Privacy Policy

QLOUT ENTERPRISES PRIVATE LIMITED, Gyandeep Towers, Moosarambagh, Opp. More Super Market, Malakpet, Hyderabad, Telangana 500036, India, is the data fiduciary for personal data processed through Qlout. Questions about this policy go to nikhilsandiri@qlout.in.

• Account details: mobile number, name, email address (if given) and your profile picture.
• Order details: bids, wins, delivery addresses, order and invoice records.
• Payment details: the payment status, amount, method type and transaction reference returned by our payment gateway. We never receive or store your card number, CVV, UPI PIN or net-banking password.
• Seller details: legal name, business type, PAN (masked), GSTIN, pickup addresses and the bank or UPI account for payouts (held by the payment gateway; we keep only the last digits).
• Communications: messages in live rooms and to sellers, support requests and their replies.
• Technical data: IP address, device and browser type, pages visited and essential cookies. See our Cookie Policy.

• to create and secure your account, including verification by one-time password;
• to run auctions, process orders and payments, arrange delivery and issue invoices;
• to pay sellers and meet tax obligations, including GST, TCS and TDS reporting;
• to provide customer support and handle complaints, returns and refunds;
• to prevent fraud, abuse and payment default, and to keep the platform secure;
• to send service messages about your bids, orders and account; and, only with your consent, marketing messages you can opt out of at any time;
• to meet legal and regulatory requirements.

We process data on the basis of your consent, and for legitimate uses permitted by the Act, such as completing an order you have placed or complying with law.

We do not sell personal data. We share only what each party needs:

• The seller or buyer of your order: name, delivery address and phone number, so the order can be shipped and delivered.
• Payment gateway partner: to process payments, refunds and seller payouts under RBI rules.
• Courier and logistics partners: to collect and deliver parcels.
• SMS, email and notification providers: to send one-time passwords and service messages.
• Cloud hosting providers: to store data and run the platform, in data centres in India where available.
• Authorities: where required by law, court order or a lawful request from a government agency.

We keep account data while your account is open. Order, invoice and payment records are kept for eight years after the end of the financial year, as Indian tax law requires. Other data is deleted or anonymised once it is no longer needed for the purpose it was collected for.

Data is encrypted in transit (HTTPS) and access is limited to staff who need it. Payment data is handled by a PCI-DSS compliant payment gateway. If a personal data breach occurs, we will notify the Data Protection Board of India and affected users as the Act requires.

• to get a summary of the personal data we hold about you and how it is used;
• to correct, complete or update it;
• to have it erased, unless we must keep it by law;
• to withdraw consent at any time, as easily as you gave it;
• to nominate another person to exercise these rights if you die or become incapable;
• to have a grievance addressed by our Grievance Officer, and then by the Data Protection Board of India.

To use any of these rights, write to nikhilsandiri@qlout.in. We reply within 30 days.

Qlout is for people aged 18 and over. We do not knowingly collect data from children; if we learn we have, we delete it.

Nikhil Sandiri, Grievance Officer, QLOUT ENTERPRISES PRIVATE LIMITED, Gyandeep Towers, Moosarambagh, Opp. More Super Market, Malakpet, Hyderabad, Telangana 500036, India. Email nikhilsandiri@qlout.in, phone +91 70935 99910. See Grievance Redressal for timelines.

We will post any change to this policy on this page with a new effective date, and tell you on the site or by email before a material change applies.