Privacy policy
This policy explains how Nitye uses your personal data. Nitye is a marketplace for Indian fashion and crafts.
1. Who we are
The data controller is RB DesignTech USA, the operator of Nitye, 10905 Vista Loop Road, Riverside, CA 92503, United States. Contact us at dev@rbdesigntech.com for any question about your data.
2. Data we collect
- Account data: name, email address, phone number and password (stored as a hash).
- Order data: delivery and billing addresses, items ordered, order history.
- Payment data: our payment provider processes card details. We do not store full card numbers.
- Messages: what you send to us or to a seller.
- Technical data: IP address, browser type and server logs, kept for security.
3. Why we use it, and our legal basis
| Purpose | Legal basis (GDPR Article 6) |
|---|---|
| Create your account and fulfil your orders | Contract |
| Send order and delivery updates | Contract |
| Keep the site secure and stop fraud | Legitimate interests |
| Keep tax and accounting records | Legal obligation |
| Send marketing email, only if you opt in | Consent |
You must give account and order data to place an order. Without it we cannot deliver. Marketing is optional.
We do not make decisions about you by automated means only, and we do not sell your data.
4. Who receives your data
- The seller who fulfils your order receives your name, delivery address and order items.
- Service providers who work for us: hosting (Hetzner, Germany), email delivery, payment processing and shipping carriers.
- Authorities, when the law requires it.
5. International transfers
Our servers are in Germany. Our team and some sellers are in the United States and India. When data leaves the EU or UK, we use the European Commission's Standard Contractual Clauses or another lawful transfer tool.
6. How long we keep data
- Account data: while your account is open, then 30 days.
- Order and tax records: 7 years, as tax law requires.
- Server logs: 30 days.
- Marketing consent: until you withdraw it.
7. Your rights
You have these rights over your personal data:
- Access: get a copy of the data we hold about you.
- Rectification: correct data that is wrong or incomplete.
- Erasure: ask us to delete your data.
- Restriction: ask us to limit how we use your data.
- Objection: object to use based on our legitimate interests, and to direct marketing at any time.
- Portability: get your data in a machine-readable format.
Where we rely on consent, you can withdraw it at any time. This does not affect earlier use.
To use a right, email dev@rbdesigntech.com. We reply within one month.
You can also complain to a data protection authority in the country where you live or work.
8. India (DPDP Act 2023)
If you are in India, you have the rights given by the Digital Personal Data Protection Act, 2023. Send grievances to dev@rbdesigntech.com. You can also take a complaint to the Data Protection Board of India.
9. California
If you live in California, you can ask what personal information we collect, and ask us to delete or correct it. We do not sell or share personal information for cross-context behavioural advertising. We do not discriminate against you for using these rights.
10. Cookies
We only use cookies that the site needs to work. See our cookie policy.
11. Security
We use HTTPS on every page, hash passwords, and limit staff access to personal data.
12. Changes
We update this page when our practices change. The date at the top shows the last change.