Enterprise Data Privacy & Security Policy

1. Scope and Identity of Data Fiduciary

This Data Privacy Policy governs the collection, processing, storage, and deletion of corporate and personal information by eSeva Corporate Gifting (accessible at https://corporate.eseva.co/), having its registered operational headquarters at Opp. Female Hospital, Nainital Road, Haldwani, Uttarakhand – 203139, India.

As a specialized B2B corporate gifting partner serving enterprise organizations across Mumbai, Delhi NCR, Bengaluru, Hyderabad, and pan-India industrial corridors, we operate strictly as a trusted Data Fiduciary and Processor under the provisions of the Digital Personal Data Protection Act (DPDP Act, 2023) and applicable Indian information technology statutes.

2. Categories of Information Collected

We restrict data collection exclusively to details necessary for preparing commercial proposals, manufacturing customized products, and executing door-to-door physical logistics:

• Corporate Buyer Credentials: Authorized representative full name, official corporate designation, company legal entity name, corporate email address, corporate telephone number, and registered GSTIN for taxation purposes.
• Commercial Inquiry Data: Selected gift collection (e.g., luxury dry fruit chests, artisanal sweet boxes), target delivery city, estimated unit quantity, custom logo embossing artwork specifications, and requested festival delivery schedules.
• Employee Consignment Shipping Datasets (Post-Order): When corporate clients mandate individual direct-to-home delivery for hybrid or remote workforces, we receive recipient names, residential courier addresses, PIN codes, and mobile numbers for automated courier dispatch and delivery tracking SMS notifications.
• Technical & Telemetry Data: IP address, browser type, referral URI, timestamp, session CSRF tokens, and security challenge verification responses to prevent malicious bot submissions.

3. Purpose and Legal Basis of Processing

All data received is processed under explicit lawful grounds of contractual necessity and legitimate business interest:

1. Quotation Generation & Artwork Proofing: Evaluating bulk volume pricing tiers, producing 3D digital brand sleeve mockups, and coordinating physical sample deliveries.
2. Logistics Execution & Waybill Manifesting: Transmitting shipping coordinates to vetted enterprise logistics carriers (e.g., Blue Dart, Delhivery) solely for consignment delivery execution.
3. Taxation & Statutory Compliance: Generating itemized GST commercial tax invoices with verified HSN codes in compliance with the Central Goods and Services Tax Act.
4. Anti-Abuse & Infrastructure Security: Preventing denial-of-service, automated form spamming, and unauthorized database probes.

4. Server Storage Architecture & Flat-File Security

Unlike vulnerable web platforms that store sensitive customer records in exposed online relational databases, eSeva Corporate Gifting utilizes a hardened, shared-hosting optimized flat storage architecture:

• Atomic File Locking (`LOCK_EX`): Inquiries are safely logged in server-side flat files (`/data/leads-YYYY-MM.txt`) using atomic PHP file locking to prevent data corruption or concurrent write collisions.
• Strict Apache Access Denial (`.htaccess`): Direct HTTP web requests to the `/data/` and `/config/` directories are categorically rejected by Apache web server access rules (`Deny from all`), returning an instant HTTP 403 Forbidden code.
• Zero Commercial Data Brokerage: We maintain a strict policy against selling, leasing, renting, or trading corporate contact information or employee address datasets to third-party marketing brokers or advertisers.

5. Employee Address Retention & Data Purging Schedule

6. WhatsApp Business Integration

When you initiate a quotation request via our interactive bulk calculator or contact forms, you have the option to open our verified WhatsApp Business corporate desk (https://wa.me/919650590590). Messaging on WhatsApp is protected by end-to-end encryption in accordance with WhatsApp’s enterprise security policies. We do not transmit confidential employee address databases over open messaging channels.

7. Corporate Buyer Rights

In accordance with Indian data protection legislation, authorized corporate representatives possess the following rights regarding their data:

• Right of Access & Summary: Request an audit export of all corporate contact records associated with your organization.
• Right of Correction: Request immediate rectification of outdated billing contacts or organizational details.
• Right of Erasure: Request expedited deletion of non-statutory records once delivery obligations have been fulfilled.
• Grievance Redressal: Direct escalation to our appointed Corporate Data Compliance Officer.

8. Contact Data Compliance Officer

For data protection inquiries, audit requests, or DPDP Act compliance verifications, contact our governance desk: