Under the DPDP Act, ECOMServices is the Data Fiduciary — the entity that decides why and how your personal data is processed. You, the person using our site, are the Data Principal. This policy explains what we collect, why, and the rights you have over it.

What We Collect

When you apply for a service, we collect your name, phone number, email address, and state. When you use the Contact page, we collect your name, phone number, and message.

Why We Collect It

Solely to process your service request and to get in touch with you about it — by phone, WhatsApp, or email. We only ask for what's actually needed for this purpose.

Your Consent

We process your information only after you've explicitly agreed to it — by ticking the consent checkbox on our forms. You can withdraw this consent at any time by contacting us; if you do, we'll stop further processing, though this won't affect anything already done with your consent up to that point (for example, an application already filed on your behalf).

Your Rights

Under the DPDP Act, you have the right to:

  • Ask us for a summary of the personal data we hold about you and how it's being processed
  • Ask us to correct, complete, or update inaccurate information
  • Ask us to erase your information once it's no longer needed for the purpose you gave it for
  • Withdraw your consent at any time
  • Nominate another individual to exercise these rights on your behalf in the event of your death or incapacity
  • Raise a grievance with us, and escalate to the Data Protection Board of India if it isn't resolved

To exercise any of these, reach out using the contact details below.

How It's Stored

Stored securely in our systems, accessible only to authorized staff who need it to process your request.

Sharing

We do not sell your information. It is shared only where necessary to actually deliver the service you requested — for example, filing an application with the relevant government department.

How Long We Keep It

We retain your information until your request has been fully handled, after which it is deleted from our active records, unless we're required by law to keep it longer.

In the Event of a Data Breach

If a breach affecting your personal data ever occurs, we will notify you and the Data Protection Board of India as required under the DPDP Act.

Children's Data

Our services are intended for business owners aged 18 and above. We do not knowingly collect personal data from anyone under 18.

Grievance Redressal & Privacy Questions

If you have any questions about your data, or wish to raise a grievance, reach out on WhatsApp or email. We aim to respond within a reasonable time. If you're not satisfied with our response, you may approach the Data Protection Board of India.

This page is provided for general information and does not constitute legal advice. Last updated: 22 August 2026.