Open Network For Digital Commerce (“we”, “us”, “the website”, “ONDC”) is strongly committed to the data subject’s (“you”, “your”, “subscriber”, “user”) right to privacy and to keeping your information secure. To earn your trust and confidence in our commitment, we are fully disclosing our privacy practices. We encourage you to read our privacy statement to understand what types of personally identifiable information we collect and how we use this information. This statement applies solely to the information collected on ondc.org.
This Privacy Policy describes the usage of information provided or collected on the sites and applications where this Privacy Policy is posted. We follow this Privacy Policy in accordance with applicable law in the regions where we operate. In some cases, we may provide additional data Privacy Policies specific to certain services or regions. Those terms are to be read in combination with this policy.
When you provide information to us on a third-party site or platform (for example, via our applications like social media login) the information we collect is through those third-party sites linked with our applications and is covered by this Privacy Policy, and the information the third-party site or platform collects is subject to the third-party site or platform’s privacy policy. Privacy choices you have made on the third-party site or platform will not apply to our use of the information we have collected directly through our site. Our site may contain links to other sites not owned or controlled by us and we are not responsible for the privacy practices of those sites. We encourage you to be aware when you leave our sites or applications and to read the privacy policies of other sites that may collect your personal information.
All capitalized terms that have not been specifically defined herein shall have the same meaning as provided under the Terms of Use. This Privacy Policy should be read in conjunction and together with the Terms of Use applicable to the service (website, application or other service) you are using.
By using ONDC’s service (for example, when you register for an employment opportunity, enter a contest or promotion, communicate with us, on our site), you agree to our collection, use and sharing of your personal information as described in this policy. In some cases, particularly if you reside in a country governed by a data protection regulation, we may ask you to provide explicit consent to access our services before proceeding further.
In case of any roaming user profile or if you are a traveller visiting various countries around the world and avail ONDC’s services, then we will consider the country of registration (where you provide us with your details for the first time) as your primary country and the consents obtained at the time of registration will be valid for your processing of personal information. The privacy terms applicable as per the law of that country at the time of registration will apply to you.
You should not access or use the ONDC Website by means of any mechanism or technology which conceals your actual geo-location or provides incorrect details of your location (for example, use a virtual private network (VPN/Proxy) to access the Services).
If you access the ONDC Website using any mechanism or technology intended to conceal your actual geo-location (for example, VPN, Proxy etc.), ONDC will not be responsible or liable for any collection, storage or processing of your personal information or data that happens as a result of your use of such mechanisms/technologies.
‘Personal Information’ or ‘PII’ is defined as any information that identifies (whether directly or indirectly) a particular individual or natural person, such as the individual’s name, postal address, email address, and mobile number indicating to that particular person or is identifiable. When anonymous information is directly or indirectly associated with personal information, the resulting information can also be treated as personal information.
ONDC does not collect PII without your consent. ONDC and its service partners may use your PII to operate their website and provide services.
We may ask for and collect the following personal information about you when you use the website and without this information we may not be able to provide you with all the requested services;
To use certain features on the website and for the Services, you may provide basic contact Information through forms available on the website, including but not limited to:
If you send us personal correspondence, such as emails or letters, or if other users or third parties send us correspondence about your activities or postings on the website, we may collect and store such information.
We may collect additional information at other times, when you provide feedback(s), modify your email preferences, respond to surveys, or communicate with us. This information may include your name, e-mail id, mobile number, location, etc
We collect information about you and your use of our service, your interactions with us and our service partners, as well as information regarding your computer or other devices used to access our service (such as mobile devices, tablets and other viewing devices). This information may include, but is not limited to:
To improve the responsiveness of the “Website” for our users, we may use “cookies“, or similar electronic tools to collect information to assign each visitor a unique, random number as a User Identification (“User ID“) to understand the user’s individual interests using the identified computer. Unless you voluntarily identify yourself (through registration, for example), we would not know who you are, even if we assign a cookie to your computer. The only personal information which a cookie can hold is the information you supply. A cookie cannot read data from your hard drive. Our advertisers may also assign their own cookies to your browser(s) (if you click on their ads), a process that we do not control. We receive and store certain types of information whenever you interact with us via website(s), through your computer/laptop/notebook/ mobile/tablet/pad/handheld device or any other electronic device capable of connecting to the internet. For more details you can refer to our Cookie Policy
The Website will only collect and process personal information about you where we have a lawful basis. Lawful basis on which we would process your personal information includes obtaining explicit consent from you for processing your personal information or processing for “legitimate interests” where processing is necessary by us to provide you with our services.
We use information to provide, analyse, administer, enhance and personalize our service and marketing efforts, to process your registration, and to communicate with you related to the cases mentioned below. For example, we use information to:
We provide personalisation by using data you submit to us in terms of cookies, IP addresses, web beacons or similar technologies in relation to the devices you use. By doing so, we can provide you with content and/or advertising that we believe is more relevant to your interests. Please provide explicit consent for the same when we collect your data.
You can also raise a request to alter your consent choices in respect of capturing of cookies at teams@ondc.org.
The Information as supplied by the users enables us to improve the Services and provide you the most user-friendly experience.
Any personally identifiable information provided by you will not be considered as sensitive if it is freely available and / or accessible in the public domain like any comments, messages, blogs, scribbles available on social platforms like Facebook, twitter etc. Any posted/uploaded/conveyed/communicated by users on the public sections of the website or the Application becomes published content and is not considered personally identifiable information subject to this Privacy Policy. In case you choose to decline to submit personally identifiable information, we may not be able to provide certain services to you. In any case, we will not be liable and or responsible for the denial of certain services to you for lack of you providing the necessary personal information. When you register on the website, we contact you from time to time about updating your personal information to provide the users such features that we believe may benefit / interest you.
At times the website may make certain personal information available to strategic partners that work with the website to provide services, or that help the website market to users. Personal information will only be shared by the website to provide or improve our service and marketing aspects; it will not be shared with third parties for their marketing purposes. Persons to whom we may disclose your personal information may include:
We may disclose your information if we use third party processors to administer and process your personal information for the purposes notified in the Privacy Policy, such as for hosting activities related to the use of our websites or services. The website may include links to various third-party websites that may collect Your Personal Information. Use of Your information collected by such third-party platforms will be governed by the Privacy Policy of the respective third-party platforms, which are beyond our control. Once you leave our servers (you can tell where you are by checking the URL in the location bar on your browser), use of any information you provide is governed by the Privacy Policy of the operator of the website/application that you are visiting/using. That policy may differ from ours. We may share non-personally identifiable information publicly and with our service partners. For example, we share information publicly to show trends about the general use of our services.
The website may disclose personally identifiable information if required to do so by law, or if your actions on our website violate the Terms of Service/Use or any of our usage guidelines for specific products or services or in the good-faith belief that such action is necessary to:
When you use the Services from ONDC (websites or any of its sub sites), we make all reasonable efforts to provide you, as and when requested by you, with access to your personal information and shall further ensure that any personal information or information found to be inaccurate or deficient shall be corrected or amended as feasible, subject to any requirement for such personal information or information to be retained by law or for legitimate business purposes.
We ask individual users to identify themselves and the information requested to be accessed, corrected or removed before processing such requests, and we may decline to process requests that are unreasonably repetitive or systematic, require disproportionate technical effort, jeopardize the privacy of others, or would be extremely impractical (for instance, requests concerning information residing on backup tapes), or for which access is not otherwise required. In any case, where we provide information access and correction, we perform this service free of charge, except if doing so would require a disproportionate effort. Because of the way we maintain certain services, after you delete your information, residual copies may take a period of time before they are deleted from our active servers and may remain in our backup systems.
To exercise rights applicable to you as a data subject, you may write to us at teams@ondc.org and raise a request for the specified right. Kindly ensure you use appropriate language in the subject line (e.g. Data Access Request, Data Portability Request, Data Deletion Request) while raising all such requests, to help us process your requests faster and more efficiently.
We provide you the ability to exercise certain controls and choices regarding our collection, use and sharing of your personal information. In accordance with applicable law, your controls and choices may include:
You can ask us to correct inaccurate or incomplete personal information concerning you (this is the information which you cannot update yourself within your ONDC account) by sending us an e-mail. You can access and update some of your personal information through your account settings. You are responsible for keeping your personal information up-to-date. The website may send you periodic reminders via email to maintain the accuracy of your personal information.
We retain your personal information as long as necessary for the legitimate interests specified in this policy and for us to comply with our legal obligations. If you no longer want us to use your information, you can request that we erase your personal information and close your account. Please note that if your request the erasure of your personal information;
For withdrawing your consent at any time during the tenure of your services with us, you may choose to do so by sending us an e-mail at teams@ondc.org. We shall review your request and may ask you to verify your identity. After verification we will withdraw the consent for which request was made by you and stop any further processing of your personal information.
Where your personal information is processed for direct marketing purposes, you may, at any time, ask us to cease processing your data for these direct marketing purposes by sending an email to us. Please be aware that if you do not allow us to collect personal information from you, we may not be able to deliver certain experiences, products, and services to you, and some of our services may not be able to take account of your interests and preferences. If collection of personal information is mandatory, we will make that clear at the point of collection so that you can make an informed decision whether to participate. If you have questions about the specific personal information about you that we process or retain, and your rights regarding that personal information, please contact our customer support team.
The website is not intentionally designed for or directed at persons younger than 18 years of age. ONDC does not knowingly permit any person who is under 18 years of age to register with the services or to provide any other personally identifying information. If ONDC becomes aware that any personally identifiable information of persons less than 18 years of age has been collected on the website without verified parental consent, then ONDC will take the appropriate steps to delete any such information and notify the parent.
However, we consider it the responsibility of parents to monitor their children’s use of our services. Nevertheless, it is our policy not to collect and process any personal information from children below 18 years of age or offer to send any promotional materials to persons in that category. ONDC does not seek or intend to seek or receive any personal information from children. Should a parent or guardian have reasons to believe that a minor has provided ONDC with personal information without their prior consent, please write at teams@ondc.org to ensure that the personal information is removed from the website.
We are continuously implementing and updating administrative, technical, and physical security measures to help protect your information against unauthorized access, loss, destruction, or alteration. Some of the safeguards we may use to protect your information are firewalls and data encryption, and information access controls. If you know or have reason to believe that your account credentials have been lost, stolen, altered, or otherwise compromised or in case of any actual or suspected unauthorized use of your account, please contact us by contacting our customer support team.
This Privacy Policy is subject to change from time to time. We reserve the right, at our sole discretion, to modify the terms of this Privacy Policy from time to time in order to ensure compliance with applicable laws (“Updated Terms”). The Updated Terms shall be effective immediately and shall supersede the terms of this Privacy Policy. We will notify you of any changes to this Privacy Policy if the changes made to the policy significantly affect your rights or as may be required by law. You shall be solely responsible for reviewing the Privacy Policy from time to time for any modifications. By continuing to use the website after the updated Terms have been published, you affirm your agreement to the updated terms.
If you require any information or clarification regarding the use of your personal information or this Privacy Policy with respect to use of your personal information, please email us at teams@ondc.org.
The Data Privacy officer designated by ONDC is Mr. Tushar Hassija is who can be contacted at dpo@ondc.org.
Sign up - ONDC Participant Portal
ONDC SAHAYAK
