This Privacy Policy explains how EcomLinx ("we", "our", "us") collects, uses and protects your personal information when you use our website, managed services or SaaS platform. Please read this carefully.
1. Overview
EcomLinx Technology Pvt. Ltd. (India) and its related entities ("EcomLinx") operate the website at ecomlinx.com and the EcomLinx SaaS platform. We provide ecommerce managed services and software to sellers across India, the United Kingdom and the United States.
We are committed to protecting your privacy and handling your personal data in an open and transparent manner in accordance with the General Data Protection Regulation (GDPR), the UK GDPR, India's Digital Personal Data Protection Act 2023 (DPDPA) and other applicable data protection laws.
2. Data We Collect
Information you provide directly
- Account information: name, email address, phone number, company name, billing address and payment details when you register for our SaaS or engage our services
- Contact enquiries: information you submit through our contact form, including service enquiries and strategy call bookings
- Business data: marketplace account credentials, product information and sales data that you share with us as part of our managed services
- Communications: emails, chat messages and calls between you and our team
Information collected automatically
- Usage data: pages visited, features used, time spent and actions taken within the SaaS platform
- Technical data: IP address, browser type, device type, operating system and referral URLs
- Cookie data: preferences, session information and analytics data (see Section 5)
3. How We Use Your Data
We use your personal data for the following purposes:
- To provide, operate and improve our managed services and SaaS platform
- To process payments and manage your account and subscription
- To respond to enquiries, support requests and communications
- To send service-related communications (invoices, updates, alerts)
- To send marketing communications — only where you have given consent or we have a legitimate interest, and always with an easy opt-out
- To analyse usage patterns and improve our products and services
- To comply with legal obligations
- To detect and prevent fraud, abuse and security incidents
Our legal bases for processing include: contract performance (providing services you've agreed to), legitimate interests (improving our services, fraud prevention), consent (marketing emails, cookies) and legal obligation.
4. Sharing Your Data
We do not sell your personal data. We may share your data with:
- Service providers: payment processors (Razorpay, Stripe), cloud hosting providers (AWS, Hostinger), email services and analytics platforms — all bound by data processing agreements
- Marketplace platforms: we access and submit data to Amazon, eBay, Flipkart and other platforms on your behalf as part of our managed services — only with your explicit authorisation
- Legal requirements: when required by law, court order or government authority
- Business transfers: in the event of a merger, acquisition or sale of all or part of our business
5. Cookies
We use cookies and similar tracking technologies on our website and platform:
- Essential cookies: required for the platform to function (authentication, session management)
- Analytics cookies: help us understand how visitors use our site (Google Analytics, Hotjar)
- Marketing cookies: used to measure campaign effectiveness (only with consent)
You can manage cookie preferences through your browser settings or our cookie consent banner. Disabling essential cookies may affect platform functionality.
6. Data Retention
We retain your personal data for as long as necessary to provide our services and meet legal obligations:
- Account data: for the duration of your account plus 3 years after closure
- Transaction records: 7 years (UK/India tax and financial regulations)
- Marketing data: until you unsubscribe or withdraw consent
- Support communications: 2 years from last interaction
7. Your Rights
Depending on your location, you have the following rights regarding your personal data:
- Access: request a copy of the personal data we hold about you
- Rectification: request correction of inaccurate or incomplete data
- Erasure: request deletion of your data ("right to be forgotten") — subject to legal retention requirements
- Restriction: request that we limit processing of your data in certain circumstances
- Portability: receive your data in a structured, machine-readable format
- Objection: object to processing based on legitimate interests or for direct marketing
- Withdraw consent: where processing is based on consent, withdraw it at any time
To exercise any of these rights, contact us at privacy@ecomlinx.com. We will respond within 30 days.
8. Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration or destruction. These include:
- SSL/TLS encryption for all data in transit
- Encryption of sensitive data at rest (API keys, credentials)
- Role-based access controls limiting data access to authorised team members
- Regular security audits and vulnerability assessments
- Employee training on data protection and security practices
No method of transmission over the internet is 100% secure. If you suspect a security incident, please contact us immediately at security@ecomlinx.com.
9. Children's Privacy
Our services are not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.
10. International Data Transfers
As a global business operating in India, the UK and the USA, your data may be transferred to and processed in countries outside your home jurisdiction. We ensure appropriate safeguards are in place for such transfers, including:
- Standard Contractual Clauses (SCCs) for EU/UK transfers
- Adequacy decisions where available
- Binding corporate rules with our service providers
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by email and by posting a notice on our website. The "Last updated" date at the top of this policy reflects the most recent revision.