Dukancard ("we," "our," or "us") respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your data when you use our platform, including our website, mobile applications, and related services (collectively, the"Platform").

Please read this policy carefully to understand our practices regarding your personal information. By using the Platform, you consent to the collection and use of your information as described in this policy.

Dukancard is the data controller responsible for your personal information collected through the Platform.

Contact: support@dukancard.com

3.1 Information You Provide

• Account information: name, email address, phone number, password, profile photo.
• Business information: business name, logo, cover photo, category, description, address, location coordinates, contact details, social media links, tax identification, KYC documents.
• Address information: delivery addresses, labels, and geographic details you save for orders.
• Payment information: payment method selections and transaction references. Actual card or bank details are processed by our payment-service providers and are not stored by Dukancard directly.
• Communications: messages, support requests, and feedback you send to us.
• Social content: posts, comments, likes, follows, and other social interactions on the Platform.

3.2 Information We Collect Automatically

• Usage data: pages visited, features used, time spent, click patterns, and navigation paths.
• Device information: device type, operating system, browser type, IP address, and device identifiers.
• Location data: approximate geographic location based on IP address or, with your consent, precise location from your mobile device.
• Log data: server logs, error reports, timestamps, and request metadata.
• Push-notification tokens: device tokens registered when you enable push notifications on mobile apps.
• QR-code interactions: scans, verifications, and order handoff confirmations.

3.3 Information From Third Parties

• Payment providers: Razorpay (India) and future providers share transaction status, payment IDs, and settlement records.
• KYC providers: verification results and identity-confirmation status.
• Map services: Google Maps API may provide location and address-geocoding data.

We use your personal information for the following purposes:

• Service delivery: creating and managing accounts, business storefronts, product catalogs, orders, and delivery assignments.
• Payment processing: facilitating payments, escrow workflows, settlements, and payout processing to merchants.
• Verification: KYC verification, fraud detection, and platform-security measures.
• Communication: sending order updates, push notifications, email alerts, and support responses.
• Social features: displaying posts, feeds, likes, and enabling interactions between users.
• Analytics: understanding platform usage, improving features, and measuring performance.
• Legal compliance: fulfilling obligations under tax, consumer-protection, anti-fraud, and data-retention laws.
• Platform integrity: maintaining audit trails, dispute resolution, and enforcing our Terms of Service.

Where required by applicable law, we process your personal information on the following legal bases:

• Contractual necessity: processing is necessary to perform our obligations under the Terms of Service (e.g., processing orders, managing accounts).
• Legitimate interests: processing for fraud prevention, platform security, analytics, and business improvement, where our interests are not overridden by your rights.
• Consent: where we rely on your consent, such as for precise location data or marketing communications. You may withdraw consent at any time.
• Legal obligation: processing required to comply with applicable laws, including tax, audit, and financial-reporting requirements.

We do not sell your personal information. We may share your information in the following circumstances:

• Between platform users: businesses see customer names, phone numbers, and delivery addresses to fulfill orders. Customers see business names, locations, and product listings.
• Service providers: payment processors (Razorpay), cloud-hosting and database providers, map services (Google Maps), and push-notification services.
• Riders: delivery riders receive customer names, addresses, and order details necessary to complete deliveries.
• Legal requirements: if required by law, regulation, legal process, or government request.
• Business transfers: in connection with a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.
• Protection of rights: to enforce our Terms of Service, protect the safety, rights, or property of Dukancard, our users, or the public.

We retain your personal information for as long as your account is active or as needed to provide the services you have requested.

Specific retention periods depend on the type of data and the applicable legal requirements. For example, financial and tax records may be retained for 7 years or longer as required by law.

We implement industry-standard security measures to protect your personal information, including:

• Encryption of data in transit (HTTPS/TLS) and at rest.
• Strict access-control policies on all data stores.
• Secure, time-limited authentication tokens.
• Rate limiting and abuse protection on public endpoints.
• Regular security audits and advisory reviews.
• Restricted access to personal data on a need-to-know basis.

While we strive to protect your information, no system is completely secure. We encourage you to use strong passwords and protect your account credentials.

Depending on your jurisdiction, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal data, subject to our retention obligations described in Section 7.
• Portability: Request a portable copy of your data in a machine-readable format.
• Objection: Object to processing based on legitimate interests or direct marketing.
• Restriction: Request restriction of processing under certain circumstances.
• Withdraw consent: Withdraw previously given consent at any time.

To exercise any of these rights, contact us at support@dukancard.com. We will respond within the timeframe required by applicable law.

The Platform is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If we learn that we have collected personal information from a child under 18, we will take steps to delete such information promptly.

Your information may be processed in countries other than your own. By using the Platform, you consent to the transfer of your data to countries that may have different data-protection laws. We ensure appropriate safeguards are in place for such transfers.

We use cookies and similar technologies for authentication, session management, and analytics. You can control cookie preferences through your browser settings. Disabling cookies may affect certain Platform features.

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a new "Last updated" date. We encourage you to review this policy periodically.

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Dukancard
Email: support@dukancard.com