Privacy Policy

1. Marketplace Role Clarification

ALLYNOR operates as a marketplace platform connecting customers with independent third-party sellers. Sellers are responsible for product listings, warranties, regulatory compliance, and fulfilment obligations related to their products.

2. Consent to Data Processing

By using the platform, creating an account, or placing an order, you consent to the collection and processing of your personal data as described in this Privacy Policy.

3. Information We Collect

When you create an account, place an order, or interact with the ALLYNOR marketplace, we collect information you provide directly, such as your name, contact details, shipping and billing addresses, payment information (processed by our payment partners), and order history. We also collect technical data such as device type, browser, IP address, and pages visited via cookies and similar technologies.

4. How We Use Your Information

To fulfil orders placed through the marketplace, including communication with sellers and logistics partners
To process payments and refunds via authorised payment aggregators
To send transactional updates (order status, shipment tracking, return updates)
To respond to customer support requests
To investigate fraudulent activity, policy abuse, chargebacks, or disputes
To improve site performance, prevent fraud, and comply with legal obligations

5. Information Sharing

We share order information with the relevant seller(s) and logistics partner(s) strictly to fulfil your order. Payment data is processed by our PCI-DSS compliant payment aggregator and is never stored on ALLYNOR servers. We do not sell personal data to third parties.

6. Third-Party Services & Integrations

To operate, secure, and improve the ALLYNOR platform, we may use trusted third-party service providers and technology partners. These providers may process limited customer or seller information strictly for operational, transactional, security, analytics, and communication purposes.

These third-party services may include:

Payment gateway and payment processing providers
Shipping, courier, and logistics partners
Website hosting and cloud infrastructure providers
Analytics and performance monitoring tools
Customer relationship management (CRM) systems
Email communication service providers
SMS and OTP verification service providers
WhatsApp business communication services
Fraud detection and security monitoring tools
Marketing automation and customer engagement platforms

Information shared with such providers is limited to what is reasonably necessary for them to perform their services on behalf of ALLYNOR. ALLYNOR works only with service providers that are expected to maintain appropriate security, confidentiality, and data protection standards. We do not authorise third-party providers to sell, misuse, or independently exploit customer personal information for unauthorised purposes.

7. International Data Transfers

Some data may be processed or stored on servers located outside India through trusted third-party service providers, subject to applicable data protection and security measures.

8. Seller Privacy Responsibilities

Sellers may access customer information solely for order fulfilment, customer support, and legal compliance purposes. Sellers are prohibited from using customer data for unsolicited marketing or unauthorised external communications.

9. Data Retention

ALLYNOR retains personal information only for as long as necessary to provide services, fulfil orders, comply with legal obligations, resolve disputes, prevent fraud, and enforce platform policies.

Order records, invoices, and transaction details may be retained for up to 8 years or as required under applicable Indian laws.
Customer support, communication, and dispute-related records may be retained for operational and legal purposes.
Seller onboarding and compliance records may be retained as required for marketplace and regulatory obligations.

After the retention period, information will be securely deleted, anonymised, or retained only where legally required.

10. Account Suspension & Fraud Monitoring

ALLYNOR reserves the right to suspend accounts involved in suspicious, abusive, fraudulent, or policy-violating activities.

11. Data Breach Notification

In the event of a data breach affecting personal information, ALLYNOR will take appropriate corrective measures and notify affected users where legally required.

12. Medical Disclaimer

Products sold on ALLYNOR are not intended to replace professional medical advice, diagnosis, or treatment. Customers should consult qualified healthcare professionals before using medical or orthopedic products.

13. Your Rights

Under applicable Indian data-protection law (including the Digital Personal Data Protection Act, 2023), you have the right to access, correct, or delete personal data we hold about you, and to withdraw consent for non-essential processing.

14. Cookies

We use cookies to keep you signed in, remember your cart, and measure site performance. You may disable cookies in your browser settings; some features of the site may not work correctly without them.

15. Security

We use industry-standard safeguards including HTTPS, encrypted credentials storage, and access controls to protect personal data. No internet transmission is fully secure; please use a strong unique password.

16. Children’s Privacy

ALLYNOR is not directed at children under 18 and we do not knowingly collect personal data from minors without verifiable parental consent.

17. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated through the platform or by email.

18. Contact & Grievance Officer

For questions about this policy or your data, contact support@allynor.com.

For grievances and complaints relating to personal data or this Privacy Policy, please contact our Grievance Officer at grievance@allynor.com. We aim to respond within 15 business days in accordance with applicable Indian IT rules and DPDP-related expectations.