Privacy Policy

Last Updated: January 1, 2026

This Privacy Policy explains how we collect, use, and protect your data. We comply with the Digital Personal Data Protection Act, 2023 (DPDP Act).

1. Information We Collect

• Identity: Name, Aadhaar, PAN, DOB, gender
• Contact: Mobile, email, address
• Business: Company name, GSTIN, bank details, category
• Payment: Transaction ID (payment gateway handles card details)
• Technical: IP address, browser, device (for security)

2. How We Use Your Information

• Processing your GeM registration/service request
• Filing applications on GeM portal on your behalf
• Communication about application status
• Customer support
• Sending your GeM Seller ID and credentials
• Legal compliance

3. Data Sharing

Your information is shared only with:

• Government e-Marketplace (GeM) portal (required for registration)
• Our staff handling your application (bound by confidentiality)
• Payment processors (for transaction processing)
• Legal authorities (only when required by law)

We NEVER sell your data to third parties.

4. Data Retention

• Application data: 7 years (compliance)
• Communication records: 3 years
• Payment records: 7 years (IT Act)

5. Data Security

• SSL/TLS encryption for all data transmission
• Secure database with encryption at rest
• Access controls for staff
• Regular security audits
• PCI-DSS compliant payment processing

6. Your Rights Under DPDP Act 2023

• Right to Access: Request copy of your data
• Right to Correction: Request corrections
• Right to Erasure: Request deletion (subject to retention)
• Right to Grievance: Contact grievance officer

Email: privacy@gemportal.ltd

7. Grievance Officer

• Name: [Your Grievance Officer]
• Email: privacy@gemportal.ltd
• Response: Within 30 days