Privacy Policy

This Privacy Policy ("Policy") describes how Evergarden Technologies Private Limited ("Evergarden," "we," "us," or "our") collects, uses, shares, and protects information about you when you access or use our digital marketplace platform available at www.evergarden.pro (the "Platform"). Evergarden is a digital marketplace that enables buyers and sellers to transact in digital products, including eBooks and PDFs, software and plugins, online courses and videos, design templates, and music and audio files.

Please read this Policy carefully. By accessing or using the Platform, you agree to the practices described herein. If you do not agree, you must discontinue use of the Platform.

This Policy is designed to comply with applicable privacy laws, including the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 ("SPDI Rules") of India; the Digital Personal Data Protection Act, 2023 ("DPDPA") of India; the General Data Protection Regulation ("GDPR") for users in the European Union and United Kingdom; the UK GDPR post-Brexit; the California Consumer Privacy Act ("CCPA") and California Privacy Rights Act ("CPRA") for California residents; and the Children's Online Privacy Protection Act ("COPPA") for users in the United States under the age of 13.

1. About Us

Evergarden Technologies Private Limited is operated and owned as a company registered in India. For the purposes of applicable data protection laws, Evergarden acts as the Data Controller (under GDPR), Data Fiduciary (under DPDPA), and Business (under CCPA) with respect to personal data collected through the Platform.

2. Information We Collect

We collect information in three primary ways: (a) information you provide directly to us; (b) information collected automatically when you use the Platform; and (c) information received from third parties.

2.1 Information You Provide Directly

• Account Information: Full name, username, email address, password (stored in hashed/encrypted form), and profile picture.
• Buyer Information: Billing name and email address used for purchases.
• Seller Information: Display name, bank account details or payment payout information, and product listing information.
• Transactional Data: Purchase history, product downloads, and order receipts.
• Communications: Messages sent to our support team, feedback, dispute resolutions, and any other correspondence.

2.2 Information Collected Automatically

• Device & Technical Data: IP address, device type, operating system, browser type and version, and unique device identifiers.
• Usage Data: Pages and features visited, search queries on the Platform, click-through behaviour, and time and date of visits.
• Transaction Logs: Purchase timestamps, product IDs, transaction amounts, and payment status (excluding full card numbers).

2.3 Information from Third Parties

• Social Login Providers: If you register or log in using Google or Facebook, we receive your name, email address, profile picture, and account ID.
• Payment Processors: Razorpay and any other payment processors provide us with transaction confirmation data and payment status.

3. Sensitive Personal Data or Information (SPDI)

Under India's SPDI Rules, certain categories of data are considered sensitive, including financial information such as bank account and payment details. Where we collect such data (for example, payout details for sellers), we do so only with your explicit consent, for the specific and lawful purpose of facilitating payments, and we apply heightened security measures to such data.

4. How We Use Your Information

We use the information we collect for the following purposes:

• To Provide and Operate the Platform: Creating, maintaining, and securing your account; processing purchases and facilitating delivery.
• To Improve and Personalise the Platform: Analysing usage patterns through Google Analytics; developing new features.
• For Marketing and Advertising: Serving relevant advertisements via Google Ads and Meta Ads, and sending updates with consent.
• For Safety, Legal Compliance, and Fraud Prevention: Detecting fraud, complying with legal obligations, and enforcing our terms.

5. Legal Basis for Processing (EU/UK Users)

If you are located in the European Union or United Kingdom, we rely on Contractual Necessity (Art. 6(1)(b)), Legitimate Interests (Art. 6(1)(f)), Consent (Art. 6(1)(a)), and Legal Obligations (Art. 6(1)(c)) under the GDPR / UK GDPR for processing your personal data.

6. How We Share Your Information

We do not sell your personal data to third parties. We share data only with other users (for order fulfillment), service providers (Razorpay, Google Analytics, cloud hosting), and regulatory or law enforcement authorities when legally required.

7. Cookies and Tracking Technologies

We use strictly necessary, analytics, advertising, and functional cookies. You can manage cookies via our consent banner, your browser settings, or dedicated opt-out tools such as the Google Analytics Opt-out browser extension.

8. International Data Transfers

Your personal data may be transferred to and processed in countries outside your country of residence (including India and the United States). For EU/UK residents, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs).

9. Data Retention

Account data is retained for the duration of the account and up to 3 years after deletion. Financial and transaction records are kept for a minimum of 7 years, in accordance with Indian tax regulations.

10. Your Privacy Rights

Depending on your location, you have rights of access, rectification, erasure ("right to be forgotten"), portability, and objection under the GDPR, DPDPA 2023, and CCPA/CPRA.

To exercise your rights or register a grievance, please contact our Grievance Officer: Esther at contact@evergarden.pro.

11. Data Security

We implement secure data transmission via HTTPS (TLS), password hashing, role-based access limits, and regular security vulnerability testing to secure your personal information.

12. Contact Us

If you have questions regarding this Privacy Policy, please reach out to us at: contact@evergarden.pro.