1. Introduction

Welcome to NGOBazaar ("NGOBazaar", "Platform", "Marketplace", "Company", "we", "our", or "us"), an online multi-vendor marketplace operated by NGOFeed Digital Solution Private Limited.

NGOBazaar provides a digital marketplace that enables customers to discover and purchase products offered by eligible sellers, including NGOs, social enterprises, self-help groups, artisans, rural producers, women entrepreneurs, businesses, and other approved sellers.

At NGOBazaar, we recognize that the privacy, confidentiality, and security of your personal information are important. We are committed to handling personal data responsibly, transparently, securely, and in accordance with applicable Indian laws.

This Privacy Policy explains how NGOBazaar collects, uses, processes, stores, shares, protects, and retains information when you visit or use the NGOBazaar website, create an account, purchase products, communicate with us, or otherwise interact with our Marketplace.

This Privacy Policy should be read together with NGOBazaar's:

• Terms & Conditions;
• Shipping & Delivery Policy;
• Cancellation Policy;
• Return, Refund & Replacement Policy;
• Cookie Policy; and
• Grievance Redressal Policy.

These policies collectively govern relevant aspects of your use of the Marketplace.

2. About NGOBazaar

NGOBazaar is owned, developed, operated, and managed by NGOFeed Digital Solution Private Limited.

NGOBazaar operates a technology-enabled multi-vendor marketplace connecting customers with independent sellers offering products through the Platform.

Depending upon the transaction and applicable terms, NGOBazaar may facilitate services including:

• customer account creation and authentication;
• product discovery and browsing;
• marketplace search;
• shopping cart functionality;
• order placement;
• payment processing and payment facilitation;
• order management;
• seller communication;
• logistics and delivery coordination;
• shipment tracking;
• cancellations;
• returns, refunds, and replacements;
• customer support;
• fraud prevention;
• marketplace security;
• notifications and transactional communications; and
• other marketplace-related services.

Products available on NGOBazaar may be offered by independent third-party sellers.

NGOBazaar does not necessarily manufacture, own, or directly sell every product displayed on the Marketplace. The identity of the applicable seller and other relevant product information may be displayed on product, order, invoice, or other relevant pages in accordance with applicable requirements.

3. Scope of this Privacy Policy

This Privacy Policy applies to personal data processed by NGOBazaar in connection with the customer-facing Marketplace, including when you:

• visit or browse NGOBazaar;
• search for products;
• create an account;
• log in or authenticate your account;
• verify your mobile number;
• add or manage delivery addresses;
• add products to your cart;
• place an order;
• make or attempt to make a payment;
• receive an order;
• cancel an order;
• request a return, replacement, or refund;
• contact customer support;
• submit a complaint;
• communicate with NGOBazaar;
• participate in surveys, promotions, or campaigns;
• subscribe to communications where offered; or
• otherwise use NGOBazaar services.

This Privacy Policy applies regardless of whether you access NGOBazaar through a desktop computer, laptop, tablet, mobile device, or other supported device.

This customer Privacy Policy does not govern seller onboarding, seller verification, seller KYC, seller banking information, or operation of the NGOBazaar Seller Portal. Those activities are governed by the separate privacy policy and legal terms applicable to NGOBazaar sellers.

4. Definitions

For purposes of this Privacy Policy:

4.1 Personal Data

"Personal Data" means data about an individual who is identifiable by or in relation to such data, consistent with applicable law.

Personal Data may include information such as your name, mobile number, email address, delivery address, account information, and information relating to your orders.

4.2 Customer or User

"Customer", "User", "you", or "your" means an individual who visits, accesses, registers with, purchases through, or otherwise uses the NGOBazaar Marketplace.

4.3 Seller

"Seller" means an organization, enterprise, artisan, producer, business, or other eligible person/entity approved to offer products through the NGOBazaar Marketplace.

4.4 Processing

"Processing" includes any operation performed on Personal Data, including collection, recording, organization, storage, retrieval, use, sharing, disclosure, updating, analysis, deletion, or destruction.

4.5 Marketplace Services

"Marketplace Services" means services made available through NGOBazaar, including account management, authentication, product discovery, ordering, payment facilitation, delivery coordination, customer support, returns, refunds, replacements, notifications, and related services.

5. Information We Collect

The Personal Data we collect depends upon how you interact with NGOBazaar and the services you use.

We seek to collect Personal Data that is reasonably necessary for specified marketplace, contractual, security, compliance, and other lawful purposes.

5.1 Account and Contact Information

When you create or use an NGOBazaar account, we may collect:

• full name;
• mobile number;
• email address, where provided;
• account identifiers;
• authentication and verification information;
• communication preferences; and
• account status and related information.

5.2 Mobile Number and OTP Information

NGOBazaar may use mobile-number-based authentication.

When you request or use an OTP, we may process:

• your mobile number;
• OTP request information;
• OTP verification status;
• authentication timestamps;
• verification attempts;
• security and anti-abuse information; and
• related technical logs.

OTP messages may be delivered through supported communication channels, including WhatsApp, SMS, or other communication services made available by NGOBazaar.

We use this information to authenticate users, protect accounts, prevent unauthorized access, detect abuse, and maintain marketplace security.

You should never share an OTP or authentication code with another person.

6. Delivery Address Information

When you place an order or save an address, we may collect information such as:

• recipient name;
• mobile number;
• alternate contact information, where provided;
• house, building, street, or locality;
• landmark, where provided;
• city;
• district;
• state;
• postal/PIN code;
• address type; and
• delivery instructions.

This information is necessary to process and deliver orders.

Delivery information may be shared with the relevant seller, logistics providers, shipping partners, and delivery personnel to the extent reasonably necessary to fulfill your order.

7. Order and Transaction Information

When you place or interact with an order, we may process information including:

• order number;
• products ordered;
• seller associated with the order;
• quantity;
• product price;
• discounts;
• taxes;
• shipping charges;
• total order value;
• payment status;
• order status;
• shipment information;
• tracking information;
• delivery status;
• cancellation information;
• return requests;
• replacement requests;
• refund information;
• complaint information; and
• communications relating to the order.

We maintain appropriate transaction records for marketplace operations, accounting, customer support, fraud prevention, dispute resolution, and compliance with applicable law.

8. Payment Information

Payments made through NGOBazaar may be processed using authorized payment gateways, banks, payment aggregators, or other payment service providers.

Depending upon the payment method used, information processed in connection with a transaction may include:

• payment method;
• transaction identifier;
• payment status;
• amount paid;
• payment timestamp;
• refund status;
• payment-provider reference number; and
• limited payment-related information made available to NGOBazaar by the payment provider.

Sensitive payment credentials such as complete card numbers, CVV values, UPI PINs, banking passwords, or similar authentication credentials should not be requested or stored by NGOBazaar unless expressly necessary and permitted under applicable law and applicable payment-security requirements.

Payment service providers may independently process payment information in accordance with applicable law and their own terms and privacy practices.

9. Information Collected Automatically

When you access or use NGOBazaar, certain technical information may be collected automatically.

This may include:

• IP address;
• browser type and version;
• device type;
• operating system;
• language settings;
• time zone;
• device or session identifiers;
• referring pages;
• pages viewed;
• navigation paths;
• session duration;
• login timestamps;
• interactions with Platform features;
• error logs;
• crash information;
• performance information;
• security events; and
• other technical information reasonably required to operate and secure the Marketplace.

We may collect this information through server logs, cookies, security systems, analytics technologies, and similar mechanisms.

10. Cookies and Similar Technologies

NGOBazaar may use cookies and similar technologies to operate, secure, analyze, and improve the Marketplace.

These may include:

Essential Cookies

Necessary for functions such as:

• authentication;
• secure sessions;
• shopping cart operation;
• security verification;
• fraud prevention; and
• Platform functionality.

Functional Cookies

Used to remember preferences and improve your experience.

Analytics Cookies

Where used, these help us understand how visitors interact with NGOBazaar and improve Platform performance and usability.

Security Technologies

These technologies may help detect:

• unauthorized access;
• account misuse;
• suspicious authentication attempts;
• automated abuse;
• fraudulent activity; and
• cybersecurity threats.

Where required by applicable law, appropriate choices or consent mechanisms will be provided for non-essential technologies.

Further information may be provided in the NGOBazaar Cookie Policy.

11. Information Received From Third Parties

NGOBazaar may receive information from third parties involved in providing Marketplace Services, including:

• sellers;
• payment service providers;
• banks and payment partners;
• logistics and shipping providers;
• communication service providers;
• fraud prevention providers;
• security providers;
• analytics providers;
• customer-support providers;
• technology service providers; and
• governmental or regulatory authorities where permitted or required by law.

For example, a logistics provider may provide shipment status information, while a payment provider may inform us whether a transaction was successful, failed, reversed, or refunded.

12. How We Use Your Personal Data

We may process Personal Data for purposes including:

Account Creation and Authentication

To:

• create and maintain your account;
• verify your mobile number;
• authenticate login requests;
• send OTPs;
• secure your account;
• provide account recovery;
• maintain account preferences; and
• prevent unauthorized access.

Order Processing

To:

• receive orders;
• communicate orders to relevant sellers;
• confirm transactions;
• process order status changes;
• facilitate fulfillment;
• generate appropriate transaction records;
• coordinate shipping;
• provide shipment tracking;
• facilitate delivery; and
• maintain order history.

Payments and Refunds

To:

• facilitate payments;
• confirm payment status;
• reconcile transactions;
• detect payment fraud;
• facilitate refunds;
• investigate failed transactions; and
• maintain legally required financial records.

Delivery and Logistics

To:

• determine serviceability;
• generate shipments;
• share required delivery information;
• arrange pickup and delivery;
• provide tracking;
• handle delivery exceptions;
• process returns; and
• investigate lost or damaged shipments.

Returns, Replacements and Cancellations

To:

• receive and evaluate requests;
• communicate with relevant sellers;
• arrange reverse logistics where applicable;
• facilitate refunds;
• investigate disputes; and
• prevent misuse or fraudulent claims.

Customer Support

To:

• respond to inquiries;
• resolve complaints;
• investigate problems;
• maintain support history;
• resolve disputes; and
• improve service quality.

Marketplace Security and Fraud Prevention

To:

• protect user accounts;
• detect suspicious activity;
• prevent fraud;
• prevent unauthorized access;
• detect automated abuse;
• investigate policy violations;
• protect Platform infrastructure; and
• maintain security and audit logs.

Legal and Regulatory Compliance

To:

• comply with applicable laws;
• maintain legally required records;
• respond to lawful governmental requests;
• comply with court orders;
• cooperate with authorized regulatory or law-enforcement authorities;
• establish, exercise, or defend legal claims; and
• enforce applicable Marketplace terms and policies.

Improving NGOBazaar

We may analyze Platform usage and operational information to:

• improve Marketplace functionality;
• improve search and discovery;
• improve customer experience;
• identify technical problems;
• measure Platform performance;
• develop new features;
• improve fraud detection; and
• improve operational efficiency.

Where appropriate, aggregated or anonymized information may be used for analytics and business intelligence.

13. Communications

NGOBazaar may communicate with you through channels including:

• WhatsApp;
• SMS;
• email;
• telephone;
• website notifications; and
• other supported communication channels.

Transactional and Service Communications

These may include:

• OTPs;
• login/security alerts;
• account notifications;
• order confirmations;
• payment confirmations;
• shipping notifications;
• delivery updates;
• cancellation updates;
• return/replacement updates;
• refund updates;
• customer-support messages; and
• important policy or service notices.

Such communications may be necessary to provide requested Marketplace Services.

Promotional Communications

Where permitted and where required consent has been obtained, NGOBazaar may send information about:

• offers;
• promotions;
• campaigns;
• new products or categories;
• Marketplace initiatives; and
• other marketing communications.

Where applicable, users will be provided a reasonable method to withdraw consent or opt out of promotional communications.

Opting out of promotional communications will not necessarily prevent necessary transactional, security, or service-related communications.

14. Sharing of Personal Data

NGOBazaar does not sell your Personal Data to third parties.

We may disclose or make Personal Data available where reasonably necessary for Marketplace operations, requested services, legal compliance, security, or other lawful purposes.

14.1 Sellers

When you purchase a product, relevant information may be provided to the seller responsible for fulfilling the order.

This may include information reasonably necessary for:

• order processing;
• invoicing where applicable;
• packaging;
• shipping;
• delivery coordination;
• returns/replacements;
• responding to order-related issues; and
• complying with applicable legal obligations.

Sellers are expected to use customer information only for legitimate marketplace and order-related purposes and in accordance with applicable requirements.

14.2 Logistics and Shipping Providers

We may provide information required to deliver orders, such as:

• recipient name;
• delivery address;
• contact number;
• order/shipment identifiers;
• package information; and
• delivery instructions.

14.3 Payment Service Providers

Relevant transaction information may be exchanged with payment gateways, payment aggregators, banks, and other financial service providers for:

• payment processing;
• transaction verification;
• reconciliation;
• refunds;
• fraud prevention; and
• financial compliance.

14.4 Communication Providers

We may use third-party communication providers to deliver:

• OTP messages;
• WhatsApp messages;
• SMS;
• email;
• notifications; and
• other service communications.

Only information reasonably required for the relevant communication should be provided.

14.5 Technology and Service Providers

We may engage service providers for:

• cloud hosting;
• data storage;
• content delivery;
• security;
• analytics;
• monitoring;
• customer support;
• email delivery;
• backup and recovery; and
• other infrastructure necessary to operate NGOBazaar.

14.6 Government and Regulatory Authorities

Personal Data may be disclosed when reasonably necessary to comply with:

• applicable law;
• lawful court orders;
• law-enforcement requirements;
• regulatory requests;
• tax requirements; or
• other legally binding obligations.

14.7 Professional Advisors

Information may be shared where necessary with lawyers, accountants, auditors, insurers, consultants, and other professional advisors subject to appropriate confidentiality obligations.

14.8 Corporate Transactions

If NGOFeed Digital Solution Private Limited undergoes a merger, acquisition, restructuring, financing, transfer of business/assets, or similar corporate transaction, information may be transferred as part of that transaction subject to applicable law and appropriate protections.

15. Consent and Lawful Processing

NGOBazaar processes Personal Data for lawful purposes and in accordance with applicable requirements.

Where consent is required, we aim to provide a clear notice explaining the Personal Data sought and the purpose for which it will be processed.

Where processing relies upon your consent, you may withdraw that consent using the mechanism provided by NGOBazaar, subject to applicable law.

Withdrawal of consent does not invalidate processing lawfully carried out before withdrawal.

Certain Personal Data may be necessary to provide services requested by you. If such information is not provided, or if consent necessary for providing a particular service is withdrawn, we may be unable to provide that service.

NGOBazaar may also process Personal Data without consent where processing is permitted or required under applicable law.

16. Data Minimisation and Purpose Limitation

NGOBazaar seeks to collect Personal Data reasonably necessary for specified purposes connected with the operation, security, compliance, and improvement of the Marketplace.

We seek to avoid collecting Personal Data that is unnecessary for providing our services.

Personal Data should not be used for purposes materially incompatible with the purposes communicated to you unless permitted by applicable law or appropriate additional notice/consent is provided where required.

17. Data Security

NGOBazaar takes reasonable administrative, technical, and organizational measures designed to protect Personal Data against unauthorized access, disclosure, alteration, misuse, loss, or destruction.

Depending upon the relevant systems and risks, safeguards may include:

• HTTPS/TLS encrypted communications;
• encryption in transit;
• access controls;
• authentication controls;
• secure credential handling;
• role-based access;
• infrastructure monitoring;
• security logs and audit trails;
• fraud and abuse monitoring;
• backups and recovery procedures;
• secure cloud infrastructure;
• vulnerability management;
• software and security updates; and
• restricted access to Personal Data.

Access to Personal Data should be limited to persons or service providers who reasonably require access for authorized purposes.

No internet-based system or method of electronic storage can be guaranteed to be completely secure. NGOBazaar therefore cannot guarantee absolute security, despite taking reasonable precautions.

You are also responsible for protecting access to your account and should never disclose OTPs, passwords, authentication codes, or other security credentials to unauthorized persons.

18. Personal Data Breaches

If NGOBazaar becomes aware of a Personal Data breach, we will investigate the incident and take reasonable measures to contain, mitigate, and remediate the breach.

Where notification is required under applicable law, NGOBazaar will provide required information to affected individuals and/or the appropriate authority in the manner and within the timelines prescribed by applicable law.

19. Data Retention

NGOBazaar retains Personal Data only for as long as reasonably necessary for the purposes for which it was collected or as otherwise required or permitted by applicable law.

Retention periods may differ depending on the nature of the information.

Account Information

Account information may be retained while your account remains active and for an appropriate period after account closure where required for legal, security, fraud-prevention, accounting, or dispute-resolution purposes.

Order and Transaction Records

Order, payment, invoice, refund, return, and related transaction records may be retained for periods required by applicable taxation, accounting, consumer-protection, fraud-prevention, audit, or other legal requirements.

Support and Complaint Records

Customer-support and grievance records may be retained where reasonably necessary for service quality, dispute resolution, fraud prevention, and compliance.

Security and Technical Logs

Technical, authentication, security, and audit logs may be retained for reasonable periods for cybersecurity, fraud detection, incident investigation, and Platform security.

When Personal Data is no longer required, NGOBazaar will take reasonable steps to delete, anonymize, or otherwise securely dispose of it in accordance with applicable requirements and retention practices.

20. Your Privacy Rights

Subject to the applicability and commencement of relevant provisions of Indian law, you may have rights regarding your Personal Data.

These may include the following.

Access

You may request information regarding Personal Data being processed by NGOBazaar and other information available to you under applicable law.

Correction and Updating

You may request correction of inaccurate or misleading Personal Data and completion or updating of incomplete or outdated Personal Data.

Where account functionality permits, certain information may be updated directly through your account.

Erasure

You may request erasure of Personal Data where permitted under applicable law.

NGOBazaar may retain information where retention remains necessary or legally permitted, including for compliance, taxation, accounting, fraud prevention, dispute resolution, security, or establishment/exercise/defence of legal claims.

Withdrawal of Consent

Where processing is based on consent, you may withdraw your consent through the mechanisms made available by NGOBazaar.

Grievance Redressal

You may raise concerns regarding NGOBazaar's processing of your Personal Data through the grievance mechanism described below.

Nomination

Where and when applicable under the Digital Personal Data Protection Act, 2023, you may exercise any right of nomination available under law.

Requests may be subject to reasonable identity verification to protect your account and Personal Data from unauthorized requests.

21. Children's Privacy

The treatment of children's Personal Data will be governed by applicable Indian law, including applicable provisions of the Digital Personal Data Protection Act, 2023 and rules made thereunder as and when those provisions are in force.

NGOBazaar is not intended to encourage children to independently enter transactions they are not legally capable of entering.

Where processing of a child's Personal Data requires verifiable consent of a parent or lawful guardian under applicable law, NGOBazaar will implement appropriate measures before undertaking such processing.

Where applicable, NGOBazaar will not undertake tracking or behavioural monitoring of children or targeted advertising directed at children except as permitted by law.

If you believe that a child's Personal Data has been provided to NGOBazaar contrary to applicable requirements, please contact us.

22. Cross-Border Processing

NGOBazaar primarily operates in India.

Some technology, infrastructure, communication, security, analytics, or other service providers may process or store information using infrastructure located outside India.

Where Personal Data is transferred or processed outside India, NGOBazaar will comply with applicable restrictions and requirements governing such processing or transfer.

23. Third-Party Websites and Services

NGOBazaar may contain links to websites, applications, payment services, or other services operated by third parties.

Independent third parties may maintain their own privacy policies and practices.

NGOBazaar is not responsible for the privacy practices of websites or services that are not owned or controlled by NGOFeed Digital Solution Private Limited.

Users should review the privacy policies and terms applicable to third-party services before providing Personal Data directly to those services.

24. Account Closure and Deletion Requests

Where account-deletion functionality is available, you may request closure or deletion of your NGOBazaar account through the available account or customer-support mechanisms.

Closing an account does not necessarily result in immediate deletion of every record associated with the account.

NGOBazaar may retain information where reasonably necessary or legally required for purposes including:

• outstanding orders;
• returns and refunds;
• chargebacks;
• disputes;
• fraud prevention;
• taxation;
• accounting;
• regulatory compliance;
• security investigations; and
• legal claims.

Personal Data that is no longer required will be handled in accordance with our retention practices and applicable law.

25. Changes to this Privacy Policy

NGOBazaar may update this Privacy Policy from time to time to reflect changes in:

• applicable laws;
• regulatory requirements;
• Marketplace functionality;
• business operations;
• data-processing practices;
• service providers;
• technology; or
• security practices.

The latest version will be published on NGOBazaar and will identify the applicable effective date and/or last updated date.

Where required by applicable law, we will provide additional notice or obtain consent before a material change affecting the processing of Personal Data takes effect.

Users are encouraged to review this Privacy Policy periodically.

26. Contact Us

For questions about this Privacy Policy or NGOBazaar's handling of Personal Data, you may contact:

NGOBazaar

A marketplace platform operated by:

NGOFeed Digital Solution Private Limited

Email: info@ngobazaar.com
Website: ngobazaar.com

We aim to respond to legitimate privacy-related requests and concerns within a reasonable period and in accordance with applicable legal requirements.

27. Grievance Officer

For grievances relating to privacy, Personal Data, or the processing of your information, you may contact:

Grievance Officer: Shahbaz Hassan
Designation: Managing Director
Organization: NGOFeed Digital Solution Private Limited
Email: info@ngobazaar.com

NGOBazaar will make reasonable efforts to acknowledge, investigate, and address grievances within timelines prescribed under applicable law.

Where applicable, individuals may also exercise remedies available to them under Indian data-protection and other applicable laws after following the applicable grievance-redressal process.

28. Governing Law

This Privacy Policy is governed by the laws of India.

Nothing in this Privacy Policy is intended to restrict or waive any statutory rights or remedies available to an individual under applicable data-protection, consumer-protection, or other laws.

29. Privacy Policy Acknowledgement

By accessing or using NGOBazaar, you acknowledge that you have been provided access to this Privacy Policy describing how NGOBazaar handles Personal Data.

Where applicable law requires consent for a particular processing activity, NGOBazaar will seek such consent through an appropriate notice or mechanism.

Your use of the Marketplace remains subject to NGOBazaar's applicable Terms & Conditions and other policies.

NGOBazaar
Operated by NGOFeed Digital Solution Private Limited

Privacy Contact: info@ngobazaar.com
Grievance Officer: Shahbaz Hassan, Managing Director

Version 1.0 — Effective 3 October 2026