At Sparva, we value the trust, commercial confidentiality, and operational security of our partner salons, aesthetic dermatology clinics, spas, and wellness resorts. This Privacy Policy details how we protect your organizational records across our web platform and mobile app in strict accordance with the Digital Personal Data Protection Act, 2023 (DPDP Act).
Introduction & Commercial Scope
Sparva operates as a Direct-to-Business (D2B) wholesale supplier providing premium professional disposables, sanitary spa supplies, and aesthetic essentials. By creating an account or placing orders, you consent to the data practices described herein, designed under the DPDP Act 2023 and the Information Technology Act, 2000.
Information We Collect
| Category | Data Collected | Operational Purpose |
|---|---|---|
| Business Identity | Entity Name, Trade Name, GSTIN (optional/required for tax credit). | B2B tier validation & statutory tax invoicing. |
| Contact Details | Authorized Representative Name, Mobile, WhatsApp, Email. | Dispatch notifications, order invoices, delivery OTPs. |
| Delivery Consignment | Commercial address, Landmark, City, State, Pincode. | Logistics surface cargo routing and consignment fulfillment. |
| App Telemetry | Device model, OS version, FCM push token, crash logs. | App stability, push notifications, security audit logs. |
Commercial Purpose & AI Ethics
We process partner data exclusively for verified commercial fulfillment purposes:
- Order Execution: Packing, palletizing, and shipping wholesale cartons.
- GST Tax Invoicing: Generating statutory e-way bills and tax receipts for Input Tax Credit (ITC).
- Automated Dispatch Alerts: Real-time WhatsApp/SMS tracking notifications.
- AI-Assisted Catalog & Digital Media: We deploy internal AI tools for product descriptions and visual rendering. No partner business identity, GST credentials, or confidential order data is ever exposed to public AI training corpuses.
Payment Security & Razorpay Tokenization
All payments on Sparva are processed through Razorpay, an RBI-authorized payment aggregator certified compliant with PCI-DSS Level 1 standards. When paying via UPI (GPay, PhonePe, Paytm, BHIM), Net Banking, or Corporate Cards, your transaction is securely tokenized directly with your bank. We only receive an authorized reference ID and timestamp to confirm your order.
Logistics & Consignment Delivery Sharing
To fulfill pan-India bulk delivery, we share destination parameters (business trade name, delivery address, contact mobile) with certified national logistics carriers:
These logistics partners operate under strict Non-Disclosure Agreements (NDAs) and are contractually prohibited from using your data for any marketing purposes.
Data Security & Storage Standards
Bcrypt Passwords
All passwords are encrypted with one-way cryptographic bcrypt hashing. Unreadable even to internal database admins.
256-Bit TLS
Data in transit across web and mobile apps is protected by enterprise 256-bit TLS/SSL encryption.
Indian Servers
Hosted in enterprise data centers complying with Indian statutory localization and cybersecurity guidelines.
Your Rights under the DPDP Act 2023
As a registered commercial entity, authorized representatives possess enforceable rights under Indian law:
- Right to Summary: Request a complete summary of all personal information and order history held by Sparva.
- Right to Rectification: Edit your company name, GST registration number, or delivery addresses in your Profile Dashboard.
- Right to Erasure: Request permanent removal of your account, subject to statutory tax auditing laws.
- Right to Withdraw Consent: Unsubscribe from marketing circulars while retaining essential transactional order alerts.
Cookies & App Telemetry
We utilize session tokens and local browser storage (LocalStorage) strictly to maintain your active login and preserve your wholesale cart items across page reloads. We do not deploy intrusive third-party cross-site advertising trackers or sell browsing telemetry to data brokers.
Account Erasure & CGST Statutory Retention
If you wish to terminate your business relationship with Sparva and erase your login credentials, visit our Account Deletion Portal.
Statutory Tax Records: Under Section 44 of the Central Goods and Services Tax (CGST) Act, 2017, commercial transaction logs, electronic tax invoices, and payment receipts must be preserved for 72 months (6 years) for statutory auditing. Personal login credentials will be permanently erased.
Grievance Redressal & Official Contact Desk
For any queries, privacy concerns, or data requests, contact our designated Grievance Officer: