Privacy Policy

Last updated: 18th March, 2025

1. Introduction

This Privacy Policy describes how XplorEast (“we”, “us”, “our”) collects, uses, discloses, and protects the personal data of our customers (“you”, “your”) who use our mobile application and website (the “Platform”). We are committed to protecting your privacy in accordance with the Digital Personal Data Protection Act, 2023 (DPDPA) and the Digital Personal Data Protection Rules, 2025.

2. Information We Collect

We collect only the personal data that is necessary for the purposes for which it is processed.

  • Personal Data Provided by You: Name, email address, phone number, shipping address, billing address, and order details. We do not store full payment card details.
  • Data Collected Automatically: Device ID, IP address, operating system, app usage patterns, and cookies (with your consent).

3. Purpose and Lawful Basis of Processing

We process your personal data for the following specific purposes:

  • To fulfill your orders and provide customer support.
  • To send you service-related communications (e.g., order updates).
  • To improve our Platform and personalize your experience.
  • To send you marketing communications, only with your explicit and separate consent.
  • To comply with applicable legal obligations.

4. Your Consent and Its Withdrawal

Under the DPDPA, consent is the cornerstone of data processing.

  • Specific Consent: We will seek your consent for each specific purpose (e.g., one consent for order processing, a separate consent for marketing). We do not bundle consents.
  • Withdrawal of Consent: You have the right to withdraw your consent at any time. Withdrawing consent will not affect the lawfulness of processing based on consent before its withdrawal. You can withdraw consent through your account settings or by contacting us.

5. Your Rights as a Data Principal

Under the DPDPA, you have the following rights regarding your personal data:

  • Right to Access: Request a summary of your personal data we hold.
  • Right to Correction: Request correction of inaccurate or incomplete data.
  • Right to Erasure: Request deletion of your personal data.
  • Right to Grievance Redressal: Lodge a complaint regarding data processing.
  • Right to Nominate: The right to nominate another individual to exercise your rights in the event of death or incapacity.

To exercise these rights, please contact our Grievance Officer (details below). We will respond to your request within a reasonable timeframe as prescribed by law.

6. Data Retention and Deletion

We retain your personal data only for as long as necessary to fulfill the specified purpose.

  • Inactive Accounts: If you do not log into your account or interact with us for three years, we will initiate the process of erasing your personal data. We will provide you with a 48-hour notice before deletion, allowing you to take action to keep your account active.

7. Disclosure and Transfer of Data

  • To Service Providers: We share data with third-party service providers (e.g., logistics, payment processors) who are contractually bound to process data only on our instructions and in compliance with the DPDPA.
  • Cross-Border Transfer: We will only transfer your personal data outside India to countries that are not restricted by the Indian government and in compliance with the DPDPA.
  • No Sale of Data: We do not sell your personal data to third parties.

8. Data Security

We implement reasonable security safeguards, including encryption and access controls, to protect your personal data from breaches. In the unfortunate event of a personal data breach, we will intimate the affected Data Principals (you) and the Data Protection Board of India without undue delay, providing details of the breach, its potential consequences, and the measures we are taking to mitigate harm.

9. Children’s Data

Our Platform is not intended for children. We do not knowingly process the personal data of individuals below the age of 18. If we need to process a child’s data, we will obtain verifiable parental consent in compliance with the DPDPA.

10. Grievance Redressal and Contact Information

If you have any questions or concerns regarding your data, please contact our designated Grievance Officer:

  • Name: T. Kapai
  • Designation: Grievance Officer
  • Email Address: info@xploreast.in
  • Physical Address: D-60, 3rd Floor, Amar Colony, Lajpat Nagar 4, New Delhi -110024

We acknowledge that the “digital memory is not infinite,” and we are committed to resolving any grievances promptly.

11. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. The updated policy will be posted on our Platform with a revised “Last updated” date.

Scroll to Top