Privacy Policy

LIOS LAB PRIVATE LIMITED ("Company", "we", "Data Fiduciary", or "Data Controller") is dedicated to safeguarding your personal data and respecting your privacy rights under the **Digital Personal Data Protection (DPDP) Act, 2023 (India)** and the **General Data Protection Regulation (EU GDPR 2016/679)**.

1. Identity of Data Fiduciary / Data Controller

Legal Entity: LIOS LAB PRIVATE LIMITED
Operating Address: Pulibor, Jorhat - 785006, Assam, India
Official Contact Phone: +91 9181330755
Official Email: abondhu.lios@gmail.com

2. Personal Data We Collect

• Identity & Contact Information: Full name, phone number, pickup address, landmarks, pincode, and optional email address.
• Transaction & Payout Information: Mobile number linked to UPI, UPI VPA handle, payment status, weight receipts, and payout mode choices.
• Technical Information: IP address, device type, browser metadata, and essential website session cookies.

3. Lawful Basis for Processing

We process personal data under DPDP Act 2023 (Section 4) and EU GDPR (Article 6) on the following grounds:

• Consent: Explicit, voluntary, and informed consent provided when scheduling doorstep pickups.
• Contractual Performance: Processing required to dispatch pickup executives, measure scrap, and transfer doorstep payouts.
• Legal & Tax Compliance: Maintaining financial transaction logs and statutory audit records under applicable Indian tax regulations.

4. Rights of Data Principals (DPDP Act) & Data Subjects (EU GDPR)

Under statutory privacy laws, you hold the following enforceable rights:

• Right to Access & Data Summary: Request a summary of all personal data held and processed by us.
• Right to Correction, Updating & Erasure: Request the correction of incomplete data or erasure of your personal data ("Right to be Forgotten").
• Right to Withdraw Consent: You may withdraw your processing consent at any time without affecting prior lawful processing by emailing our Data Protection Officer.
• Right to Grievance Redressal: Submit privacy complaints directly to our Grievance Officer.
• Right to Nominate: Nominate another person to exercise your privacy rights in the event of death or incapacity.
• Data Portability & Restriction (GDPR): Receive personal data in a structured, electronic format or restrict specific processing operations.

5. Data Security & Storage Safeguards

We implement ISO/IEC 27001 standard security measures, including 256-bit SSL encryption in transit, strict role-based access restrictions, and secure cloud server storage located in compliance with data residency standards.

6. Data Retention Period

Personal data is retained only for as long as necessary to complete your scrap pickup transaction and fulfill legal accounting requirements (statutory tax retention up to 7 years), after which data is safely anonymised or erased.

7. Grievance Officer & Data Protection Details