. Since Bigstore 360 is an Indian e-commerce business handling customer information, the Privacy Policy should be written around the Digital Personal Data Protection Act, 2023 (DPDP Act) and the applicable Digital Personal Data Protection Rules, 2025, along with relevant e-commerce and IT-law requirements. The DPDP framework emphasizes clear notice, specified purposes, consent where applicable, withdrawal of consent, security safeguards, grievance handling, and related data-principal rights.

Welcome to Bigstore 360 (“Bigstore 360”, “we”, “us”, “our”). Bigstore 360 operates an e-commerce marketplace offering Indian traditional handicrafts, imitation and artificial jewellery, German silver products, home décor and kitchen products, handcrafted glycerine soaps, and Ayurvedic, natural and herbal wellness products.

We respect your privacy and are committed to protecting the personal information and data that you provide to us when you visit, register on, browse, purchase from, or otherwise use our website, mobile services, products, and related services (“Services”).

This Privacy Policy explains what information we collect, why we collect it, how we use and protect it, when we may share it, your rights and choices, and how you can contact us regarding privacy matters.

By accessing or using our Services, you acknowledge that you have read and understood this Privacy Policy.

1. ABOUT THIS PRIVACY POLICY

This Privacy Policy applies to personal information collected through:

• Our website and online store;
• Customer registration and account services;
• Product orders and purchases;
• Payment and transaction processes;
• Customer support and communication;
• Promotional campaigns and newsletters;
• Reviews, feedback and other user-generated content;
• Cookies and similar technologies;
• Offline interactions connected with our online business; and
• Other services or platforms operated by Bigstore 360 where this Privacy Policy is displayed.

This Policy should be read together with our Terms & Conditions, Shipping Policy, Cancellation & Refund Policy, Disclaimer, and other applicable policies published on our website.

2. INFORMATION WE COLLECT

Depending on how you use our Services, we may collect the following categories of information.

1. Personal and Contact Information

This may include:

• Full name;
• Mobile/telephone number;
• Email address;
• Billing address;
• Shipping/delivery address;
• City, state, country and postal/ZIP code;
• Communication preferences; and
• Other information voluntarily provided by you.

1. Account Information

If you create an account, we may collect:

• Username or account details;
• Login credentials;
• Account preferences;
• Order history;
• Saved addresses;
• Wishlist or shopping preferences; and
• Other information associated with your account.

Where passwords are used, we take reasonable measures to protect account credentials. You are responsible for maintaining the confidentiality of your login information.

1. Order and Transaction Information

When you purchase products from us, we may collect information relating to:

• Products purchased;
• Order number;
• Quantity and price;
• Billing and shipping details;
• Delivery information;
• Returns, refunds and cancellations;
• Customer service interactions; and
• Transaction status.

1. Payment Information

Payments may be processed through third-party payment gateways or financial service providers.

Depending on the payment method, information may be processed by the relevant payment provider, including transaction references and payment status.

Bigstore 360 does not intend to store complete debit-card, credit-card, CVV or banking credentials on its own systems unless specifically required and legally permitted.

Payment information may be handled directly by authorised payment service providers in accordance with their applicable privacy and security policies.

1. Device and Technical Information

When you visit our website, certain technical information may automatically be collected, such as:

• IP address;
• Browser type;
• Operating system;
• Device type;
• Device identifiers;
• Website interaction information;
• Pages visited;
• Referring/exit pages;
• Date and time of access;
• Approximate location derived from technical information; and
• Website performance and diagnostic information.

1. Cookies and Similar Technologies

We may use cookies, pixels, tags, web beacons and similar technologies to:

• Operate and secure our website;
• Remember preferences;
• Maintain shopping carts and sessions;
• Understand website usage;
• Improve website functionality;
• Analyse traffic and performance;
• Personalise certain experiences; and
• Support advertising and marketing activities where applicable.

You may be able to control cookies through your browser or device settings. Disabling certain cookies may affect website functionality.

3. INFORMATION YOU PROVIDE VOLUNTARILY

You may provide information when you:

• Create an account;
• Place an order;
• Subscribe to communications;
• Contact customer support;
• Submit a review or rating;
• Participate in a contest or promotional activity;
• Request information;
• Submit feedback;
• Communicate with us through email, telephone, messaging or social-media channels; or
• Otherwise interact with Bigstore 360.

Please do not provide personal information belonging to another person unless you are legally authorised to provide it.

4. PURPOSES FOR WHICH WE USE YOUR INFORMATION

We may process personal information for legitimate and specified business purposes, including:

Order Fulfilment

To:

• Process and confirm orders;
• Arrange payment;
• Pack and dispatch products;
• Deliver products;
• Provide order updates;
• Process returns and refunds; and
• Provide after-sales support.

Customer Service

To:

• Respond to enquiries;
• Resolve complaints;
• Provide assistance;
• Verify account or order information;
• Communicate regarding products and services; and
• Improve customer experience.

Website Operations

To:

• Operate and maintain our website;
• Improve website functionality;
• Detect technical problems;
• Maintain security;
• Prevent misuse; and
• Monitor website performance.

Personalisation and Improvement

We may use relevant information to understand customer preferences, improve products and services, analyse trends and enhance your shopping experience.

Marketing and Promotional Communications

Where legally permitted and where required, we may send:

• Product information;
• Promotional offers;
• Discounts;
• New-arrival announcements;
• Newsletters;
• Festival or seasonal offers; and
• Other marketing communications.

You may opt out of marketing communications at any time.

Legal and Regulatory Compliance

We may process information when necessary to:

• Comply with applicable laws;
• Respond to lawful requests from government or regulatory authorities;
• Protect our legal rights;
• Detect or investigate fraud;
• Prevent illegal activities;
• Resolve disputes; or
• Enforce our agreements and policies.

5. LEGAL BASIS FOR PROCESSING

Where applicable under Indian data-protection law, we may process personal data based on:

• Your consent;
• Processing necessary to provide a service or fulfil a transaction requested by you;
• Compliance with legal obligations;
• Legitimate and lawful business purposes where permitted;
• Prevention or detection of fraud, misuse or security incidents; and
• Other grounds permitted under applicable law.

Where consent is required, we will seek consent through an appropriate affirmative action and will not rely on unnecessary or unrelated information.

The Digital Personal Data Protection Act, 2023 requires consent to be free, specific, informed, unconditional and unambiguous, with clear affirmative action, and provides for withdrawal of consent.

6. CONSENT AND WITHDRAWAL OF CONSENT

Where processing is based on your consent, you may withdraw that consent at any time, subject to applicable law.

Withdrawal of consent will not affect the lawfulness of processing carried out before withdrawal.

Please note that certain information may continue to be processed where we are legally required or otherwise authorised to retain or process it, including information necessary for completed transactions, tax, accounting, fraud prevention, dispute resolution or legal compliance.

Requests to withdraw consent may be submitted using the contact details provided in the Contact Us / Grievance Redressal section of this Policy.

7. DATA MINIMISATION

We seek to collect and process only information reasonably necessary for the relevant purpose.

You are not required to provide information that is not necessary for a particular service, except where such information is required by law or is necessary to provide the requested service.

8. HOW WE SHARE PERSONAL INFORMATION

We do not sell your personal information as a business commodity.

We may share information with trusted third parties where reasonably necessary for operating our business and providing Services, including:

1. Delivery and Logistics Partners

We may share necessary information such as:

• Name;
• Mobile number;
• Delivery address;
• Order details; and
• Tracking information

with courier, shipping and logistics providers to deliver your order.

1. Payment Service Providers

Information necessary to process payments, refunds and transactions may be shared with authorised payment processors and financial service providers.

1. Technology and Service Providers

We may use third-party providers for:

• Website hosting;
• Cloud storage;
• IT infrastructure;
• Cybersecurity;
• Analytics;
• Customer support;
• Communication services;
• Email/SMS services;
• Website maintenance; and
• Other business-support functions.

Such providers may process information only for authorised business purposes and subject to applicable contractual, legal and security requirements.

1. Professional and Legal Advisers

Information may be disclosed to lawyers, accountants, auditors, consultants, insurers and other professional advisers where reasonably necessary.

1. Government and Law-Enforcement Authorities

We may disclose information where required or authorised by applicable law, court order, government direction, regulatory requirement, or lawful request.

1. Business Transfers

If Bigstore 360 undergoes a merger, acquisition, restructuring, sale of assets, financing, business transfer or similar transaction, personal information may be transferred as part of that transaction, subject to applicable law and appropriate safeguards.

9. THIRD-PARTY SERVICES AND LINKS

Our website may contain links to third-party websites, applications, payment gateways, social-media platforms, advertisements or other services.

These third parties may have their own privacy policies and terms.

Bigstore 360 is not responsible for the privacy practices, security, content or policies of independent third-party websites or services.

We recommend reviewing the privacy policies of third parties before providing them with personal information.

10. DATA SECURITY

We take reasonable technical and organisational measures designed to protect personal data against:

• Unauthorised access;
• Unauthorised disclosure;
• Accidental loss;
• Destruction;
• Alteration;
• Misuse;
• Cybersecurity threats; and
• Other unlawful processing.

Security measures may include access controls, authentication mechanisms, secure transmission technologies, monitoring, backups, restricted access and other appropriate safeguards.

However, no online system, website, network or electronic transmission can be guaranteed to be completely secure.

Therefore, while we take reasonable security measures, we cannot guarantee absolute security.

The earlier IT framework in India also recognised the importance of reasonable security practices for protection of personal information.

11. DATA BREACHES AND SECURITY INCIDENTS

If a personal-data breach or security incident occurs, Bigstore 360 will take appropriate steps required under applicable law, which may include investigation, containment, remediation, documentation and notifications to affected persons and/or authorities where legally required.

12. DATA RETENTION

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, unless a longer retention period is required or permitted by applicable law.

Factors determining retention may include:

• Completion of transactions;
• Customer-service requirements;
• Accounting and taxation requirements;
• Legal and regulatory obligations;
• Fraud prevention;
• Dispute resolution;
• Enforcement of agreements; and
• Security and business requirements.

When personal information is no longer required, we may securely delete, anonymise or otherwise dispose of it in accordance with applicable law.

13. YOUR DATA PROTECTION RIGHTS

Subject to applicable law and the circumstances of processing, you may have rights relating to your personal data, including:

Right to Access Information

You may request information about personal data processed by us and other information available to you under applicable law.

Right to Correction

You may request correction of inaccurate or incomplete personal information.

Right to Erasure

You may request deletion of personal data where applicable, subject to legal and legitimate retention requirements.

Right to Withdraw Consent

Where processing is based on consent, you may withdraw that consent.

Right to Grievance Redressal

You may raise concerns or complaints regarding our processing of your personal data.

Right to Nominate

Where applicable under the DPDP framework, you may exercise the right to nominate another individual to exercise specified rights in the event of death or incapacity.

The availability and scope of these rights may depend on applicable law and the nature of the processing.

14. HOW TO EXERCISE YOUR RIGHTS

To exercise applicable privacy rights, submit a request using the contact details below.

Your request should preferably include:

• Your name;
• Registered email address or mobile number;
• Order/account reference, if relevant;
• Description of your request; and
• Any information reasonably necessary to verify your identity and process the request.

We may take reasonable steps to verify that the person making a request is authorised to do so.

We will process eligible requests within the period prescribed by applicable law.

15. GRIEVANCE REDRESSAL

If you have a complaint, concern or question regarding your personal information or this Privacy Policy, please contact our designated grievance contact.

Grievance Officer / Privacy Contact:
Name: [Insert Name]
Designation: [Insert Designation]
Email: [Insert Official Email]
Phone: [Insert Phone Number]
Postal Address: [Insert Complete Business Address]

We will make reasonable efforts to acknowledge and resolve privacy-related complaints in accordance with applicable law.

16. MARKETING COMMUNICATIONS

If you have opted to receive promotional communications, we may contact you through:

• Email;
• SMS;
• Telephone;
• WhatsApp or other permitted messaging channels;
• Website notifications; or
• Other lawful communication channels.

You may unsubscribe from marketing communications by:

• Clicking the unsubscribe option where provided;
• Adjusting account preferences;
• Contacting us; or
• Following the instructions provided in the communication.

Please note that transactional and essential service communications—such as order confirmation, payment status, shipping updates, delivery notifications, refunds and security messages—may continue even if you opt out of promotional communications.

17. CHILDREN’S PRIVACY

Our Services are intended for use by persons who are legally capable of entering into transactions under applicable law.

We do not knowingly seek to collect personal data from children in circumstances where parental/guardian consent or other safeguards are legally required.

Where applicable law requires verifiable parental consent or other protections for processing children’s data, we will implement the safeguards required by law.

If you believe that a child has provided personal data to us in circumstances where it should not have been collected, please contact us so that we can review and take appropriate action.

18. INTERNATIONAL DATA TRANSFERS

Some service providers used by Bigstore 360 may process or store information outside India.

Where personal data is transferred outside India, we will take steps required under applicable Indian law regarding such transfers, contractual protections, security and other applicable requirements.

19. COOKIES POLICY

Cookies may be used to provide a better browsing experience.

Cookies may help us:

• Remember your preferences;
• Maintain your shopping cart;
• Keep you signed in;
• Understand website usage;
• Improve website performance;
• Analyse traffic; and
• Support relevant advertising where applicable.

You can manage cookies through your browser settings. Some website functions may not operate correctly if certain cookies are disabled.

20. ANALYTICS AND ADVERTISING

Where used, Bigstore 360 may use analytics and advertising technologies provided by third parties to understand website performance, measure campaigns and improve customer experience.

Such services may collect information such as browser type, device information, pages visited, approximate location, interactions and other technical information according to their respective policies.

Where legally required, appropriate consent or privacy controls will be provided.

21. USER-GENERATED CONTENT

If you submit reviews, ratings, photographs, comments, testimonials or other content to our website, portions of that content may be publicly visible.

Please do not submit confidential, sensitive or unnecessary personal information in reviews or other publicly accessible areas.

By submitting content, you represent that you have the necessary rights and permissions to provide it and that the content does not unlawfully infringe the rights of another person.

22. ACCURACY OF INFORMATION

We encourage you to provide accurate and updated information.

You may contact us to request correction or updating of your personal information where applicable.

We may rely on information provided by you and cannot be responsible for inaccuracies resulting from information that you knowingly or unknowingly provide incorrectly.

23. ACCOUNT SECURITY

If you create an account with Bigstore 360, you are responsible for keeping your username, password and other login credentials confidential.

You should immediately notify us if you suspect:

• Unauthorised access;
• Password compromise;
• Suspicious account activity; or
• Unauthorised transactions.

We will take reasonable steps to investigate and address reported security concerns.

24. FRAUD PREVENTION

We may process personal and transaction information to identify, prevent and investigate:

• Fraudulent transactions;
• Payment abuse;
• Account misuse;
• Fake orders;
• Returns/refund abuse;
• Unauthorised access;
• Cybersecurity incidents; and
• Other unlawful or prohibited activities.

This processing may be necessary to protect customers, Bigstore 360 and third parties.

25. LEGAL DISCLOSURES

Bigstore 360 may disclose personal information where reasonably necessary to:

• Comply with applicable laws;
• Respond to court orders;
• Respond to government or regulatory authorities;
• Protect the safety, rights and property of Bigstore 360;
• Protect customers and other persons;
• Investigate suspected fraud or unlawful activity; or
• Enforce our Terms & Conditions and other policies.

26. E-COMMERCE AND CONSUMER PROTECTION

Bigstore 360 aims to conduct its e-commerce activities transparently and in accordance with applicable consumer-protection and e-commerce requirements.

We seek to provide appropriate information regarding products, prices, payment, delivery, cancellation, returns, refunds and customer support through our website and applicable policies.

Indian e-commerce requirements include safeguards concerning consumer consent and prohibit recording purchase consent through pre-ticked checkboxes; consent for purchases should involve explicit affirmative action.

27. NO SALE OF PERSONAL DATA

Bigstore 360 does not sell customers’ personal information as a commercial product.

We may, however, disclose information to service providers, logistics companies, payment processors, technology providers, professional advisers, authorities and other parties where necessary for providing Services, complying with law, protecting rights, preventing fraud or for other purposes described in this Policy.

28. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect:

• Changes in our business;
• New products or services;
• Changes in technology;
• Changes in applicable laws or regulations;
• Regulatory guidance; or
• Improvements to our privacy practices.

When we make changes, we may update the “Effective Date” or “Last Updated” date at the beginning of this Policy.

Where required by applicable law, we will provide additional notice or obtain consent.

We encourage you to periodically review this Privacy Policy.

29. SEVERABILITY

If any provision of this Privacy Policy is determined to be invalid, unlawful or unenforceable, that provision shall be interpreted or modified to the extent necessary to make it enforceable, and the remaining provisions shall continue to apply to the extent permitted by law.

30. GOVERNING LAW

This Privacy Policy shall be governed by and interpreted in accordance with the laws of India, subject to applicable statutory rights and legal requirements.

Any dispute relating to this Privacy Policy shall be subject to the jurisdiction of the competent courts and authorities having jurisdiction over the relevant matter, subject to applicable law.

31. CONTACT US

For questions, requests, complaints or concerns regarding this Privacy Policy or the handling of personal information, please contact:

BIGSTORE 360

Legal/Business Entity Name: Bigstore 360
Website: www.bigstore360.com
Registered/Business Address: S-6, 2^nd Floor, Vimal Tower, M.G.Road, Sanjay Place.
City: Agra
State: Uttar Pradesh
Country: India
Email: bigstore360@gmail.com

Customer Care: +91 82188 47822

Grievance Officer: Shrikant Mudgal

Grievance Email: info@bigstore360.com

Working Hours: 8 Hours ( Five Days Working )

32. CUSTOMER ACKNOWLEDGEMENT

By using the Bigstore 360 website and Services, you acknowledge that you have had an opportunity to read and understand this Privacy Policy.

Where consent is required under applicable law, Bigstore 360 will seek consent through appropriate mechanisms and provide legally required choices and controls.

Bigstore 360 — Your Trust, Our Responsibility.

Effective Date: 11/09/2026
Last Updated: 11/09/2026