Privacy Policy

PADDY DIGITAL PRIVATE LIMITED, a company incorporated under the provisions of the Companies Act, 2013 having its registered office at Flat No 20041 Tower-20 Prestige Ferns Residency A Haralur Grama And Bengaluru Bangalore, Karnataka 560102, India ("we," "us," or "our") is committed towards protecting your personally identifiable information including sensitive personal data ("Personal Data") as would be collected by the Company from you in the course of your access to and use of the Company's website (www.slydrapp.com) (hereinafter referred to as the 'website') We endeavour to collect, process and treat Personal Data of the users in compliance with the Data Protection Act, 2023, Data Protection Rules, 2025, the Information Technology Act, 2001 and the allied notifications, circulars, amendments issued with respect to Data Privacy. Although our Website and operations are based in India, this Privacy Policy has been designed to reflect globally recognized data protection principles and best practices. In addition to complying with applicable laws in India, we endeavour to align our data collection, processing, and protection practices with internationally accepted privacy standards, including those reflected in regulations such as the General Data Protection Regulation (GDPR) of the European Union, data privacy laws of the United States, and other relevant international data protection frameworks. While specific legal rights and obligations may vary depending on the jurisdiction from which you access the Website, we strive to maintain a high standard of privacy protection for all users, regardless of their location. This Policy is intended to ensure transparency, fairness, security, and responsible handling of personal information in accordance with globally accepted privacy norms. This Privacy Policy represents the sole, authorized statement of Our practices with respect to the collection of Personal Data through the website and the manner of use of such information by Us.

a. This Privacy Policy applies to all users, visitors, customers, and any other persons who access or use the website and any related services, applications, or platforms operated by Us. b. The purpose of this Privacy Policy is to explain how we collect, use, store, process, disclose, and protect the personal information and data that you provide to us or that is collected when you interact with the Website. This Policy outlines your rights regarding your personal information and the measures we take to safeguard it in compliance with applicable laws in India. c. This Privacy Policy applies to: i. All information collected through the Website, mobile applications, email communications, online forms, and other digital interactions; ii. Personal information provided voluntarily by users while registering, subscribing, contacting us, or using our services; iii. Information collected automatically through cookies, analytics tools, and similar technologies when you access or browse the Website. d. This Policy does not apply to: i. Third-party websites, applications, or services that may be linked to or accessible through our Website; ii. Information collected by third parties over whom we have no control, including payment gateways, advertisers, or external service providers. e. By accessing or using this Website, you agree to the terms of this Privacy Policy. If you do not agree with any part of this Policy, you are advised not to use the Website or provide any personal information. f. We reserve the right to update, modify, or revise this Privacy Policy at any time. Any changes will be effective upon posting the updated Policy on the Website, and your continued use of the Website thereafter will constitute acceptance of such changes.

a. We primarily collect the following Personal Data, as would be provided by You in the course of accessing and using Our services through the website. For the purpose of providing you our services, we collect the following information: i. Name of the Sender as entered by them ii. Phone Number of the Sender as entered by them iii. History of the Orders and Products added to Cart of Sender iv. Phone Number of the Recipient as entered by them v. Complete Address of the Recipient as entered by them vi. Order History of the Recipient. vii. Information collected automatically through cookies, analytics tools, device identifiers, IP addresses, and similar technologies when you access, navigate, or interact with the Website viii. Communications and correspondence exchanged with us through email, chat support, feedback forms, or any other medium provided on the Website. ix. Bank Account/UPI Address and other payment details

a. The information collected by us is primarily used to facilitate and process the orders placed by users on our platform and to ensure proper delivery of the products to the intended recipients. Personal information provided by you, including contact details, shipping information, and transaction-related data, enables us to fulfil orders in a safe, accurate, and efficient manner, communicate order updates, coordinate deliveries, and provide customer support in connection with your purchases. b. In addition to the above, we collect and process information for certain secondary purposes, including to enhance and improve our product catalogue, personalize offerings, improve the functionality and performance of our Website, analyse user preferences and behaviour, and provide an improved, seamless, and user-friendly experience. Such information may also be used to address technical issues, prevent fraud, ensure platform security, and comply with applicable legal and regulatory requirements. c. We collect and use personal information only to the extent necessary for the purposes described above and in accordance with applicable laws. d. We also use your personal information to provide effective customer support and to process, evaluate, and respond to your requests, queries, complaints, feedback, and other communications. The information enables us to address user concerns, resolve issues, provide assistance in relation to orders and services, and maintain meaningful communication with you. e. Further, we may use and process your information to comply with legal and regulatory obligations to which we are subject. This includes, without limitation, compliance with applicable tax laws, accounting requirements, statutory record-keeping, contractual obligations, and lawful requests from courts, law enforcement authorities, government agencies, or other competent authorities as required under applicable laws. f. We may also use your email address and phone number to send you communications regarding new product offerings, promotional schemes, discounts, special offers, and other marketing or business initiatives that may be of interest to you. Such communications may be sent through email, SMS, or other electronic means. You will have the option to opt out or unsubscribe from receiving such promotional or marketing communications at any time. Every marketing communication sent by us will contain a clear mechanism enabling you to withdraw your consent or unsubscribe from further updates. Your choice to unsubscribe will not affect your ability to use the Website or avail our services. g. We may use your bank account details, UPI address, card information, or other payment-related details solely for the purpose of processing refunds, chargebacks, or reversals in connection with orders placed on the Website. Such information is used only to facilitate secure and accurate transfer of refund amounts directly to you through authorized payment channels. We process and handle payment information in accordance with applicable laws and industry standards and only to the extent necessary to complete the relevant transaction. Your payment details are not used for any purpose other than facilitating payments, refunds, or resolving payment-related issues.

a. We retain personal information and user data for as long as your account remains active with us or as long as it is necessary to provide services to you and fulfil the purposes outlined in this Privacy Policy. Information related to your account, orders, transactions, and interactions with the Website is maintained for the duration of your relationship with us. b. If you request deletion or deactivation of your account, we will process such request in accordance with applicable laws and our internal procedures. However, even after account deletion or closure, certain information may continue to be retained by us for legitimate and lawful purposes, including compliance with statutory obligations, tax and accounting requirements, prevention of fraud, resolution of disputes, enforcement of our legal rights, and compliance with requests from law enforcement or other government authorities. c. The following indicative retention periods apply to different categories of data: i. Invoices, Orders, and Financial Records: Transactional records such as invoices, billing information, payment confirmations, and order history are retained for a minimum period of 7 (seven) years from the date of the transaction, in accordance with applicable tax, accounting, and financial reporting laws in India. ii. Website Logs and Technical Data: System-generated data such as server logs, IP addresses, device information, access logs, and security records are retained for a period of up to 24 (twenty-four) months from the date of collection, unless a longer retention period is required for security investigations, fraud prevention, or legal compliance. iii. Customer Support and Communication Records: Records of customer support interactions, emails, chats, and grievance-related communications are generally retained for 3 (three) years from the date of last interaction to enable effective resolution of disputes and customer service issues. iv. Marketing and Subscription Data: Information relating to marketing preferences, subscriptions, and promotional communications is retained only until you withdraw your consent or unsubscribe from such communications. d. Data that is no longer required for business, operational, or legal purposes will be securely deleted, anonymized, or archived in a manner consistent with applicable laws and industry standards. Retention periods may be extended where necessary to comply with ongoing legal proceedings, investigations, or statutory obligations.

a. In order to provide our services effectively, we may share limited personal data with certain third parties for specific and lawful purposes. In particular, we may share the recipient's essential personal information, such as name, phone number, and delivery address, with our authorized third-party stockists, logistics partners, delivery service providers, and delivery personnel solely for the purpose of processing, fulfilling, and delivering orders placed on our platform. b. We ensure that such third parties are provided only with the minimum information necessary to perform their designated functions and are contractually required to use the data only for the purposes for which it is shared. c. We may also disclose or share personal information with law enforcement agencies, courts, regulatory bodies, or other government authorities in response to lawful requests or where such disclosure is necessary for the purposes of investigations, legal proceedings, audits, compliance requirements, or to meet any statutory or regulatory obligations. d. Additionally, we may share your phone number and transaction-related details with our authorized payment gateway and payment processing partners for the purpose of facilitating payments, processing transactions, sending transaction confirmations, and providing you with updates or information relating to such transactions. e. Except as described above, we do not sell, rent, or otherwise disclose your personal information to any third party for their independent marketing or commercial purposes without your explicit consent.

a. We process personal data only for lawful purposes and in a manner consistent with applicable laws, including the Digital Personal Data Protection Act, 2023. All processing of personal data is carried out solely for the purposes described in this Privacy Policy and only to the extent necessary for providing our services, facilitating transactions, fulfilling user requests, improving our platform, and meeting our legal and contractual obligations. b. Personal data is processed by us either directly or through authorized third-party service providers acting on our behalf. Such processing may include collection, recording, organization, storage, retrieval, use, disclosure, transmission, and deletion of personal data as required for the operation of our Website and services. c. We may also anonymize, aggregate, or de-identify personal data so that it can no longer be associated with any identifiable individual. Such anonymized or aggregated data may be used by us for internal research, analytics, statistical purposes, tracking consumer behavior, improving our products and services, enhancing user experience, and understanding usage patterns on the Website. Anonymized data may be retained and used by us without restriction, as it does not constitute personal data. d. We ensure that appropriate technical and organizational measures are implemented to protect personal data against unauthorized access, loss, misuse, alteration, or disclosure. Access to personal data is restricted to employees, agents, and third-party processors who require such information to perform their designated functions and who are bound by confidentiality and data protection obligations. e. Where personal data is processed by third-party processors or service providers, we take reasonable steps to ensure that such entities process the data only in accordance with our instructions and maintain adequate standards of security and confidentiality. f. However, we are not responsible or liable for the privacy practices, policies, or data handling standards of independent third parties such as our stockists, delivery partners, logistics providers, payment gateway aggregators, or any other external service providers. Any personal data shared with such third parties is governed by their respective privacy policies and terms, and we encourage users to review those policies separately. g. We do not process personal data for any purpose that is incompatible with the purposes for which it was originally collected, unless required or permitted by law or with your explicit consent. h. By using our Website and services, you acknowledge and consent to the processing of your personal data in the manner described in this Privacy Policy.

You have the following rights provided under General Data Protection Regulation at any point the Company is in possession of or processing your Personal Information, and if you are in the European Union/European Economic Area. To exercise any of the following rights, please contact us. • Right to Access Information: You have the right to have a copy of the Personal Information we hold on you upon request. Please get in touch with us if you want to verify if the Company is processing your Personal Information or if you want access to any Personal Information the Company may have about you. • Right of Correction: You have the right to update any erroneous or incomplete information we may possess about you. • Right to be forgotten: The company endeavours to only process and record your Personal Information for as long as it is necessary. You have the right to ask us to remove the Personal Information we have about you from our servers. We may still be able to process your Personal Information lawfully in some situations for legal purposes. See the part of this privacy policy titled "Retention of Personal Information" for further details on retention periods. • Right to Restriction of Processing: You have the right to limit how your data is processed. Please get in touch with us to discuss your rights, if you think the Personal Information, we have on you is erroneous. You have the right to request us to limit the processing of your Personal Information in specific situations. • Right of Portability: You have the right to request us to transmit your Personal information which we hold about you to another company/organization, if it technically feasible for the Company. By enabling you to download your Personal Information, the Company ensures you can take it with you. • Right to Object: You have the option to object to certain specific kinds of processing mechanism of data, such as direct marketing. Please get in touch with us if you want further details or want to avail this right. Please inform us if this refers to an automatic decision performed on you (i.e., without human participation), and we will examine your request. • Right to Object to Automated Processing, including profiling: You have the right to be exempt from any potential legal repercussions of automated processing or profiling. • Right to Withdraw Consent: You have the right to revoke your permission at any time if we are relying on it to process your Personal Information. • Right to opt out of Marketing Messages: You have the option to opt out at any time if you no longer wish to receive marketing communications from the Company. You may also opt out at any time if you have agreed to get material that is tailored to you based on how and where you use our services. Please be aware that while we update our data, you could continue to get marketing communications for a short while after opting out. • Right to object to Cookies: Most web browsers are configured by default to allow cookies. You may often opt to set your browser to delete or reject browser cookies. Please note that the availability and functioning of the services may be impacted if you decide to delete or reject necessary cookies. • Right to Review: If the Company rejects your request made in accordance with your right of access, we will let you know why. As stated below, you have the right to file a complaint. • Right to Lodge Complaints: You have the right to file a complaint at any time with your local supervisory authority and the data protection representatives of the Company over our privacy practises as a data controller. However, we would welcome the chance to resolve any issues before notifying your local supervisory authority, and our Grievance Officer may be reached by contacting us as details mentioned hereinbelow.

a. Rights under the Digital Personal Data Protection Act, 2023: If you are an individual whose personal data is collected or processed by us ("Data Principal"), you are entitled to exercise certain rights in relation to your personal data in accordance with the Digital Personal Data Protection Act, 2023 ("DPDP Act"). b. Right to Access Information: You have the right to obtain confirmation as to whether we are processing your personal data and to request a summary of such data. You may also request details regarding the processing activities undertaken with respect to your personal data, subject to applicable legal limitations. c. Right to Correction, Completion and Updating: You have the right to request correction of any inaccurate or misleading personal data, completion of any incomplete data, and updating of personal data that may be outdated. Upon receiving a valid request, we will take reasonable steps to correct or update your information. d. Right to Erasure (Right to be Forgotten): You have the right to request erasure of your personal data where it is no longer necessary for the purpose for which it was collected, or where you withdraw consent. However, we may continue to retain and process certain personal data where such retention is required for compliance with legal obligations, enforcement of rights, prevention of fraud, or other lawful purposes. Please refer to the "Data Retention" section of this Privacy Policy for further details. e. Right of Grievance Redressal: You have the right to register a grievance regarding the processing of your personal data. We have appointed a Grievance Officer to address any concerns or complaints you may have. All grievances will be acknowledged and addressed within the timelines prescribed under applicable law. f. Right to Nominate: In accordance with the DPDP Act, you have the right to nominate another individual to exercise your rights on your behalf in the event of your death or incapacity. g. Right to Withdraw Consent: Where we rely on your consent for processing personal data, you have the right to withdraw such consent at any time. Withdrawal of consent shall not affect the legality of processing carried out prior to such withdrawal. Upon withdrawal of consent, we may be unable to continue providing certain services that require processing of your personal data. h. Right to Opt-Out of Communications: You have the right to opt out of receiving promotional, marketing, or non-essential communications from us at any time. Opt-out instructions will be provided in such communications, and you may also contact us directly to update your preferences. i. Right to Seek Review of Decisions: If any request made by you in exercise of your rights is rejected or cannot be fulfilled, we will inform you of the reasons for such decision. You shall have the right to seek further clarification or escalate the matter through the grievance redressal mechanism provided by us. j. Right to Lodge Complaints: If you are not satisfied with the manner in which we process your personal data or handle your requests, you have the right to file a complaint with the Grievance Officer designated by us. In addition, you may approach the appropriate authorities or the Data Protection Board of India, once constituted under the DPDP Act, for further redressal.

Use of our Website is available only to persons who can form a legally binding contract under the Indian Contract Act, 1872. We do not knowingly solicit or collect any Personal Information from children under the age of 18 years. If you have shared any Personal Information of children under the age of 18 years, you represent that you have the authority to do so and permit us to use the information in accordance with this Privacy Policy.

a. We take the security of personal data seriously and implement appropriate technical and organizational measures to safeguard it against unauthorized access, loss, misuse, alteration, or disclosure. However, despite such measures, no system is completely secure. b. In the event of any personal data breach that is likely to result in harm, risk, or significant impact to individuals, we will take prompt and appropriate steps to assess, contain, and mitigate the breach. Where required under applicable law, including the Digital Personal Data Protection Act, 2023 and the General Data Protection Regulation (GDPR), we will notify the relevant regulatory authorities and affected users within the timelines prescribed by such laws. c. Any breach notification provided to users will include, to the extent reasonably possible: i. a description of the nature of the breach; ii. the categories of personal data involved; iii. the likely consequences of the breach; and iv. the measures taken or proposed to be taken by us to address and mitigate the breach. d. Where a personal data breach poses a high risk to the rights and interests of individuals, we will notify affected users without undue delay through appropriate communication channels, unless an exception under applicable law applies. e. We will also maintain records of data breaches, their effects, and the remedial actions taken, in order to comply with our legal obligations and to prevent recurrence.

a. Nothing contained in this Privacy Policy shall limit or restrict the rights available to individuals under applicable data protection laws. Users whose personal data is processed by us shall have the right to exercise all remedies and protections available to them under the relevant laws of their jurisdiction. b. Individuals located in India are recognized as Data Principals under the Digital Personal Data Protection Act, 2023, and are entitled to exercise their statutory rights and remedies before the competent authorities in India, including the Grievance Redressal Mechanism provided by us and, where applicable, the Data Protection Board of India or any other authority constituted under Indian law. c. Individuals located in the European Union or European Economic Area are recognized as Data Subjects under the General Data Protection Regulation (GDPR) and shall have the right to approach their respective Data Protection Authorities or Supervisory Authorities in their country of residence to seek redress, file complaints, or exercise any rights available to them under the GDPR. d. Similarly, users located in any other jurisdiction may approach the appropriate regulatory bodies, courts, or authorities empowered under the applicable data protection and privacy laws of their respective countries. e. We remain committed to cooperating fully with users and with competent regulatory authorities to address any concerns, complaints, or grievances relating to the processing of personal data. Users are encouraged to first contact us directly for resolution; however, this shall not affect their independent right to seek remedies before the relevant statutory or supervisory bodies.

For any queries related to this Privacy Policy, correction of any Personal Information provided by you or for making a complaint about breach of privacy, you may please contact the following official of the Company: Name: Tauzeeh Ahmed Khan Address: 20041, Prestige Ferns Residency Apt, Harlur Road, Bangalore 560103 Email Address: tauzeeh@slydrapp.com Phone Number: +91 89621 70986 Reach out to us using the button below.