Privacy Policy

RAMOJ (a brand operated by eNeoteric Consultancy Services Private Limited, hereinafter "RAMOJ", "we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit ramoj.com, use the RAMOJ mobile app for iOS and Android, or use our services. Please read this policy carefully. Section 1.3 covers what the mobile app collects.

1. Information We Collect

1.1 Information You Provide

• Account information: Name, email address, mobile number, and company name when you register or create an account.
• Order & quote information: Shipping address, GSTIN, billing details, and product requirements when you place an order or request a quote.
• Communications: Messages, enquiries, and feedback you send via contact forms, email, phone, or WhatsApp.
• Payment information: Payments are processed via Razorpay. We do not store full card numbers or bank account details on our servers.
• OTP verification: Your mobile number is used for OTP-based authentication via MSG91. We do not store OTP codes after verification.

1.2 Automatically Collected Information

• Usage data: Pages visited, time spent, clicks, and navigation patterns.
• Device information: Browser type, operating system, IP address, and device identifiers.
• Cookies and tracking technologies: We use cookies to improve user experience, remember preferences, and analyse traffic. See Section 5 for details.

1.3 Mobile App (iOS and Android)

The RAMOJ mobile app collects the information in 1.1 and 1.2. It also uses the device features below. Each one is optional, is used only for the purpose listed, and asks for your permission first. If you decline, the rest of the app keeps working.

• Precise location. Purpose: (a) when you tap "Use My Current Location" on an address or at checkout, your phone looks up the street address and fills in the form; (b) delivery agents share their live location while they deliver an order, so you can track it. Location is used only while the app is open on screen ("while using the app"); the app never reads location in the background. Retention: for address auto-fill, your coordinates go from your phone to OpenStreetMap Nominatim to look up the address and are not sent to RAMOJ — we keep only the address you choose to save. For delivery tracking, we store only the agent's most recent position on that shipment. Each update replaces the last one, and the position is kept with the shipment record.
• Camera and photo library. Purpose: delivery agents take or attach a proof-of-delivery photo when they complete a delivery. Customers are never asked for camera or photo access. Retention: the photo is stored on Cloudinary with the shipment record and kept as long as the order record (see Section 7).
• Face ID, Touch ID and fingerprint. Purpose: quick sign-in instead of typing your MPIN. Your phone's operating system checks your face or fingerprint. RAMOJ never receives, sees or stores biometric data; the app only learns whether the check passed. Retention: the sign-in key protected by biometrics stays in your phone's secure storage (iOS Keychain / Android Keystore) and is deleted when you sign out, turn off biometric sign-in, or delete your account.
• Push notification token. Purpose: sending order, payment, shipment and account notifications to your phone, through Expo and Apple / Google push services. Promotional notifications are sent only if you opt in, and you can turn them off at any time in Account → Notifications ("Promotions & Offers") or in your phone's settings. Retention: one token per platform, replaced each time you sign in, and deleted when you delete your account.
• Device identifier (push notification token). Purpose: app functionality. When you sign in to the mobile app and allow notifications, we store the push token your device issues so we can send order, delivery and account notifications to that device. It is not used for advertising or tracking. Retention: removed when you sign out of the app, and deleted with your account.
• Product reviews. Purpose: reviews you write (rating, title, text, optional photos, and the name and company you enter) are shown to other customers on the product page. Every review is checked by our team before it is published. Anyone can report a review; a reported review is hidden until we check it again. Retention: published reviews stay up until you ask us to remove them. If you delete your account, reviews you already published stay up under the display name you chose; write to the Grievance Officer (Section 9) to have them removed.

1.4 Deleting Your Account in the App

You can delete your account from inside the app: go to Account → Delete Account and confirm. This takes effect immediately. We erase your name, email address, mobile number, GSTIN and company name, password / MPIN, saved addresses, business profile, registered devices and push tokens. If you signed in with Apple, we also revoke RAMOJ's access to your Apple ID, so Sign in with Apple is disconnected from RAMOJ. If you signed in with Google, the Google link is removed. By law we must keep tax invoices and order records (see Section 7), but they are no longer linked to your name or contact details. You can also ask the Grievance Officer to delete your account (Section 9).

2. How We Use Your Information

• Process orders, quotes, and payments
• Send OTPs and verify your identity via mobile number
• Communicate about your orders, enquiries, and account
• Issue GST-compliant tax invoices
• Improve our website, products, and services
• Send transactional and (with your consent) promotional communications
• Comply with legal obligations under the DPDP Act 2023, IT Act 2000, and applicable Indian laws
• Prevent fraud and ensure platform security
• Analyse usage patterns to enhance user experience

3. Legal Basis for Processing

• Contract performance: Processing necessary to fulfil orders and provide requested services.
• Legitimate interests: Improving our platform, preventing fraud, and communicating service updates.
• Consent: Marketing communications — you may withdraw consent at any time.
• Legal obligation: Compliance with applicable Indian laws and regulations.

4. Sharing Your Information

We do not sell your personal data. We may share your information with:

• Razorpay (Payment Processing) — for secure payment collection. See Razorpay's Privacy Policy.
• MSG91 (OTP / Communications) — for mobile number verification and transactional SMS. See MSG91's Privacy Policy.
• Shiprocket (Logistics) — for shipment booking, tracking, and delivery.
• Cloudinary (Media Storage) — product images, review photos and delivery proof-of-delivery photos are hosted on Cloudinary.
• Expo, Apple and Google (Push Notifications) — your app's push token and the notification text, so notifications reach your phone.
• OpenStreetMap Nominatim (Address Look-up) — the location you share when you tap "Use My Current Location" in the app goes directly from your phone, to look up the street address.
• Apple and Google (Sign-in) — if you choose Sign in with Apple or Google, they confirm who you are to us.
• OEM partners: For warranty registration and product support, with your knowledge.
• Cloud hosting: Our servers are hosted on secured infrastructure. Data is processed under strict confidentiality agreements.
• Legal authorities: When required by law, court order, or to protect the rights and safety of RAMOJ and its users.
• Business transfers: In connection with a merger, acquisition, or sale of assets, where privacy obligations would be transferred.

5. Cookies & Analytics

• Essential cookies: Required for core functionality (authentication, cart, security). Cannot be disabled.
• Google Analytics (G-H0HYBX7XEV): Activated only after you consent via our cookie banner. You may opt out anytime via the Google Analytics Opt-out Add-on or by declining cookies. See Google's Privacy Policy.
• Plausible Analytics: A privacy-first, cookie-free analytics tool. Collects only aggregated page-view data. Does not use cookies or track individuals. No consent required.
• Preference cookies: Remember your settings such as cookie consent choice.

A cookie consent banner is shown on your first visit. Google Analytics loads only after you click "Accept Cookies". You can update your preference by clearing cookies and revisiting the site.

6. Data Security

We implement industry-standard security measures including HTTPS/TLS encryption, secure server infrastructure, access controls, and regular security reviews. Sensitive data (passwords, MPIN) is stored using strong one-way hashing. No internet transmission is 100% secure — please use strong credentials and notify us immediately if you suspect unauthorised account access.

7. Data Retention

We retain personal data for as long as necessary to fulfil the purposes outlined in this policy, comply with legal obligations (typically 7 years for financial records under Indian law), resolve disputes, and enforce agreements. Account data is retained until you request deletion or for 3 years after last activity, whichever is earlier. Data collected by the mobile app is retained as described in Section 1.3.

8. Your Rights

Under applicable Indian data protection law, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Request erasure of your data (subject to legal retention requirements). In the mobile app you can delete your account yourself; see Section 1.4.
• Withdraw consent for marketing communications at any time
• Nominate a person to exercise rights on your behalf in case of death or incapacity
• Lodge a complaint with the Data Protection Board of India once operational

To exercise your rights, contact our Grievance Officer at info@ramoj.com. We will respond within 30 days.

9. Grievance Officer

In accordance with the Information Technology Act, 2000 and the DPDP Act 2023, we have appointed a Grievance Officer for addressing privacy-related concerns:

10. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to review their respective privacy policies.

11. Children's Privacy

Our services are intended for business and adult users (18+). We do not knowingly collect personal information from individuals under 18. If we become aware of such collection, we will delete the data promptly.

12. Compliance & Applicable Law

This policy is designed to comply with:

• Digital Personal Data Protection (DPDP) Act, 2023 (India) — India's primary data protection legislation.
• Information Technology Act, 2000 and the IT (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.
• Other applicable Indian regulations governing e-commerce and data processing.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Significant changes will be communicated by posting the updated policy and updating the "Last updated" date. Continued use of our services after changes constitutes acceptance.

14. Contact Us

For questions or concerns about this Privacy Policy or our data practices: