Privacy Policy

Website: https://sahebiana.com/
Business Name: Sahebiana
Business Type: Online Multi-Vendor E-Commerce & Wholesale Marketplace
Applicable Jurisdiction: India

Effective Date: 1 November 2026
Last Updated: 1 November 2026

1. Introduction

Welcome to Sahebiana (“Sahebiana”, “we”, “our”, or “us”).

Sahebiana operates an online multi-vendor e-commerce and wholesale marketplace through https://sahebiana.com/ (the “Website”), enabling customers to discover, purchase and receive products offered by independent sellers, manufacturers, suppliers and other registered vendors (“Vendors”).

We respect the privacy of our customers, website visitors, registered vendors and business partners. This Privacy Policy explains how we collect, receive, store, process, use, share and protect personal information when you access our Website, register an account, purchase products, register as a Vendor or otherwise interact with our services.

By accessing or using our Website, you acknowledge that you have read this Privacy Policy. Where consent is legally required, we will obtain your consent separately through an appropriate notice or consent mechanism.

This Privacy Policy is intended to comply with applicable Indian laws and regulations, including:

  • Information Technology Act, 2000.
  • Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, to the extent applicable.
  • Digital Personal Data Protection Act, 2023, and the Digital Personal Data Protection Rules, 2025, as and when their respective provisions become applicable.
  • Consumer Protection Act, 2019.
  • Consumer Protection (E-Commerce) Rules, 2020, as amended from time to time.
  • Applicable Reserve Bank of India (RBI) requirements concerning payment systems and payment aggregators.
  • Applicable GST, taxation, accounting and other Indian laws.

2. Information We Collect

We may collect the following categories of information depending on how you use our Website.

2.1 Personal Identification Information

When you create an account, place an order, contact customer support or register as a Vendor, we may collect:

  • Full name.
  • Email address.
  • Mobile number.
  • Billing address.
  • Shipping and delivery address.
  • Business name and business address.
  • GSTIN, where applicable.
  • Account login credentials.
  • Other information voluntarily provided by you.

2.2 Customer Information

For customers purchasing products through our marketplace, we may collect:

  • Customer account details.
  • Order history and purchase records.
  • Product preferences and wishlists.
  • Cart information.
  • Shipping and delivery information.
  • Return, replacement and refund requests.
  • Customer service communications.
  • Transaction reference numbers and payment status.

2.3 Vendor and Seller Information

For individuals or businesses registering to sell products through Sahebiana, we may collect:

  • Vendor or business name.
  • Owner’s or authorised representative’s name.
  • Registered and operational business addresses.
  • Email address and mobile number.
  • GST registration details and GSTIN.
  • PAN or other tax identification details, where legally required.
  • Bank account details for vendor settlements.
  • Product listings, descriptions, images and pricing.
  • Business registration and verification documents.
  • KYC and identity verification information, where required.
  • Order fulfilment and transaction records.
  • Return, cancellation and customer complaint records.

Vendor information may be used for verification, onboarding, settlement, taxation, fraud prevention and regulatory compliance.

2.4 Payment Information

Sahebiana may facilitate payments through authorised third-party payment gateways, banks, UPI service providers, card networks and other payment service providers.

Depending on the payment method, the payment provider may collect or process:

  • Credit or debit card information.
  • UPI IDs and payment-related information.
  • Net banking details.
  • Payment authentication information.
  • Transaction IDs and payment reference numbers.
  • Payment confirmation, failure and refund status.

Sahebiana does not intend to store complete card numbers, CVV numbers, UPI PINs, banking passwords or other confidential payment authentication credentials on its own servers.

Such information is processed by the relevant payment service provider in accordance with its security standards, terms and applicable regulations.

We may retain transaction references, payment status and other limited information necessary for order management, accounting, reconciliation, refunds and legal compliance.

2.5 Technical and Device Information

When you visit our Website, certain technical information may be collected automatically, including:

  • IP address.
  • Browser type and version.
  • Device type and operating system.
  • Website access time and date.
  • Pages visited and browsing activity.
  • Referring website or source.
  • Session identifiers.
  • Cookies and similar technologies.
  • Website performance and diagnostic information.

This information helps us maintain website security, improve performance, understand website usage and prevent fraudulent activities.

3. How We Use Your Information

We may use collected information for the following legitimate business purposes:

  1. To create and manage customer accounts.
  2. To register, verify and manage Vendors.
  3. To process orders and purchases.
  4. To facilitate payments and vendor settlements.
  5. To coordinate shipping, delivery and order fulfilment.
  6. To process cancellations, returns, exchanges and refunds.
  7. To communicate order confirmations, invoices and delivery updates.
  8. To provide customer support and resolve complaints.
  9. To prevent fraud, unauthorised access and suspicious transactions.
  10. To maintain transaction, accounting and taxation records.
  11. To improve our Website, products and services.
  12. To provide relevant product recommendations and personalised shopping experiences.
  13. To send promotional communications where legally permitted and, where required, with your consent.
  14. To comply with applicable laws, court orders and government requirements.
  15. To protect our legal rights, business operations and marketplace users.

We will not use personal information for purposes unrelated to the purpose disclosed to you unless permitted by applicable law.

4. Sharing of Information with Third Parties

As a multi-vendor marketplace, Sahebiana may need to share limited personal information with trusted third parties to provide its services.

We may share information with the following categories of recipients:

4.1 Registered Vendors and Sellers

When you place an order, relevant customer information, including your name, shipping address, contact number, order details and delivery instructions, may be shared with the respective Vendor to enable order processing, packaging, dispatch and fulfilment.

Vendors are expected to use customer information only for legitimate order-related purposes and must not misuse, independently market to customers without appropriate legal permission, or unlawfully disclose such information.

4.2 Payment Gateways and Financial Institutions

We may share relevant transaction information with payment service providers, including:

  • Razorpay.
  • Cashfree Payments.
  • PayU.
  • PhonePe Payment Gateway.
  • CCAvenue.
  • BillDesk.
  • Paytm Payment Gateway.
  • Banks and other authorised payment service providers.

The above list represents examples of payment providers and does not mean that all of them are currently integrated with Sahebiana.

Payment providers process transactions under their own applicable privacy policies, security practices and regulatory obligations.

4.3 Logistics and Delivery Partners

We may share relevant customer and order information with courier companies, shipping aggregators, transport providers and delivery partners to facilitate product delivery, tracking and returns.

4.4 Technology and Service Providers

We may share information with trusted service providers who assist us with:

  • Website hosting and server management.
  • Cloud storage and database management.
  • Website maintenance and security.
  • Email and SMS communication.
  • Customer support systems.
  • Analytics and performance monitoring.
  • Fraud detection and prevention.

Such providers may process information on our behalf subject to appropriate contractual and security safeguards.

4.5 Government and Regulatory Authorities

We may disclose information when required or authorised under applicable law, including requests from:

  • Courts and judicial authorities.
  • Government departments.
  • Tax authorities.
  • Law enforcement agencies.
  • Regulatory authorities.
  • Other legally authorised institutions.

4.6 Business Transfers

In the event of a merger, acquisition, restructuring, sale of business or transfer of assets, relevant information may be transferred to the acquiring or successor entity, subject to applicable legal requirements and appropriate safeguards.

We do not sell customers’ personal information to third parties as a standalone commercial product.

5. Cookies and Tracking Technologies

Our Website may use cookies, pixels, session identifiers and similar technologies to improve user experience and website functionality.

Cookies may be used for:

  • Maintaining login sessions.
  • Remembering shopping cart information.
  • Saving user preferences.
  • Improving website performance.
  • Understanding website traffic.
  • Detecting suspicious activity.
  • Supporting advertising and marketing activities, where applicable.

You may control or disable cookies through your browser settings. However, disabling certain cookies may affect the functionality of some Website features, including account login and shopping cart operations.

Where legally required, we will obtain appropriate consent before using non-essential tracking technologies.

6. Data Security

We take reasonable technical, organisational and administrative measures to protect personal information against:

  • Unauthorised access.
  • Accidental loss.
  • Misuse.
  • Alteration.
  • Disclosure.
  • Destruction.
  • Cyberattacks and other security threats.

Our security measures may include:

  • SSL/TLS encryption for data transmitted through supported website connections.
  • Access controls and authentication mechanisms.
  • Restricted access to personal information.
  • Secure hosting and server configurations.
  • Regular security monitoring.
  • Backup and recovery procedures.
  • Appropriate vendor and service-provider controls.

Although we take reasonable steps to protect your information, no electronic transmission or storage system can be guaranteed to be completely secure.

In the event of a personal data breach, we will take appropriate steps to investigate, contain, mitigate and notify affected individuals and relevant authorities as required by applicable law.

7. Data Retention

We retain personal information only for as long as reasonably necessary to fulfil the purposes described in this Privacy Policy or to comply with applicable legal obligations.

Different categories of information may be retained for different periods.

For example:

  • Customer account information may be retained while an account remains active.
  • Order and transaction records may be retained for accounting, GST and legal compliance.
  • Vendor verification information may be retained during the vendor relationship and for applicable compliance periods.
  • Customer support and complaint records may be retained for dispute resolution and regulatory purposes.
  • Technical logs may be retained for security and operational purposes.

When information is no longer required, we will take reasonable steps to delete or securely dispose of it, unless retention is required by law or necessary for legitimate legal claims.

8. Your Privacy Rights

Subject to applicable Indian laws and the commencement of relevant statutory provisions, you may have the following rights concerning your personal information:

  1. Right to Access: Request information about personal data processed by us.
  2. Right to Correction: Request correction of inaccurate or misleading personal information.
  3. Right to Completion: Request completion of incomplete personal information.
  4. Right to Erasure: Request deletion of personal information where legally permissible.
  5. Right to Withdraw Consent: Withdraw consent for processing activities based on your consent.
  6. Right to Grievance Redressal: Raise concerns or complaints regarding the processing of your personal information.
  7. Right to Nominate: Nominate another individual to exercise your rights in the circumstances permitted by applicable law.

Withdrawal of consent will not affect the lawfulness of processing carried out before withdrawal.

Certain information may need to be retained where required by applicable law, including taxation, accounting, fraud prevention and dispute resolution obligations.

To exercise your privacy rights, contact us using the details provided in the Contact Us section.

9. Promotional Communications

We may send promotional emails, SMS messages, WhatsApp communications or other marketing notifications about:

  • New products.
  • Special offers.
  • Discounts.
  • Marketplace announcements.
  • Promotional campaigns.
  • Business updates.

Where required, such communications will be sent only after obtaining appropriate consent.

You may opt out of promotional communications at any time by using the unsubscribe option, following the opt-out instructions in the communication or contacting our support team.

Please note that you may continue to receive essential transactional communications, such as order confirmations, payment notifications, shipping updates, refund notifications and security alerts.

10. Third-Party Websites and Services

Our Website may contain links to third-party websites, payment gateways, delivery tracking services, social media platforms or other external services.

These external services operate independently and may have their own privacy policies, terms and conditions and data protection practices.

Sahebiana is not responsible for the privacy practices, security measures or content of third-party websites.

We recommend reviewing the relevant third-party privacy policies before providing personal information to those services.

11. International Data Transfers

Sahebiana may work with international Vendors, suppliers, service providers, logistics partners or technology providers.

Where the provision of services requires personal information to be transferred outside India, such transfers will be carried out subject to applicable Indian data protection laws, government restrictions and other relevant regulatory requirements.

We will take reasonable steps to ensure that appropriate safeguards are implemented for such transfers.

12. Children’s Privacy

Our Website is intended for use by individuals who are legally capable of entering into transactions under applicable Indian law.

We do not knowingly seek to collect personal information from children in violation of applicable Indian data protection requirements.

Where processing of a child’s personal data requires verifiable parental or lawful guardian consent, we will implement appropriate consent mechanisms as required by applicable law.

If we become aware that personal information has been collected from a child in violation of applicable legal requirements, we will take appropriate corrective action.

13. Account Security and User Responsibilities

Users are responsible for maintaining the confidentiality of their account credentials and for activities carried out through their accounts.

You should:

  • Use a strong and unique password.
  • Avoid sharing your login credentials.
  • Log out after using shared devices.
  • Notify us immediately if you suspect unauthorised account access.
  • Provide accurate and up-to-date information.

Sahebiana will not be responsible for unauthorised access resulting solely from a user’s failure to maintain reasonable account security, subject to applicable law.

14. Vendor Data Protection Responsibilities

Vendors registered on Sahebiana must respect the privacy and confidentiality of customer information received through the marketplace.

Vendors must:

  1. Use customer information only for legitimate order fulfilment and related purposes.
  2. Not sell, rent, trade or commercially exploit customer information.
  3. Not send unsolicited marketing communications using marketplace customer information.
  4. Maintain appropriate security measures to protect customer information.
  5. Not disclose customer information to unauthorised third parties.
  6. Restrict access to customer information to authorised personnel.
  7. Notify Sahebiana promptly if they become aware of a security incident involving customer information.
  8. Delete or securely dispose of customer information when it is no longer required, subject to applicable legal retention obligations.

Failure to comply with these requirements may result in suspension or termination of Vendor access, in addition to any other remedies available under applicable law.

15. Changes to This Privacy Policy

Sahebiana reserves the right to update, modify or revise this Privacy Policy from time to time to reflect:

  • Changes in applicable Indian laws.
  • Changes in regulatory requirements.
  • New payment gateway integrations.
  • Changes in marketplace operations.
  • New website features and services.
  • Changes in our data collection and processing practices.

Any revised Privacy Policy will be published on this page with an updated revision date.

Where required by applicable law, we will provide appropriate notice and obtain fresh consent for material changes in processing purposes.

We encourage users to review this page periodically.

16. Grievance Redressal and Privacy Complaints

If you have any questions, concerns, requests or complaints relating to the collection, processing, storage or disclosure of your personal information, you may contact our designated Privacy Contact / Grievance Officer.

Grievance Officer / Privacy Contact

Business Name: Sahebiana
Website: https://sahebiana.com/
Email: info@sahebiana.com
Phone: +91 90886 00999 / +91 90887 00999
Business Address: Baruipur, Kolkata – 144, West Bengal, India.

Please include your name, registered email address or mobile number, relevant order or account reference (if applicable) and a description of your concern.

We will acknowledge and address complaints within the timelines prescribed by applicable Indian laws and regulations.

For consumer complaints, the applicable e-commerce grievance redressal requirements will also be followed.

17. Governing Law and Jurisdiction

This Privacy Policy shall be governed by and interpreted in accordance with the laws of India.

Any disputes arising in connection with this Privacy Policy shall be subject to the jurisdiction of competent courts in India, subject to applicable consumer protection and data protection laws.

Nothing in this Privacy Policy shall limit any statutory rights available to consumers or data principals under applicable Indian law.

18. Contact Us

For any privacy-related questions, data protection requests, complaints or clarification regarding this Privacy Policy, please contact:

Sahebiana

Website: https://sahebiana.com/
Email: info@sahebiana.com
Contact Numbers: +91 90886 00999 / +91 90887 00999
Location: Sahebiana, KachariBazar, Baruipur, Kol-144, West Bengal, India.

Thank you for trusting Sahebiana.

We are committed to maintaining transparency, protecting your personal information and providing a safe and reliable online shopping experience.