Loading…
LetItRip Internet Pvt. Ltd. ('we', 'our', 'us') is committed to protecting your personal information. This Privacy Policy explains how we collect, use, and safeguard your data when you use our platform.
We collect: (a) Account data — name, email address, mobile number, and date of birth when you register. (b) Identity verification data — government ID details (Aadhaar number last 4 digits, PAN) for seller KYC. (c) Payment data — bank account details and UPI handles for seller payouts; card/UPI details are processed by Razorpay and not stored by LetItRip. (d) Transaction data — orders placed, bids, wishlists, and offer history. (e) Device and usage data — IP address, browser type, operating system, pages visited, and clickstream data collected automatically via cookies and server logs.
We use your personal data to: process orders and facilitate auctions; verify seller identity and prevent fraud; send transactional emails (order confirmation, shipping updates, payout receipts); personalise your browsing experience (recommended listings, recent searches); comply with Indian tax laws (GST filings) and respond to law enforcement requests; and improve platform performance and detect abuse. We do not sell your personal data to third-party advertisers.
We share your data only as necessary: (a) Sellers receive your shipping name, delivery address, and phone number for order fulfilment — they are contractually prohibited from using this data for any other purpose. (b) Razorpay receives payment data to process transactions. (c) Courier partners (Delhivery, BlueDart, Speed Post) receive your delivery address and phone number to complete deliveries. (d) We may disclose data to government or regulatory authorities when required by law, court order, or to protect LetItRip's legal rights.
We implement industry-standard security measures including TLS 1.3 encryption in transit, AES-256 encryption at rest for sensitive fields, Firebase Authentication with multi-factor support, HMAC blind indices for PII search fields, and role-based access controls restricting staff access to personal data. We conduct periodic security audits. While we strive to protect your data, no Internet transmission is 100% secure, and we cannot guarantee absolute security.
Under the Digital Personal Data Protection Act, 2023, you have the right to: (a) Access — request a summary of personal data we hold about you. (b) Correction — request correction of inaccurate or incomplete data. (c) Erasure — request deletion of your personal data ('Right to be Forgotten'), subject to legal retention obligations. (d) Grievance Redressal — raise a complaint via our Data Protection Officer at privacy@letitrip.in, who will respond within 48 hours. (e) Nominate — nominate another individual to exercise these rights on your behalf in the event of your death or incapacity. To exercise any right, email privacy@letitrip.in from your registered email address.
We retain your personal data for as long as your account is active. After account closure: transactional records (orders, payouts) are retained for 7 years to comply with Indian accounting and GST audit requirements. Identity verification data (KYC) is retained for 5 years post-relationship as required by anti-money-laundering guidelines. Device and usage logs are deleted after 90 days. If you request erasure, we will delete or anonymise your data within 30 days, except where retention is mandated by law.
We use cookies to maintain your session, remember preferences, and analyse platform usage. See our Cookie Policy for a full breakdown of cookie categories and opt-out instructions.
LetItRip is not intended for users under 18 years of age. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected data from a minor, please contact privacy@letitrip.in and we will delete it promptly. Parents or guardians who discover that a child has registered without consent should contact us immediately.
LetItRip primarily stores data on Google Cloud servers located in Mumbai (asia-south1 region). Some third-party services (Firebase, Razorpay analytics, Google Analytics) may process data outside India. We ensure any cross-border transfer is covered by adequate contractual safeguards consistent with the DPDP Act 2023 and applicable rules notified by the Indian government.
We may update this Privacy Policy periodically. We will notify you of significant changes by email and via an in-platform notice at least 7 days before the change takes effect. The 'Last updated' date at the top of this page will reflect the most recent revision. Continued use of the Platform after the effective date constitutes your acceptance of the updated Policy.
For privacy-related queries, requests, or complaints, contact our Data Protection Officer at privacy@letitrip.in. We aim to respond within 48 hours. If you are not satisfied with our response, you may file a complaint with the Data Protection Board of India (once constituted under the DPDP Act 2023).