Legal information · 02 / 03

Privacy Policy

How ICCHA Store handles business registration details, verification records and product enquiries.

Effective date: 23 October 2026

ICCHA Store · 02 / 03

Privacy Policy

Please read this policy carefully. It explains the terms applicable to your use of the Platform.

1. Introduction

ICCHA Store (“ICCHA”, “we”, “us” or “our”) operates https://icchastore.com as a business-to-business (B2B) product discovery, wholesale catalogue and enquiry platform. This Privacy Policy explains how we collect, use, store, disclose and protect information associated with visitors, business applicants, verified account holders, purchasing businesses and people who contact us.

The Platform is operated by [Full Legal Name of Operating Entity], whose business address is [Full Business Address]. We recognise the importance of protecting personal information, maintaining the confidentiality of business records and using information only for appropriate purposes.

2. Scope of This Policy

This Policy applies to information collected through the Website, including business registrations, account verification, product enquiries, communications, support requests and related Platform activities. It also applies to information provided by an authorised representative when acting on behalf of a business.

When a participating vendor independently collects information for its own transaction, its processing may be governed by that vendor’s own privacy policy and legal responsibilities.

3. Information We May Collect

Depending on how you use the Platform, we may collect the following categories of information.

  • Business information: registered business name, trading name, business type and address, GSTIN or other registration information where applicable, supporting registration documents, business website or profile, and relevant supplier information.
  • Applicant and representative information: full name, business role, mobile or WhatsApp number where supplied, business email, login credentials, account identifiers and communications with our team.
  • Verification information: documents or details provided to demonstrate that you are authorised to act for a legitimate business. We aim to request information relevant to business verification and access control. Please do not submit unnecessary personal documents or sensitive personal information unless specifically requested for a lawful and clearly explained purpose.
  • Enquiry and commercial information: products or categories of interest, requested quantities, sizes and specifications, preferred vendors, relevant delivery requirements, quotations, communications and order-related information shared through the Platform.
  • Technical and usage information: depending on the features enabled, IP address, browser and device details, pages visited, timestamps, session information and security-related events collected through server logs, cookies and similar technologies.

4. How We Use Information

We may use information for the following purposes:

  • Business verification: assessing registration applications and confirming eligibility for restricted wholesale access.
  • Account management: creating, maintaining and securing accounts and managing account status.
  • Product enquiries: responding to questions about products, pricing, availability, minimum order quantities and potential orders.
  • Vendor coordination: sharing relevant enquiry details with the vendor or supplier responsible for the requested product.
  • Commercial administration: maintaining quotations, correspondence and records needed to manage business relationships.
  • Website operations: maintaining, troubleshooting and improving the Platform.
  • Security and fraud prevention: detecting suspicious activity, unauthorised access, false applications and misuse.
  • Legal compliance: meeting applicable accounting, tax, recordkeeping, reporting or other legal obligations.
  • Communications: sending service messages, verification updates, enquiry responses and other account-related information.
  • Optional promotional communications: sharing marketing messages where permitted by applicable law and subject to relevant consent or opt-out requirements.

5. Legal Basis and Consent

We handle personal data in accordance with applicable Indian data protection and other relevant laws. Where consent is required, we will seek consent for the relevant purpose and provide a means of withdrawing it, subject to applicable law.

Information may also need to be processed to provide a requested service, maintain a business account, respond to an enquiry, comply with legal obligations or protect legitimate business and security interests, where such processing is permitted by applicable law. We will explain the relevant purpose when collecting information where required.

If you submit information about another person, such as an employee or authorised representative, you should ensure that you are authorised to provide it and that the person has received any notice required by law.

6. Sharing Information with Vendors and Third Parties

We do not sell personal data as a standalone commercial product. We may share relevant information with the following categories of recipients when necessary for the purposes described in this Policy.

  • Participating vendors and suppliers: when you request information about a product or submit an enquiry, we may share your business name, contact information, requested products, quantities, business requirements and other details reasonably necessary for the vendor to respond.
  • Service providers: hosting, secure data storage, business communications, technical support, account management, analytics and other operational providers may process information on our behalf, subject to appropriate contractual, security and legal requirements.
  • Professional advisers: lawyers, accountants, auditors, insurers or other professional advisers where necessary.
  • Legal authorities: where required by law, a valid legal process, a competent authority or lawful request, or where reasonably necessary to protect legal rights and security.
  • Business transfers: in a merger, restructuring, acquisition or transfer, information may be disclosed or transferred as part of that process, subject to applicable law and appropriate safeguards.

7. Data Minimisation and Vendor Enquiries

We aim to share only the information reasonably necessary for the relevant enquiry or service. Where practicable, do not include unnecessary personal details in product enquiries. Vendor information shared for a commercial enquiry should not be treated as permission for unrelated marketing or other uses.

8. Payments and Financial Information

The Website currently operates without an on-site payment gateway. We do not collect payment card details, UPI credentials or online checkout payment credentials through a Website payment-processing system because such a system is not provided under the current Platform model.

If a commercial transaction proceeds directly between a purchaser and a seller, the parties may exchange payment or banking information independently. Information provided directly to a vendor or financial institution is subject to the relevant recipient’s privacy practices and applicable law. Please verify payment instructions and the identity of the receiving party before transferring money.

9. Data Storage and Security

We take reasonable technical and organisational measures appropriate to the nature of the information we handle to protect it against unauthorised access, disclosure, alteration, misuse or loss. Measures may include access controls, restricted permissions, secure transmission, authentication procedures, backups and appropriate service-provider safeguards, depending on the systems deployed.

Access to business verification records should be limited to authorised personnel and service providers who need the information for relevant purposes. No method of online transmission or electronic storage can be guaranteed to be completely secure. We will respond to security incidents in accordance with applicable legal requirements and our incident-response procedures.

10. Data Retention

We retain information for as long as reasonably necessary for maintaining and securing business accounts, verifying business eligibility, responding to product enquiries, maintaining relevant commercial correspondence, resolving disputes, preventing fraud and meeting applicable legal, tax, accounting and recordkeeping requirements.

Different categories of information may be retained for different periods. When information is no longer required, we will take appropriate steps to delete, anonymise or securely dispose of it, subject to applicable law, legitimate recordkeeping requirements and the need to preserve relevant evidence.

ICCHA Store should maintain an internal retention schedule specifying periods for registration documents, inactive accounts, enquiries, technical logs and other records.

11. Data Transfers

Our service providers or vendors may operate in locations outside your state or country. Where personal data is transferred to another location, we will comply with applicable restrictions, requirements and safeguards governing such transfers. The identity and location of material service providers should be assessed as part of our privacy and security compliance process.

12. Your Privacy Rights

Subject to applicable law, the rights available to you may include:

  • Requesting information about the handling of your personal data.
  • Requesting correction or updating of inaccurate or incomplete information.
  • Requesting deletion of information that is no longer required or otherwise eligible for deletion.
  • Withdrawing consent for processing based on consent.
  • Raising concerns or complaints about our handling of personal data.
  • Exercising other rights available under applicable law.

13. Requests and Account Closure

Requests may need to be verified before we act, to prevent unauthorised disclosure or changes. We may retain certain information where required by law or where a lawful basis continues to apply, even if you request deletion or close an account. Where information relates to a business, requests may be submitted by the relevant individual or an appropriately authorised business representative.

We may review accounts that remain inactive for an extended period and may deactivate or restrict them in accordance with our account-management practices. Where reasonably practicable, users may be provided with instructions for reactivation. Account closure does not necessarily result in immediate deletion of all records, as certain records may need to be retained for legal, security or commercial reasons.

14. Children's Privacy

The Platform is intended for legitimate business use and is not designed for children to register independently or access restricted business services. We do not knowingly seek personal information from children for independent account registration. If we identify information collected contrary to applicable law, we will take appropriate steps to address it.

15. Third-Party Websites and Services

The Website may contain links to vendor pages, social media accounts, external websites or other third-party services. We do not control every third party’s privacy practices. You should review the relevant third party’s privacy policy before providing information directly to it. This Policy does not replace the privacy policies of independent vendors or other organisations acting as separate controllers of information.

16. Changes to This Privacy Policy

We may update this Policy to reflect changes in our business model, the Platform, data-handling practices or applicable law. The latest version will be published on the Website with a revised effective or update date. Where required, we will provide additional notice or seek consent before implementing material changes.

17. Contact and Grievance Redressal

For privacy requests, questions or complaints, contact ICCHA Store. Insert the current legal entity name, business address and designated privacy or grievance contact before publishing.

Website: https://icchastore.com Privacy and compliance: Icchabyprime@gmail.com Commercial enquiries: Icchabyprime@gmail.com Phone: +91 98251 44550 / +91 94140 88220

We will review and respond to requests in accordance with applicable law and the procedures established for privacy and grievance handling.

For questions about this policy, contact Icchabyprime@gmail.com.