Revised 14 September 2026
A. Purpose of processing
Papun Impex collects the minimum personal data needed to run accounts, fulfil seed orders, prevent fraud, and answer support tickets. We do not auction or rent customer lists to advertisers.
B. Categories of data
- Identity & login: name, email, hashed password, verification status.
- Fulfilment: shipping address, phone, cart lines, payment mode selection, order identifiers.
- Support corpus: messages and attachments sent via Contact, Help, or Track & Support.
- Telemetry: session tokens, approximate IP, and device/browser signals used for abuse detection.
C. Lawful uses
- Authenticate sessions and block duplicate or abusive registrations.
- Pick, pack, and hand parcels to logistics partners.
- Send transactional notices (dispatch, delivery attempts, remedies).
- Meet bookkeeping and statutory record-keeping duties.
D. Storage window
Order artefacts remain for the commercial and tax retention period applicable in India. Optional marketing consent, if ever collected separately, can be withdrawn by emailing support@papunimpex.in.
E. Access & correction
Registered buyers may request a copy, correction, or deletion of personal data, subject to records we must keep by law. Write to support@papunimpex.in from the address on the account.
F. Safeguards
Credentials use one-way hashing. Card vaulting, if any, is performed by certified payment processors — full PAN data is not stored on our application servers.