Privacy Policy

1. INTRODUCTION

Karishmaart (“Platform”, “we”, “our”, “us”) is an online classified listing platform operated by Karishmaa Care Foundation, based in Pune, Maharashtra, India.

This Privacy Policy explains how we collect, use, store, process, and protect personal data in accordance with the Digital Personal Data Protection Act, 2023 (India) and other applicable laws.

By using Karishmaart, you consent to the collection and processing of your personal data as described in this Policy.

2. ROLE UNDER DPDP ACT, 2023

For the purposes of the Digital Personal Data Protection Act, 2023:

• Karishmaart acts as a Data Fiduciary.
• Users providing personal data are considered Data Principals.
• In certain cases, authorized service providers may act as Data Processors on our behalf.

3. NATURE OF PLATFORM

Karishmaart is a classified advertising platform that connects buyers and sellers.

We:

• Do not sell goods or services.
• Do not process payments.
• Do not operate payment gateways.
• Do not hold financial or banking information.
• Do not offer refunds or transaction guarantees.

All financial dealings occur directly between users outside the platform.

4. PERSONAL DATA WE COLLECT

We collect only such personal data that is necessary for platform functionality, including:

A. Information Provided by Users

• Full name
• Mobile number
• Email address
• Location details
• Profile information
• Listing details
• Uploaded images
• Communications sent via platform

B. Automatically Collected Data

• IP address
• Device type
• Browser type
• Log data
• Usage patterns
• Cookies and tracking technologies

We do not collect:

• Banking details
• Credit/debit card numbers
• UPI details
• Financial credentials

5. PURPOSE OF DATA COLLECTION

We process personal data only for lawful purposes, including:

• Creating and managing user accounts
• Publishing classified listings
• Enabling user-to-user communication
• Preventing fraud or misuse
• Responding to user inquiries
• Legal compliance
• Improving platform performance

We do not use personal data for profiling, automated decision-making, or sale to third parties.

6. CONSENT

Personal data is processed only upon obtaining valid consent from the Data Principal, except where processing is permitted under lawful grounds as defined under the DPDP Act, 2023.

Users may withdraw consent at any time by contacting us. Withdrawal may impact access to certain features.

7. DATA RETENTION

Personal data shall be retained:

• Only as long as necessary for the stated purpose
• For compliance with legal obligations
• For resolving disputes

Upon account deletion or withdrawal of consent, personal data will be erased unless retention is required under law.

8. USER RIGHTS UNDER DPDP ACT, 2023

As a Data Principal, you have the right to:

• Access your personal data
• Request correction or updating of inaccurate data
• Request erasure of personal data
• Withdraw consent
• Nominate another person to exercise rights in case of incapacity or death
• Seek grievance redressal

Requests may be sent to the Grievance Officer (details below).

9. DATA SECURITY MEASURES

We implement reasonable technical and organizational safeguards including:

• Secure servers
• Access controls
• Encryption protocols where appropriate
• Regular monitoring for vulnerabilities

However, no internet-based platform is completely secure. Users share data at their own risk.

10. DATA SHARING AND DISCLOSURE

We may share personal data:

• With service providers assisting in website operation
• When required by law enforcement or regulatory authorities
• To comply with court orders
• To protect rights and safety of users or the public

We do not sell, rent, or trade personal data.

11. CROSS-BORDER DATA TRANSFER

Personal data may be processed on servers located in India or in jurisdictions permitted by the Government of India under applicable law.

We ensure reasonable safeguards in case of cross-border data transfers.

12. COOKIES AND TRACKING TECHNOLOGIES

Karishmaart may use cookies and similar technologies to:

• Enhance user experience
• Analyze website traffic
• Improve performance

Users may disable cookies via browser settings, though this may limit functionality.

13. USER RESPONSIBILITY

Users are responsible for:

• Ensuring accuracy of information shared
• Avoiding sharing excessive sensitive personal data in listings
• Conducting due diligence before sharing personal information with other users

Karishmaart is not responsible for personal data voluntarily shared between users outside platform control.

14. CHILDREN’S DATA

Karishmaart is not intended for individuals under 18 years of age.

We do not knowingly collect personal data of minors without verified parental or guardian consent, as required under the DPDP Act, 2023.

15. DATA BREACH NOTIFICATION

In the event of a personal data breach:

• We will take immediate remedial measures.
• Where required under law, we will notify the Data Protection Board of India and affected Data Principals.

16. GRIEVANCE REDRESSAL MECHANISM

In compliance with the DPDP Act, 2023, we have established a grievance redressal mechanism.

For privacy-related concerns, contact:

Grievance Officer
Karishmaart
Karishmaa Care Foundation
Pune, Maharashtra, India
Email: info@karishmaacarefoundation.com

We will acknowledge and address grievances within a reasonable time as prescribed under law.

17. THIRD-PARTY LINKS

The platform may contain links to third-party websites. We are not responsible for the privacy practices or content of such external platforms.

Users are encouraged to review their respective privacy policies.

18. LIMITATION OF LIABILITY

Karishmaart shall not be liable for:

• User-to-user data sharing
• Misuse of contact details by other users
• Fraudulent activities conducted outside the platform
• Losses resulting from voluntary disclosure of personal information

19. CHANGES TO THIS PRIVACY POLICY

We reserve the right to update this Privacy Policy to reflect changes in legal, regulatory, or operational requirements.

Updated versions will be published on the website with a revised effective date.

Continued use of the platform constitutes acceptance of the revised policy.

20. GOVERNING LAW

This Privacy Policy shall be governed by and interpreted in accordance with the laws of India.

Any disputes shall fall under the exclusive jurisdiction of the courts located in Pune, Maharashtra, India.

21. CONTACT INFORMATION

For questions or concerns regarding this Privacy Policy:

Karishmaart
An Initiative of Karishmaa Care Foundation
Pune, Maharashtra, India

Email: info@karishmaacarefoundation.com