Privacy Policy
Udyog Odisha Platform
Introduction
This Privacy Policy (“Policy”) explains how Exvion Global Pvt. Ltd., operating the Udyog Odisha platform (“Platform”), collects, uses, stores, and protects your personal data in accordance with the Digital Personal Data Protection Act, 2023 (“DPDP Act”). By accessing or using the Platform, you consent to the processing of your personal data as described herein.
Identity of the Data Fiduciary
Exvion Global Pvt. Ltd., having its registered office at Balasore, Odisha, India, is the “Data Fiduciary” for the personal data collected through the Udyog Odisha Platform (website: udyogodisha.com and associated applications).
Categories of Personal Data Collected
We may collect the following categories of personal data:
- KYC Information: Aadhaar number, PAN, business registration details, address proof, and other identity documents provided for verification and onboarding.
- Device and Usage Information: IP address, device type, operating system, browser type, mobile network, location data (approximate), and other technical information collected automatically when you access or use the Platform.
- Payment and Transaction History: Payment method details, transaction IDs, amounts, dates, and other information related to subscriptions, bidding fees, or service payments.
Purpose of Processing
Personal data is processed for the following purposes:
- To verify your identity and business details (KYC) and to onboard you as a Buyer, Vendor, or Business Associate.
- To connect Buyers and Sellers, facilitate RFQs, quotations, and communications, and to enable the core marketplace functionality of the Platform.
- To process payments, generate invoices, reconcile accounts, and maintain transaction records.
- To comply with legal and regulatory obligations, including tax, anti‑money laundering, and other statutory requirements.
- To improve the Platform, troubleshoot issues, and provide customer support.
Lawful Basis for Processing
We process your personal data on the basis of:
- Your consent, where required under the DPDP Act, for specific purposes such as marketing or analytics.
- Our legitimate interests in operating a secure, compliant marketplace and in preventing fraud and misuse.
- Compliance with legal obligations, including KYC, taxation, and other statutory requirements.
Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. Once the retention period expires, personal data will be securely erased or anonymised, unless further retention is required by law or for legitimate business purposes.
Data Sharing and Disclosure
We may share your personal data with:
- Service providers (e.g., payment gateways, cloud hosting, IT support) who process data on our behalf under appropriate contractual safeguards.
- Government authorities or regulators, where required by law, including for tax, compliance, or investigation purposes.
- Other Users of the Platform only to the extent necessary for the marketplace functions (e.g., sharing your business details with a Buyer or Vendor for RFQ or quotation purposes), subject to the applicable terms and your consent.
User Rights under the DPDP Act
As a Data Principal, you have the following rights in relation to your personal data:
- Right to access: You may request information about the personal data we hold about you and the purpose for which it is processed.
- Right to correction: You may request correction or update of inaccurate or incomplete personal data.
- Right to erasure: You may request the deletion or erasure of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal and regulatory constraints.
- Right to grievance redressal: You may raise any complaint or grievance regarding our processing of your personal data through the grievance redressal mechanism described below.
Grievance Redressal Mechanism
We have appointed a Grievance Officer to address concerns relating to data protection and privacy. You may contact the Grievance Officer at:
We will acknowledge your grievance within 7 days and endeavour to resolve it within a reasonable time, in accordance with applicable law.
Cookies and Tracking Technologies
The Platform uses cookies and similar tracking technologies, including Google Analytics, Meta Pixel, and other third‑party pixels, to:
- Analyse traffic, user behaviour, and Platform performance.
- Personalise content and advertisements.
- Measure the effectiveness of marketing campaigns.
You may manage or disable cookies through your browser settings. However, disabling certain cookies may affect the functionality or performance of the Platform.
Security Safeguards
We implement reasonable technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These include encryption, access controls, and periodic security reviews. Despite these measures, no system is completely immune to risks, and we cannot guarantee absolute security.
Cross‑Border Transfers
Where personal data is transferred outside India, we will ensure that such transfers comply with the requirements of the DPDP Act, including through appropriate safeguards and contractual arrangements with data processors.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or in applicable law. Any material changes will be notified to you through the Platform or by email, and your continued use of the Platform after such notice shall constitute your acceptance of the revised Policy.
Contact Us
If you have any questions, requests, or concerns regarding this Privacy Policy or the processing of your personal data, you may contact us at:
Data Protection
Privacy Concerns?
Contact our Grievance Officer for unresolved issues.